Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e35322e302f32342d3234203d3e20323634363638.roa
File:                     3139302e36312e35322e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          j67wRkTT0b1vGV7Fo6X4UOfWaRJyOaRDdN8SvrzpCTk=
Subject key identifier:   D7:BB:D9:A5:AB:24:C6:16:D2:A8:49:24:A1:3F:1A:1C:63:1B:D9:76
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       5AC5579EEFBBFCC261C3D0E73A7A9075369D6EFF
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e35322e302f32342d3234203d3e20323634363638.roa
Signing time:             Fri 10 Apr 2026 03:35:00 +0000
ROA not before:           Fri 10 Apr 2026 03:30:00 +0000
ROA not after:            Fri 09 Apr 2027 03:35:00 +0000
asID:                     264668
IP address blocks:        190.61.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 01:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c5:57:9e:ef:bb:fc:c2:61:c3:d0:e7:3a:7a:90:75:36:9d:6e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Apr 10 03:30:00 2026 GMT
            Not After : Apr  9 03:35:00 2027 GMT
        Subject: CN=D7BBD9A5AB24C616D2A84924A13F1A1C631BD976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:d1:92:75:f5:23:3a:ee:6d:fd:b3:c2:b5:
                    8d:22:c7:46:87:d3:ea:91:41:62:a2:87:ce:b1:9b:
                    8e:2e:21:a1:4b:4c:72:32:c5:c6:b5:66:e9:56:b0:
                    ac:ab:bb:4c:1f:37:cf:38:8a:ec:93:f0:33:64:86:
                    3c:8e:bb:d9:29:d1:52:60:c1:5b:53:96:f7:98:cc:
                    17:30:1d:36:97:05:6c:7b:fc:69:3e:9c:2b:47:f9:
                    99:3a:7e:82:12:3b:11:f9:81:91:63:5e:aa:ae:1d:
                    8c:a5:03:22:e7:c8:ce:fe:85:bb:25:3a:c6:0d:8c:
                    eb:5c:9d:ff:3c:56:3b:00:29:f6:32:89:27:10:7e:
                    05:e1:7c:d6:6b:b0:1b:5e:ee:ab:3f:8d:07:4f:9f:
                    8c:26:ac:c2:96:c5:89:f6:45:d5:11:34:5b:44:99:
                    43:58:ae:51:a3:6e:d4:29:c8:90:8b:3f:d8:f8:f9:
                    e5:99:45:dc:94:ee:53:ee:59:2a:ca:48:7e:2e:1f:
                    f9:93:a9:de:64:c2:fc:40:77:cb:29:06:9b:36:12:
                    bd:b1:b2:42:4b:e9:1d:92:7c:96:ba:4f:6f:f0:9b:
                    22:ba:27:8a:2e:31:7d:84:35:51:37:c2:ab:54:a2:
                    57:bb:d7:75:f2:2b:99:fb:92:1a:d6:c2:37:7b:d1:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:D9:A5:AB:24:C6:16:D2:A8:49:24:A1:3F:1A:1C:63:1B:D9:76
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e35322e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:e0:97:cd:bb:88:9e:cd:8a:de:a9:8d:3e:c5:a3:81:90:
         cf:17:6b:0e:50:12:f9:bf:51:f7:0d:be:2a:a6:5a:45:82:ea:
         2a:16:60:3c:37:58:17:49:93:28:2e:9c:7c:81:cd:bb:85:41:
         67:5b:28:c8:71:0f:c3:b9:f9:39:97:af:b2:88:d1:6c:dd:22:
         36:dc:51:7b:92:27:5f:fd:7d:cf:b9:75:ff:38:e0:11:d6:75:
         dd:15:5c:9f:fd:df:7a:7c:01:eb:22:6a:ac:4b:68:e1:45:5e:
         b4:bf:00:17:5f:74:3c:ad:9a:76:dd:5e:cc:73:0c:92:53:a1:
         11:93:bf:78:76:7f:71:23:4e:b5:4e:87:10:8e:96:c0:5e:b1:
         d4:0a:e7:7f:fc:06:d0:b8:f7:8f:d1:bc:c5:74:fc:f7:c5:d6:
         fa:f6:e9:9c:c2:3f:7e:8a:d3:ba:b0:b4:74:78:66:e1:72:49:
         4b:4c:43:4e:d3:26:41:71:57:f6:2e:da:51:4f:bb:08:35:cc:
         50:54:a7:27:2e:a0:f0:d8:7d:35:aa:94:ea:6e:e5:16:b7:43:
         77:28:cc:da:d0:3c:11:bf:76:df:63:21:24:ec:fa:84:fe:fb:
         b4:48:56:fa:84:31:39:a9:75:af:eb:bd:e0:32:a6:f5:d2:28:
         4f:50:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:13:12 2026 by rpki-client