Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e342e302f32322d3234203d3e203532343638.roa
File:                     3139302e36302e342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          iZIGSHJ2yi18BYPdwrjM3qkCwcnBDFM0oswfgHaVE90=
Subject key identifier:   A2:A9:E7:32:CA:E8:AD:D6:7A:24:17:11:F9:34:37:A7:4D:3F:7E:12
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       077E39CAD5588C518EEA160C5D5D0E2A4B2033B2
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e342e302f32322d3234203d3e203532343638.roa
Signing time:             Wed 08 Apr 2026 17:38:03 +0000
ROA not before:           Wed 08 Apr 2026 17:33:03 +0000
ROA not after:            Wed 07 Apr 2027 17:38:03 +0000
asID:                     52468
IP address blocks:        190.60.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 04:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7e:39:ca:d5:58:8c:51:8e:ea:16:0c:5d:5d:0e:2a:4b:20:33:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Apr  8 17:33:03 2026 GMT
            Not After : Apr  7 17:38:03 2027 GMT
        Subject: CN=A2A9E732CAE8ADD67A241711F93437A74D3F7E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:95:6d:c3:26:70:0b:40:90:ae:9b:d5:e6:
                    48:9a:26:2d:2b:8a:23:46:ae:9b:56:93:ac:39:6d:
                    b5:a8:ad:7d:89:9b:9e:b6:5b:19:b6:02:92:7b:b5:
                    d4:4a:b0:71:10:e2:c2:fc:7a:af:69:b7:5a:4b:ff:
                    36:f5:90:38:77:9f:96:e0:a5:ca:50:49:30:76:e2:
                    b9:10:2a:e4:8e:bd:90:26:fc:b4:d0:ef:d6:38:24:
                    9b:25:a0:a4:c3:21:3b:57:89:dc:52:e9:08:8e:ea:
                    2c:d9:fc:f9:08:36:76:69:f7:66:de:f2:59:77:02:
                    59:41:77:d6:ec:16:0d:88:78:14:6f:5b:60:e4:96:
                    ce:65:d7:61:2b:f5:9c:33:ef:94:3b:a4:0e:f8:61:
                    ac:91:e1:08:f0:2f:ed:c9:3e:d1:bd:6b:c8:23:57:
                    8b:b8:46:7f:0d:55:93:2c:3d:9d:b2:c0:78:2f:46:
                    1e:8a:14:f7:04:38:b4:69:5e:9d:63:46:54:51:4b:
                    ea:71:7f:07:3c:91:99:da:de:5a:ee:12:72:73:e0:
                    4d:d3:18:8f:4a:77:fb:04:e5:b8:87:87:42:99:4c:
                    ae:ac:8e:e0:89:83:69:8b:3b:97:bd:0a:84:0e:68:
                    48:77:c2:1d:36:0a:a8:09:01:fb:1a:da:26:1b:c5:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:E7:32:CA:E8:AD:D6:7A:24:17:11:F9:34:37:A7:4D:3F:7E:12
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:e4:84:ad:e9:4c:44:b6:bb:21:53:96:6f:4f:3a:f8:73:
         a8:2a:dc:ca:31:bd:21:17:8a:9f:99:5f:2a:49:1c:ec:81:de:
         9f:dd:07:ac:ab:d5:5c:bf:22:9c:2b:8f:ff:e5:6f:4d:95:07:
         56:9a:2b:35:5c:d1:33:f0:7a:e6:a4:1b:e3:8e:9c:3c:7d:a1:
         cf:af:66:cf:ff:db:e6:da:18:bf:28:36:f3:4e:4b:1d:76:6e:
         3e:cd:1d:58:27:ec:02:13:2d:45:91:ba:1a:47:7a:68:c6:55:
         fd:50:7c:4d:a1:b2:c1:0a:a8:f0:fd:a6:3c:5c:23:c5:1a:20:
         40:72:fd:41:3f:98:10:de:ee:d5:51:cc:bb:16:cf:1c:08:d1:
         37:5b:7f:04:4d:65:f4:cc:69:91:f6:ec:40:5e:9c:c9:7f:5b:
         d0:d0:4b:74:d1:e4:54:69:20:45:47:b7:49:be:bf:be:7c:e6:
         17:01:4f:ca:58:ee:af:23:45:6d:64:85:35:4a:04:aa:5b:39:
         13:ac:d0:c5:f8:2e:33:9f:0e:9d:41:bb:de:a5:55:ee:9f:08:
         e0:dc:31:13:11:d3:2d:28:cc:b1:71:81:4c:e4:96:8b:9a:ce:
         fa:ea:b7:ec:b9:ab:9c:33:aa:f7:af:4e:8f:7e:fa:68:9c:09:
         d1:05:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:24 2026 by rpki-client