Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          QRZ3vol35Qtb7LODCUMEUwMS/zOMced7Cmo6as3qm4Y=
Subject key identifier:   F2:0B:98:58:FB:3B:F6:8E:93:66:34:CB:5A:AA:BF:2E:16:31:43:EE
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       47399A57B6522CD5945089152EDCE656BD1AEC4A
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 14 Oct 2026 20:40:25 +0000
ROA not before:           Wed 14 Oct 2026 20:35:25 +0000
ROA not after:            Wed 13 Oct 2027 20:40:25 +0000
asID:                     52270
IP address blocks:        190.105.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Nov 2026 03:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:39:9a:57:b6:52:2c:d5:94:50:89:15:2e:dc:e6:56:bd:1a:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Oct 14 20:35:25 2026 GMT
            Not After : Oct 13 20:40:25 2027 GMT
        Subject: CN=F20B9858FB3BF68E936634CB5AAABF2E163143EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:0a:ab:fc:82:65:31:f0:72:fe:12:7e:26:
                    5f:55:86:eb:1f:e6:f8:fa:12:b3:40:c1:b0:5b:d8:
                    fa:7a:44:ca:25:63:30:bd:70:cd:83:57:f4:b1:db:
                    16:c9:0a:cc:1c:ec:69:92:b7:74:7b:d6:cd:8e:64:
                    bc:08:96:83:fb:99:1c:f4:04:2a:43:2f:cb:c9:64:
                    97:bd:be:d9:db:2c:e3:73:ac:a3:5b:cc:d1:6b:36:
                    09:27:d6:ee:74:01:7d:af:68:fc:5c:24:23:50:43:
                    2c:e3:6e:96:60:81:ed:ec:e0:50:ca:0e:f7:3a:ff:
                    27:49:d7:e1:c6:43:91:77:ac:88:da:a1:08:33:86:
                    d3:74:e2:ef:a3:97:1c:7a:db:27:ec:c6:d7:c9:d6:
                    b1:6c:39:6d:86:5e:37:01:e4:9f:df:16:e1:0f:97:
                    9a:db:11:1b:8a:e3:4d:d3:33:b1:36:b6:8c:f0:d3:
                    73:6f:71:7c:d1:af:93:b6:4a:e5:5e:8e:dd:eb:c6:
                    5f:b5:71:f8:a3:5f:4e:59:3d:f5:60:50:c5:3d:96:
                    2d:ae:57:39:43:7b:5e:0a:c1:4d:90:75:f8:08:e8:
                    56:ec:a0:fb:e1:3d:75:37:a3:87:7f:ce:0d:ad:92:
                    8f:18:da:d0:f3:1f:ce:b3:5c:49:b4:d3:d6:18:bc:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0B:98:58:FB:3B:F6:8E:93:66:34:CB:5A:AA:BF:2E:16:31:43:EE
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:38:1e:b6:25:70:f7:84:53:83:29:d9:e8:86:b8:65:e8:
         f9:6a:e8:53:23:0c:72:bd:24:13:5c:32:5f:24:43:20:69:76:
         1c:67:a0:26:47:2b:ea:a0:77:77:8b:ac:5b:30:6d:23:af:a2:
         cf:99:32:c4:1a:5b:ad:b3:e1:90:ba:20:c9:9d:70:8c:2d:40:
         e3:80:48:0f:d4:b4:1b:ab:01:5b:70:ce:d4:00:b9:fd:c2:13:
         ac:0f:44:8f:af:ec:a5:8e:ef:0f:b4:d7:5f:86:aa:67:e4:13:
         8a:6a:c3:8a:84:04:5c:9b:ae:76:3c:d9:85:92:13:fc:41:00:
         51:57:da:8f:aa:aa:64:25:a3:8e:3a:58:8d:ed:2f:6e:88:d9:
         46:77:3d:63:b5:a1:cf:b6:4f:c0:8c:8e:de:23:2a:cb:47:55:
         04:92:d1:07:84:fb:cd:0d:1f:c4:67:08:20:fe:d1:82:1d:a1:
         31:0f:c7:77:66:a6:6a:b6:03:00:e0:fd:6a:a0:0f:26:30:f3:
         79:4a:e0:0f:26:af:e4:33:45:69:45:5a:3d:5a:ee:54:a9:36:
         c6:3a:f7:c7:a1:0c:10:7e:81:e2:8b:d0:05:ad:a9:9e:b4:14:
         43:cd:f8:80:59:14:03:b6:0b:0f:27:72:28:84:4d:9e:69:c8:
         48:7d:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 21:33:50 2026 by rpki-client