Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132312e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3130322e3132312e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          VWcQzNG9BIxtZQwcTQs4mZBQtvpI2RG/352pfOLEYpg=
Subject key identifier:   9E:DF:A8:BC:06:10:E3:D9:16:43:24:C6:FF:06:C9:1D:CD:EF:12:C9
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       0AE528BB351D80D05A6406A7D0D68790736BEE5C
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132312e302f32342d3234203d3e20323632353839.roa
Signing time:             Sat 29 Aug 2026 03:00:06 +0000
ROA not before:           Sat 29 Aug 2026 02:55:06 +0000
ROA not after:            Sat 28 Aug 2027 03:00:06 +0000
asID:                     262589
IP address blocks:        190.102.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e5:28:bb:35:1d:80:d0:5a:64:06:a7:d0:d6:87:90:73:6b:ee:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:06 2026 GMT
            Not After : Aug 28 03:00:06 2027 GMT
        Subject: CN=9EDFA8BC0610E3D9164324C6FF06C91DCDEF12C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:ad:14:3a:70:3b:5d:3f:2f:cd:e1:92:21:
                    73:91:33:c6:bd:bf:f4:37:fa:1f:59:06:2f:e4:99:
                    a7:9a:e4:c8:b5:58:0d:15:12:f3:c0:77:7f:01:ab:
                    3f:44:6a:27:17:0c:1c:5a:2a:89:b3:4a:05:5d:e1:
                    8b:ac:f1:9d:c5:0c:48:e5:5e:d7:1e:f8:d9:d5:46:
                    3d:7d:83:59:17:0c:2a:a7:cc:5f:5b:57:33:ca:6b:
                    5a:eb:10:97:69:c6:ed:e3:76:39:35:b0:b8:4f:74:
                    3d:b4:90:ba:c4:95:86:f5:a8:0e:e3:fa:d1:82:e7:
                    ca:3c:17:2e:df:73:3e:d2:06:95:55:e7:c5:dc:fa:
                    f7:04:62:cd:56:83:9e:50:2b:0e:0a:27:33:30:28:
                    49:3f:20:d3:60:f4:8f:88:e5:b4:35:27:45:f7:f9:
                    32:7b:1d:76:af:53:e2:61:24:42:03:6d:f5:f8:36:
                    a7:e8:fb:c4:49:6d:fe:04:a2:bf:a6:26:9f:49:78:
                    ef:e9:66:a4:d5:d0:b2:92:f1:fa:d6:28:ad:96:cc:
                    16:84:6f:8c:16:0f:1a:90:a3:3f:08:71:be:b0:73:
                    e3:49:74:97:f0:16:1b:5d:f1:94:42:b8:24:f3:b3:
                    5c:f3:69:d3:59:ea:20:4f:11:8e:15:b1:fe:80:d3:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DF:A8:BC:06:10:E3:D9:16:43:24:C6:FF:06:C9:1D:CD:EF:12:C9
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132312e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:bd:03:ea:5c:cd:10:e6:a2:0c:43:85:12:29:7e:44:47:
         c0:ac:94:b3:6f:5e:7a:ab:a2:50:2c:5a:c4:1d:cc:a8:68:00:
         8a:99:e9:63:4d:eb:80:39:82:c1:5a:4e:f0:15:da:d3:df:44:
         27:ff:b4:3d:32:7f:cf:a4:1f:de:7b:fc:3d:2d:f1:39:3e:3a:
         b3:1c:65:04:83:3d:33:c8:1e:b3:e6:12:63:56:45:a5:0d:11:
         0d:2f:d2:3c:72:f1:d9:05:d1:1a:43:d9:cb:fe:15:52:e4:b1:
         b8:10:c1:53:4a:4f:84:0b:57:8c:ed:a9:68:4b:14:fa:a1:8b:
         8c:6b:52:3c:fb:26:d4:75:04:2d:6c:07:54:ec:ee:84:79:ce:
         96:e9:52:1d:b7:fd:b5:91:93:82:8b:c3:da:48:da:b1:77:44:
         72:85:cf:4b:28:ba:1b:8f:dc:63:f1:99:7e:18:ae:00:18:73:
         a5:9d:e9:fd:74:8b:fc:9b:32:fd:2d:7d:b8:16:47:75:56:0d:
         5e:ea:ff:19:18:2b:05:ae:a2:ee:9d:eb:4a:ec:40:38:97:11:
         e2:5f:d6:57:aa:3c:ae:0e:43:01:80:74:22:71:53:15:0b:9b:
         c7:86:4a:c6:a3:63:07:0b:9b:39:15:2f:2a:9d:7c:c7:ff:dd:
         c8:b2:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:28:20 2026 by rpki-client