Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa
File:                     3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          7+v3nYgPNUU7/OMzHZaprghfwaotlleoXy0KOA3SjGA=
Subject key identifier:   82:D0:BC:4B:6E:ED:A7:34:18:76:25:20:9E:D5:A7:84:12:B9:AD:1B
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       45FBBFDC8319422406F701136E777AE50DC22C97
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:36 +0000
ROA not before:           Fri 11 Sep 2026 15:30:36 +0000
ROA not after:            Fri 10 Sep 2027 15:35:36 +0000
asID:                     262216
IP address blocks:        190.60.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fb:bf:dc:83:19:42:24:06:f7:01:13:6e:77:7a:e5:0d:c2:2c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Sep 11 15:30:36 2026 GMT
            Not After : Sep 10 15:35:36 2027 GMT
        Subject: CN=82D0BC4B6EEDA734187625209ED5A78412B9AD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:88:37:ea:32:3b:8c:f0:08:7b:08:a5:05:
                    38:82:66:5d:88:0c:b7:22:24:ff:b2:dc:e6:26:c3:
                    49:8f:9b:f7:c3:f1:99:66:fa:08:7b:6e:3c:87:db:
                    7e:6e:d1:67:57:a0:11:1f:71:8d:7b:18:6d:d7:70:
                    01:19:7d:51:58:86:46:1a:49:7f:ca:17:70:d2:7b:
                    0e:3d:3d:e3:ec:7f:59:76:17:9c:0a:d9:d0:31:5b:
                    be:2c:aa:51:53:69:61:db:a8:7e:c7:75:bc:c7:9e:
                    00:59:90:5a:86:57:ea:66:6f:0c:44:72:e5:c4:70:
                    34:01:d9:6c:8b:b9:6c:50:7a:25:03:24:a6:22:35:
                    e3:d7:0e:71:fb:b9:08:a6:71:8e:a8:08:c3:c2:1f:
                    a0:22:d6:21:c0:e0:72:c6:6c:3d:e1:e5:7f:4e:29:
                    0c:a4:f0:0a:45:b3:91:d9:35:6a:45:8a:4e:d3:5e:
                    db:a8:7c:ba:4d:1f:05:6d:f8:a1:cc:34:cb:e5:2a:
                    18:74:55:3b:6d:c7:b6:8a:80:7d:df:b8:b1:23:26:
                    89:6c:1f:35:55:d8:c0:21:73:93:98:e5:ac:13:c3:
                    08:f8:8f:1d:23:35:99:84:bd:22:a6:15:78:3b:fd:
                    20:32:40:29:c0:73:3e:92:4f:e1:4f:9d:45:99:e1:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:BC:4B:6E:ED:A7:34:18:76:25:20:9E:D5:A7:84:12:B9:AD:1B
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:76:9b:fc:86:98:1a:b7:60:76:c0:04:e9:f8:a4:d9:a5:
         ed:77:ff:40:14:86:f6:32:23:59:c0:db:53:33:b3:c5:36:4d:
         7e:0f:88:77:e1:0a:57:b7:08:23:da:fc:97:b5:34:b6:5f:9d:
         4f:09:a8:46:3a:5e:06:e6:99:bb:c8:dc:ca:e1:47:56:b7:23:
         60:3d:93:00:6b:c9:4e:b4:61:d1:72:52:e1:6b:4d:4b:43:de:
         da:8f:87:25:d7:dd:1d:b2:15:1e:47:b6:1b:bc:63:2c:3e:ca:
         b4:fa:31:5b:88:f8:fd:49:f0:5e:6c:0a:88:ac:64:03:3e:ad:
         6a:68:05:68:43:8e:51:b1:80:92:8a:01:0c:8e:9e:82:9c:8e:
         50:a2:60:f8:e1:81:4b:42:59:d4:c9:e5:a6:ec:bd:ab:e5:85:
         ba:fc:59:41:00:c8:77:83:30:06:7d:d0:0c:61:48:06:6c:76:
         e7:c7:7d:02:fc:9f:81:c6:36:6d:1f:31:33:b8:0a:0f:fb:9d:
         ef:16:b6:56:14:af:aa:c9:d7:ce:d2:2e:c6:10:64:ac:98:dd:
         ff:1a:6c:d3:b5:fd:87:71:bf:19:ad:73:8f:e0:40:6d:63:e9:
         a9:41:e0:39:17:4c:4b:87:56:38:d4:81:e1:e2:d3:b3:a0:e7:
         52:df:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:35:32 2026 by rpki-client