Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa
File:                     3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (raw, json)
Hash identifier:          5KDksdh/kS2TEE0iZShC3+eJma/c1Kj8GO1qMma1g3E=
Subject key identifier:   5F:11:64:3F:AE:3A:98:21:02:95:69:00:13:F5:60:C2:01:A0:7F:F2
Certificate issuer:       /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
Certificate serial:       5B5F0E2C4111F1EC62A69F9DB6F2E546504D246A
Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa
Signing time:             Wed 25 Feb 2026 12:31:46 +0000
ROA not before:           Wed 25 Feb 2026 12:26:46 +0000
ROA not after:            Wed 24 Feb 2027 12:31:46 +0000
asID:                     273175
IP address blocks:        190.110.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 08:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:0e:2c:41:11:f1:ec:62:a6:9f:9d:b6:f2:e5:46:50:4d:24:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
        Validity
            Not Before: Feb 25 12:26:46 2026 GMT
            Not After : Feb 24 12:31:46 2027 GMT
        Subject: CN=5F11643FAE3A98210295690013F560C201A07FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:11:06:77:03:a6:ef:4f:ad:3f:b4:b9:64:
                    a3:b2:b9:f3:8c:39:d3:39:17:f8:a5:3b:68:b8:76:
                    ba:30:a2:ec:c8:53:20:d9:aa:fb:99:f3:ec:f1:b8:
                    32:78:35:38:05:00:c3:6f:03:b9:d3:ff:0a:eb:84:
                    1d:50:08:87:95:be:2c:c1:e9:a9:39:31:70:88:7a:
                    0c:bf:f9:be:51:63:42:91:b8:0e:f3:e8:63:9b:d1:
                    d7:a9:db:d8:82:27:72:c9:90:af:76:96:1a:77:8a:
                    15:b1:71:e9:1f:83:da:4d:69:59:4f:d4:98:d2:dc:
                    cb:29:c0:ba:76:53:b7:93:43:93:6f:5b:6f:75:f4:
                    43:8c:ce:2e:c8:58:fa:78:30:1b:5c:d0:1e:83:0d:
                    ef:e4:51:ff:4b:a1:ab:53:cc:98:93:29:c6:1f:bb:
                    78:70:de:30:a6:01:12:08:4c:ce:34:db:da:84:ce:
                    d9:b0:42:6a:51:c1:85:17:25:52:18:11:de:7b:41:
                    67:b3:25:50:ce:ae:30:56:92:24:3b:7c:06:d8:fe:
                    fc:77:da:07:4d:91:4a:b7:ec:bd:82:2a:d8:f5:f4:
                    c6:f6:97:6b:ef:50:01:70:b2:98:2b:c5:b8:0a:cb:
                    8b:f3:c3:1b:bd:0b:af:81:26:eb:8d:9d:a9:8e:1a:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:64:3F:AE:3A:98:21:02:95:69:00:13:F5:60:C2:01:A0:7F:F2
            X509v3 Authority Key Identifier:
                keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:38:65:94:74:77:7b:75:b0:7b:c0:da:c8:b3:8c:9f:f3:23:
         0e:1b:b0:0b:f7:cb:c1:93:81:dd:69:75:42:cf:d1:67:b2:fd:
         5a:c8:47:89:22:e4:ed:a1:78:74:b9:d6:09:16:df:02:bd:cb:
         08:d5:b8:7f:8a:8e:cb:ab:fe:15:00:ac:26:10:04:96:c7:28:
         0c:14:d3:89:fe:85:11:dc:51:ca:40:d3:ee:b3:c8:96:d3:98:
         7c:b0:02:47:82:af:ae:93:93:52:76:d6:56:56:aa:bf:cc:19:
         fe:08:f5:1b:1d:93:ac:93:8f:b7:4c:15:98:7b:ef:45:b6:ed:
         eb:ed:d4:46:08:67:dd:4e:1f:f4:d7:84:26:20:c9:8d:80:b1:
         5d:0c:a5:03:94:84:6d:ed:b1:53:3f:14:02:8b:dd:64:8c:5a:
         e7:75:97:d3:a0:f0:0f:36:41:57:66:9a:51:f3:cd:31:e3:7d:
         c4:53:51:e5:19:6c:a9:95:85:bf:5d:4e:83:d3:c8:10:e9:4d:
         90:2e:18:bd:10:6c:7c:d7:3a:fc:5d:e4:ea:b5:9e:fb:aa:7a:
         94:00:7f:95:b4:f9:92:70:e4:7c:d9:d0:22:ca:0c:74:9b:53:
         5f:7f:ec:b5:b6:be:94:a7:18:33:83:f7:1e:3f:9b:73:f0:22:
         30:ff:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:58 2026 by rpki-client