Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/3139302e3131302e3235302e302f32332d3233203d3e203532333939.roa
File:                     3139302e3131302e3235302e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier:          rUOKy08/TJDZlPr/vhOZLrOzaXauixbpVjyNlJ3DgJQ=
Subject key identifier:   7E:93:F4:36:93:18:66:A6:E5:62:72:00:D7:54:7A:94:8F:49:DF:B6
Certificate issuer:       /CN=6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240
Certificate serial:       57363DB76A555FF8B572C3F9875DB02DE9C65DBD
Authority key identifier: 6A:DC:27:4D:DF:9A:FC:B5:F3:B3:14:AD:57:35:CF:ED:B1:1B:D2:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/3139302e3131302e3235302e302f32332d3233203d3e203532333939.roa
Signing time:             Thu 02 Apr 2026 16:35:00 +0000
ROA not before:           Thu 02 Apr 2026 16:30:00 +0000
ROA not after:            Thu 01 Apr 2027 16:35:00 +0000
asID:                     52399
IP address blocks:        190.110.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:3d:b7:6a:55:5f:f8:b5:72:c3:f9:87:5d:b0:2d:e9:c6:5d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240
        Validity
            Not Before: Apr  2 16:30:00 2026 GMT
            Not After : Apr  1 16:35:00 2027 GMT
        Subject: CN=7E93F436931866A6E5627200D7547A948F49DFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:52:5f:2f:f1:99:0b:24:ef:26:ad:88:c3:
                    f0:3a:8b:1d:c3:ab:47:92:f7:a5:a9:cc:6a:de:5f:
                    59:7d:50:bb:76:7e:82:da:f6:4f:d2:15:9b:83:62:
                    b1:45:29:98:9b:f1:c1:b9:0f:c5:ce:69:bb:34:d8:
                    81:3d:06:4f:c6:85:17:3e:03:c8:9c:1d:b5:0b:bd:
                    f7:56:84:f6:2b:e6:20:7f:67:f9:69:da:22:07:9a:
                    6a:1d:68:68:7e:be:a0:98:c9:83:6d:1f:da:e7:76:
                    0a:39:25:91:8f:d7:64:ff:93:36:0c:a0:60:d9:5e:
                    8d:8f:c6:0e:f5:56:90:bf:c1:ae:f7:9f:61:99:8d:
                    af:eb:10:e2:7f:6e:ff:85:04:da:bd:8d:44:1f:fb:
                    a3:4e:44:56:e2:d1:be:e7:3e:39:61:90:f5:88:b8:
                    c7:03:04:85:32:c4:79:9e:d3:8b:e4:08:31:49:57:
                    c3:91:e1:57:ef:57:5f:3e:6b:36:8e:97:70:97:82:
                    59:a5:29:c7:2c:2a:26:14:1b:8c:c9:0c:6b:31:4a:
                    fa:00:a9:64:1f:5f:c9:ee:a2:57:46:14:2c:e7:09:
                    f8:59:0e:a6:16:4e:2a:7f:15:23:49:cf:9f:b9:2c:
                    c2:95:9c:5b:d3:5e:b9:b0:c6:57:90:82:fa:70:69:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:F4:36:93:18:66:A6:E5:62:72:00:D7:54:7A:94:8F:49:DF:B6
            X509v3 Authority Key Identifier:
                keyid:6A:DC:27:4D:DF:9A:FC:B5:F3:B3:14:AD:57:35:CF:ED:B1:1B:D2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/3139302e3131302e3235302e302f32332d3233203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:bb:4a:7e:b9:2d:7d:04:81:05:e7:4c:41:ad:97:af:13:
         d3:80:6a:3e:26:a5:ab:82:3b:92:1c:a1:06:e8:11:6a:54:5e:
         89:4c:80:cd:a9:66:6e:69:21:e2:f5:23:f0:1c:5c:14:a0:49:
         2f:16:aa:36:e5:67:d0:80:5e:4e:d3:be:f7:8f:63:91:54:81:
         15:02:2e:bc:f3:da:52:06:03:b2:87:85:b9:c2:9e:18:b2:5a:
         29:a9:2c:8c:c0:b7:a3:2b:c7:b8:3c:26:8f:09:9b:c1:04:79:
         d8:d7:57:a1:75:f6:ce:7a:2c:e7:d5:79:14:54:8a:94:6a:e4:
         45:9c:49:32:78:de:63:ed:49:db:fe:a2:cb:01:ae:1f:28:9f:
         98:5c:ed:e5:ff:57:55:d3:84:2a:0d:75:0f:23:e7:a1:57:11:
         d6:cb:19:55:fe:c0:25:4e:47:94:0f:f0:72:7f:b2:93:b4:cd:
         27:57:56:21:23:10:14:91:65:e3:7b:77:71:b8:76:a3:9d:50:
         e1:04:8d:cd:2e:8a:f6:e2:b2:7b:5e:2e:26:9d:d2:d2:99:24:
         9c:65:a7:53:25:51:97:bb:9c:79:b1:5f:d4:c8:cd:9e:a9:aa:
         3d:a3:05:03:8c:d6:17:1e:25:6c:23:69:e8:3f:c5:b2:e8:44:
         63:a5:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:56:00 2026 by rpki-client