Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3139302e352e3231362e302f32312d3234203d3e203532343236.roa
File:                     3139302e352e3231362e302f32312d3234203d3e203532343236.roa (raw, json)
Hash identifier:          c+Kue6RIWEznJM3EPdCjz0R3Ncl2fc54gswW+6pZneg=
Subject key identifier:   52:46:30:FE:47:E6:08:E9:2A:34:12:26:1F:06:66:30:E3:02:1D:10
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       2A6A4592059A634AAFD3A358A0DE777B71116A41
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3139302e352e3231362e302f32312d3234203d3e203532343236.roa
Signing time:             Thu 28 May 2026 19:44:35 +0000
ROA not before:           Thu 28 May 2026 19:39:35 +0000
ROA not after:            Thu 27 May 2027 19:44:35 +0000
asID:                     52426
IP address blocks:        190.5.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 13:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6a:45:92:05:9a:63:4a:af:d3:a3:58:a0:de:77:7b:71:11:6a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: May 28 19:39:35 2026 GMT
            Not After : May 27 19:44:35 2027 GMT
        Subject: CN=524630FE47E608E92A3412261F066630E3021D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5d:8e:f9:f8:3b:e6:57:51:6a:93:1e:69:22:
                    98:a9:71:a7:4d:38:93:3c:fd:81:03:18:f1:52:a8:
                    72:22:65:97:26:ba:02:70:5c:a6:bb:cc:ea:1c:2d:
                    66:24:f7:56:26:9b:f1:15:5b:59:34:8c:5a:de:6a:
                    7d:47:28:73:90:24:a8:12:56:31:78:db:51:84:53:
                    97:e4:c8:f8:72:c9:1f:13:6a:d2:b5:6d:81:c9:68:
                    28:bc:3b:b4:88:06:a6:90:64:36:db:a6:f0:02:e5:
                    3b:61:72:6a:fa:2c:31:d1:4d:87:63:1c:2c:58:1c:
                    41:36:43:26:4f:20:27:17:3a:cd:1a:92:15:80:58:
                    f3:af:cd:8b:a1:f3:c8:a6:67:14:92:30:d4:12:d7:
                    06:f1:10:79:93:5f:53:51:7f:36:c7:9d:57:63:5f:
                    cf:26:f2:93:6e:eb:44:e7:76:0b:27:2d:08:5d:d1:
                    b6:28:a3:cf:48:d5:9c:c6:52:d7:4c:76:48:c7:45:
                    e6:95:cb:a6:3f:ae:5f:df:12:79:53:83:f8:34:1a:
                    fe:f8:61:31:05:39:f1:94:bf:c6:66:32:36:b5:7d:
                    ca:0f:45:cd:8e:f9:b2:91:d1:2d:64:b6:6c:37:62:
                    b3:eb:a9:89:be:c3:2e:33:e5:40:53:f7:7f:91:17:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:30:FE:47:E6:08:E9:2A:34:12:26:1F:06:66:30:E3:02:1D:10
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3139302e352e3231362e302f32312d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:46:22:84:68:5b:78:09:90:b0:7e:fc:02:1f:59:a7:06:
         1a:e1:3f:03:2d:96:96:4b:cc:89:d7:ae:50:d9:85:37:01:7a:
         95:d5:d3:21:02:8e:25:3f:ab:ee:13:38:67:4f:6b:57:87:a9:
         1c:bb:53:51:95:64:1b:bb:f1:7c:d2:de:77:67:4e:35:61:56:
         3e:df:8e:7f:97:35:e4:fd:b5:a8:bf:c3:e3:80:3a:02:d1:39:
         38:5f:aa:d1:42:6f:84:fe:67:35:5d:2d:ee:2d:4a:2b:2e:89:
         a9:55:ed:77:37:fe:40:d8:16:88:c6:4e:6d:be:50:5f:a4:7c:
         ef:a4:ed:89:b1:5b:b3:06:3f:75:36:73:52:d6:5b:72:27:d5:
         c4:0a:d3:17:00:de:e1:fa:d7:0a:1d:da:97:a8:db:4a:1c:e6:
         d1:ab:f7:90:b7:5e:bc:0a:cf:95:c8:a5:e6:85:f0:81:4f:af:
         5f:1b:df:e0:5b:c7:09:fa:ba:c8:f8:f3:05:e2:a2:f6:ce:62:
         9c:ee:1b:60:f9:df:21:2b:a4:79:5e:9b:5a:55:25:5c:2c:b6:
         7d:ec:7d:85:f5:3c:98:85:15:c6:6d:fa:25:28:83:7d:2d:cc:
         38:70:45:9f:f6:4d:b2:42:57:1a:a9:f6:97:e0:42:90:b8:b7:
         31:b2:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:04:49 2026 by rpki-client