Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa
File:                     3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa (raw, json)
Hash identifier:          huHVu6QLwKI/RTY/ehAzWqhkOG0leYAFfHFXeWq8sc0=
Subject key identifier:   3F:4E:C9:91:B7:18:4C:85:DD:7C:90:FF:89:2D:5B:BC:60:72:FF:B7
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       33F41C8718220B5C3E61A3B7D43D3B0F1DD17D4B
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa
Signing time:             Fri 27 Mar 2026 23:36:23 +0000
ROA not before:           Fri 27 Mar 2026 23:31:23 +0000
ROA not after:            Fri 26 Mar 2027 23:36:23 +0000
asID:                     28049
IP address blocks:        190.121.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f4:1c:87:18:22:0b:5c:3e:61:a3:b7:d4:3d:3b:0f:1d:d1:7d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Mar 27 23:31:23 2026 GMT
            Not After : Mar 26 23:36:23 2027 GMT
        Subject: CN=3F4EC991B7184C85DD7C90FF892D5BBC6072FFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:71:73:80:0b:4d:2a:1e:f4:c2:c1:ee:77:
                    2a:7d:79:65:79:3e:95:02:d8:89:04:81:d2:bb:2e:
                    9e:bd:65:29:b0:b1:04:b0:61:3a:51:cb:58:91:17:
                    1c:df:7f:68:70:5a:8d:8e:f6:ae:71:58:05:95:51:
                    b7:7c:6d:b9:41:cf:9d:5d:b2:99:37:f2:06:ad:cb:
                    49:80:95:7b:63:47:0d:64:2f:58:ca:45:af:44:2e:
                    c0:87:5d:ed:1d:c9:a0:64:86:b3:76:7a:99:fd:61:
                    0a:a3:c3:57:e5:8b:59:b1:d0:c5:11:a2:60:04:9f:
                    b4:ce:67:e4:75:c6:73:bb:bb:2a:bf:da:84:2a:db:
                    36:5d:99:dc:4e:37:a3:71:1e:94:01:22:cd:f4:fd:
                    a0:8c:e1:11:ec:76:6a:9f:3b:49:43:5a:75:cd:6e:
                    43:46:a1:a9:49:c1:41:6e:ae:34:9c:80:45:42:aa:
                    1b:37:07:50:5e:a3:cd:74:40:17:6a:25:98:9e:6c:
                    e5:9e:66:59:46:60:c8:fa:c5:69:89:5b:3f:c6:d1:
                    c3:01:19:e2:03:4b:2d:3c:6b:81:8a:76:90:05:cc:
                    44:30:9d:e3:e7:dc:9f:71:d8:2f:30:80:ac:9e:73:
                    83:89:f1:d2:66:08:95:39:5b:a0:62:50:9b:70:bc:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:C9:91:B7:18:4C:85:DD:7C:90:FF:89:2D:5B:BC:60:72:FF:B7
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:d7:cc:93:32:5e:be:70:3e:fa:9c:cb:97:7b:e5:e4:d7:
         a4:25:c3:92:96:a9:ba:2c:0e:e1:f6:c5:9c:78:80:cc:d3:28:
         32:f7:5d:68:02:86:81:6c:32:48:e3:90:36:07:e0:e4:cc:d7:
         c4:63:fd:26:f9:f4:a4:ba:9b:dc:e7:1b:9f:d6:90:93:4e:13:
