Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31382d3234203d3e203237383834.roa
File:                     3139302e39322e302e302f31382d3234203d3e203237383834.roa (raw, json)
Hash identifier:          Jv1UBgSIk38cngvCBslyT4P4VKcxfHPxrLzuKh8h+NE=
Subject key identifier:   D0:6C:EC:67:1C:F5:0E:2A:52:4F:B0:47:26:14:78:14:4A:17:D2:AE
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       7437E2875FF02CC2C9171AF6841EBD8533FF11DF
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31382d3234203d3e203237383834.roa
Signing time:             Fri 03 Apr 2026 21:37:27 +0000
ROA not before:           Fri 03 Apr 2026 21:32:27 +0000
ROA not after:            Fri 02 Apr 2027 21:37:27 +0000
asID:                     27884
IP address blocks:        190.92.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 16:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:37:e2:87:5f:f0:2c:c2:c9:17:1a:f6:84:1e:bd:85:33:ff:11:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Apr  3 21:32:27 2026 GMT
            Not After : Apr  2 21:37:27 2027 GMT
        Subject: CN=D06CEC671CF50E2A524FB047261478144A17D2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:f4:c4:3a:8e:e1:60:47:2b:5d:77:a7:9b:
                    e9:55:b7:63:ab:7a:22:d2:e0:5a:fb:99:13:55:91:
                    0f:cf:aa:2e:3d:73:7b:27:a0:78:6b:44:4b:fa:d8:
                    55:39:15:6f:24:d0:c0:cf:24:77:d1:e3:ac:c7:68:
                    0f:f0:b8:18:b3:42:fd:be:8f:f2:ac:01:b3:0f:ac:
                    e9:c1:66:21:f0:81:a8:64:d3:60:74:c3:75:bd:72:
                    f5:50:cc:d1:22:a4:b9:91:c7:f7:a2:f0:08:13:04:
                    dc:70:d5:1d:c4:1e:62:4d:6b:c6:25:3e:96:8b:ae:
                    ae:f6:e0:1d:e2:dd:3e:49:13:71:3f:28:39:dc:14:
                    fa:b7:45:97:c1:00:55:9b:95:44:7e:2f:69:89:ea:
                    fe:60:5c:05:d3:9a:f6:e0:93:ab:46:08:c2:33:1a:
                    26:a7:5d:3d:c5:c6:67:84:e4:70:69:fe:f8:85:2b:
                    5e:ca:64:23:fa:16:0d:25:31:a2:30:cf:55:30:46:
                    37:8e:aa:cf:d4:6a:a2:d2:b8:a6:0c:31:e8:c2:6c:
                    24:f8:8b:05:7e:d4:cc:dc:a0:b0:2f:b4:4f:49:4e:
                    32:f8:13:eb:e0:1a:d6:a6:b8:e0:86:a4:d3:c4:e0:
                    af:c8:4c:91:de:8b:29:0c:e9:7c:f3:57:89:80:b0:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:EC:67:1C:F5:0E:2A:52:4F:B0:47:26:14:78:14:4A:17:D2:AE
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31382d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:92:d7:b6:2d:c9:12:74:5c:d6:83:86:13:ef:e0:a8:07:d9:
         07:3e:99:96:07:8d:85:b4:8b:48:a9:c6:86:2e:73:e0:15:f0:
         e6:2f:e7:72:4d:06:eb:5d:21:5e:a4:e9:1e:00:f6:f9:f8:0c:
         03:d6:7f:ce:38:27:de:1a:79:4e:9a:1c:f6:14:9b:8e:a9:cd:
         a8:64:ec:ea:c0:60:f9:0c:6d:c5:6a:04:73:b3:50:40:51:08:
         b7:55:e1:e4:67:c9:03:bc:ad:1a:72:15:23:92:c2:f4:ea:cb:
         b8:9e:1e:b2:2a:f9:48:00:40:37:ba:ec:b5:31:95:5e:34:54:
         59:bb:2e:7b:ec:dd:d3:85:f4:08:56:30:4f:da:7c:0a:72:f2:
         f8:c8:57:e8:6d:bf:34:22:26:3d:c2:a2:46:79:f0:bf:9d:67:
         1a:78:6a:cb:80:7e:5c:b5:c3:1a:cb:48:6b:ba:fa:db:9e:c0:
         41:ed:64:38:9c:72:bc:29:e6:14:09:a6:07:9f:1d:6b:f3:23:
         71:ea:f7:0b:f0:7e:9b:49:49:71:54:f1:03:fc:3a:23:74:44:
         71:ec:12:2d:9a:81:a8:fa:d2:33:86:b7:c6:95:29:23:37:8e:
         10:f9:1b:c5:01:c5:28:b7:a1:5b:b2:9f:59:ba:3d:d5:ec:dc:
         a8:3e:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:31 2026 by rpki-client