         38:b6:31:0d:e0:5d:18:b6:68:4f:5d:b0:1f:7d:2c:0f:e5:71:
         93:a6:ab:33:b0:2f:1a:42:56:c9:6d:2f:04:6a:52:ee:85:82:
         d7:7e:3c:e7:76:f1:36:72:80:55:7f:b2:51:b7:af:17:a3:2a:
         28:2c:77:0d:a6:ab:44:02:e9:ba:29:21:73:7f:3f:9d:db:ed:
         3d:73:a4:cc:b2:66:4d:91:74:dc:57:bc:51:b5:51:7a:cc:69:
         c1:ac:42:ad:07:63:0b:7b:05:b8:13:04:53:da:23:cf:9c:ad:
         07:e3:4f:62:b1:fd:1d:2b:d0:1e:a5:f8:bb:8c:60:56:24:59:
         7d:f1:97:c3:e6:b0:2c:13:09:de:9c:cf:4a:9e:6d:56:0c:23:
         80:92:85:96:5f:30:ef:18:c9:2d:76:b6:99:03:29:51:b6:48:
         5d:16:ba:5b:24:06:46:b1:e7:2e:97:5e:c3:b1:34:d4:75:0c:
         48:ce:76:31
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUM/QchxgiC1w+YaO31D07Dx3RfUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2RTM5NEZGNjAzODVDMTZDMTkyRkI2RUY1QjE0QThG
OTE4MzA5ODAeFw0yNjAzMjcyMzMxMjNaFw0yNzAzMjYyMzM2MjNaMDMxMTAvBgNV
BAMTKDNGNEVDOTkxQjcxODRDODVERDdDOTBGRjg5MkQ1QkJDNjA3MkZGQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgx3FzgAtNKh70wsHudyp9eWV5
PpUC2IkEgdK7Lp69ZSmwsQSwYTpRy1iRFxzff2hwWo2O9q5xWAWVUbd8bblBz51d
spk38gaty0mAlXtjRw1kL1jKRa9ELsCHXe0dyaBkhrN2epn9YQqjw1fli1mx0MUR
omAEn7TOZ+R1xnO7uyq/2oQq2zZdmdxON6NxHpQBIs30/aCM4RHsdmqfO0lDWnXN
bkNGoalJwUFurjScgEVCqhs3B1Beo810QBdqJZiebOWeZllGYMj6xWmJWz/G0cMB
GeIDSy08a4GKdpAFzEQwnePn3J9x2C8wgKyec4OJ8dJmCJU5W6BiUJtwvAxvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUP07JkbcYTIXdfJD/iS1bvGBy/7cwHwYDVR0j
BBgwFoAUs245T/YDhcFsGS+271sUqPkYMJgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDAyM0UyOTdFREIwMzdDODdFMjA0NzZGNDRBMUI5OTk2
MThBNkY0OTQ2REZGQkJENjM3NjIyMzcyQ0E3QjU2LzAvQjM2RTM5NEZGNjAzODVD
MTZDMTkyRkI2RUY1QjE0QThGOTE4MzA5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzZFMzk0RkY2MDM4NUMxNkMx
OTJGQjZFRjVCMTRBOEY5MTgzMDk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQwMjNFMjk3RURCMDM3Qzg3RTIwNDc2RjQ0QTFCOTk5NjE4QTZGNDk0
NkRGRkJCRDYzNzYyMjM3MkNBN0I1Ni8wLzMxMzkzMDJlMzEzMjMxMmUzMTM5MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzAzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnnA
MA0GCSqGSIb3DQEBCwUAA4IBAQC3B9fMkzJevnA++pzLl3vl5NekJcOSlqm6LA7h
9sWceIDM0ygy911oAoaBbDJI45A2B+DkzNfEY/0m+fSkupvc5xuf1pCTThM4tjEN
4F0YtmhPXbAffSwP5XGTpqszsC8aQlbJbS8EalLuhYLXfjzndvE2coBVf7JRt68X
oyooLHcNpqtEAum6KSFzfz+d2+09c6TMsmZNkXTcV7xRtVF6zGnBrEKtB2MLewW4
EwRT2iPPnK0H409isf0dK9Aepfi7jGBWJFl98ZfD5rAsEwnenM9Knm1WDCOAkoWW
XzDvGMktdraZAylRtkhdFrpbJAZGsecul17DsTTUdQxIznYx
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:52:17 2026 by rpki-client