Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/3139302e3131302e3235302e302f32342d3234203d3e203532333939.roa
File:                     3139302e3131302e3235302e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          aumi9kmplInl8/AC4+Ra6PqmIxUjJEfB+my07CGEbNM=
Subject key identifier:   E6:49:1B:12:FC:34:A8:9B:8D:17:64:F5:FB:92:A6:C9:DF:9D:87:3A
Certificate issuer:       /CN=6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240
Certificate serial:       0F55D14CDE9906AEE29086FDA0EE014D0AB9D8BB
Authority key identifier: 6A:DC:27:4D:DF:9A:FC:B5:F3:B3:14:AD:57:35:CF:ED:B1:1B:D2:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/3139302e3131302e3235302e302f32342d3234203d3e203532333939.roa
Signing time:             Thu 02 Apr 2026 16:35:00 +0000
ROA not before:           Thu 02 Apr 2026 16:30:00 +0000
ROA not after:            Thu 01 Apr 2027 16:35:00 +0000
asID:                     52399
IP address blocks:        190.110.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:d1:4c:de:99:06:ae:e2:90:86:fd:a0:ee:01:4d:0a:b9:d8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240
        Validity
            Not Before: Apr  2 16:30:00 2026 GMT
            Not After : Apr  1 16:35:00 2027 GMT
        Subject: CN=E6491B12FC34A89B8D1764F5FB92A6C9DF9D873A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:35:00:d7:8e:69:37:6c:01:b6:cb:0a:6c:
                    4f:17:b1:3a:8e:ca:5d:2c:0a:f1:66:28:fc:61:01:
                    9c:09:fe:ad:5f:1c:88:9f:1d:3d:0c:ea:4a:f5:7d:
                    f7:33:21:3c:1d:42:fd:00:fe:de:df:f2:98:ec:ad:
                    9b:24:b6:b8:c2:48:19:3e:69:16:d9:53:31:8f:79:
                    fd:c6:17:9f:22:09:1a:1a:dd:2a:9f:d6:62:17:7b:
                    6e:ab:f6:52:24:87:ff:1d:ac:0e:e4:36:7b:7f:4d:
                    3c:77:bd:56:57:79:46:81:7f:35:57:fe:bb:96:af:
                    ab:b6:bb:90:52:ce:79:67:fa:e2:19:f2:79:78:35:
                    ab:77:9c:49:6c:32:d4:93:7e:aa:f6:3f:0b:a4:9b:
                    c5:85:94:14:5e:2f:83:84:74:02:fa:be:23:6b:dc:
                    3a:aa:b8:c1:9c:33:1a:07:8a:95:70:42:55:f4:a9:
                    48:61:e9:7a:e4:ff:69:85:0c:73:6e:39:0f:35:b4:
                    e3:03:10:f0:41:0f:57:cf:a0:0e:47:ea:e7:c0:39:
                    70:2e:06:40:5d:04:a6:60:21:7d:37:d4:52:11:3a:
                    87:dd:88:89:ca:87:63:f0:99:ee:f0:89:0e:43:3f:
                    8b:6d:90:05:14:7c:61:8c:bf:92:70:71:f9:63:6f:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:49:1B:12:FC:34:A8:9B:8D:17:64:F5:FB:92:A6:C9:DF:9D:87:3A
            X509v3 Authority Key Identifier:
                keyid:6A:DC:27:4D:DF:9A:FC:B5:F3:B3:14:AD:57:35:CF:ED:B1:1B:D2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/3139302e3131302e3235302e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:79:d0:13:e8:69:cf:b9:a6:1b:b5:65:41:a4:97:91:59:4b:
         6a:5f:1a:fe:10:70:01:e1:3c:b0:36:2b:a6:78:c0:e2:93:d1:
         03:25:8e:b4:ba:b8:80:77:1b:06:df:a9:73:8c:0e:ed:91:87:
         3b:f4:3c:c1:05:27:57:52:d5:4c:30:86:3f:41:a6:09:49:b8:
         0a:65:45:8c:46:8a:08:49:e3:8f:5f:a9:d9:bb:35:3b:23:e1:
         e7:9e:88:03:36:6f:4e:0c:75:02:ce:d9:3d:0d:b7:55:89:0c:
         bd:0a:e5:33:01:05:72:38:eb:91:fa:9a:83:e9:39:d2:a0:87:
         cf:26:b5:11:67:87:1f:80:07:2d:c9:66:c5:73:89:5a:c2:9c:
         ad:04:d1:68:31:a3:e1:a7:de:ce:ed:69:78:47:44:7d:4f:55:
         c0:d4:b5:42:ff:31:72:1a:55:f9:50:33:19:a9:76:6c:9a:13:
         b4:c0:e5:9f:3d:00:e9:13:48:94:e3:51:c8:17:de:81:82:16:
         d8:10:a0:d9:63:53:b1:8b:6e:71:6e:3c:70:6c:f6:a6:e8:2f:
         44:65:c7:fb:b8:8a:9d:7f:b0:1d:12:ed:08:69:99:c6:75:85:
         66:c4:42:11:0b:06:f5:89:cf:8f:11:48:95:3c:6e:7e:65:4c:
         55:d1:1c:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD1XRTN6ZBq7ikIb9oO4BTQq52LswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEQzI3NERERjlBRkNCNUYzQjMxNEFENTczNUNGRURC
MTFCRDI0MDAeFw0yNjA0MDIxNjMwMDBaFw0yNzA0MDExNjM1MDBaMDMxMTAvBgNV
BAMTKEU2NDkxQjEyRkMzNEE4OUI4RDE3NjRGNUZCOTJBNkM5REY5RDg3M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeTUA145pN2wBtssKbE8XsTqO
yl0sCvFmKPxhAZwJ/q1fHIifHT0M6kr1ffczITwdQv0A/t7f8pjsrZsktrjCSBk+
aRbZUzGPef3GF58iCRoa3Sqf1mIXe26r9lIkh/8drA7kNnt/TTx3vVZXeUaBfzVX
/ruWr6u2u5BSznln+uIZ8nl4Nat3nElsMtSTfqr2Pwukm8WFlBReL4OEdAL6viNr
3DqquMGcMxoHipVwQlX0qUhh6Xrk/2mFDHNuOQ81tOMDEPBBD1fPoA5H6ufAOXAu
BkBdBKZgIX031FIROofdiInKh2Pwme7wiQ5DP4ttkAUUfGGMv5Jwcfljb+/HAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5kkbEvw0qJuNF2T1+5Kmyd+dhzowHwYDVR0j
BBgwFoAUatwnTd+a/LXzsxStVzXP7bEb0kAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQkEzQTAwQkE2Q0RGOTQ4Qjg1OTk2QjQ5NjdBRjRERTY1
OTZEODJFNURGNkE1MTU1N0ExNUI4NjEwRTAwN0M3LzAvNkFEQzI3NERERjlBRkNC
NUYzQjMxNEFENTczNUNGRURCMTFCRDI0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QURDMjc0RERGOUFGQ0I1RjNC
MzE0QUQ1NzM1Q0ZFREIxMUJEMjQwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUJBM0EwMEJBNkNERjk0OEI4NTk5NkI0OTY3QUY0REU2NTk2RDgyRTVE
RjZBNTE1NTdBMTVCODYxMEUwMDdDNy8wLzMxMzkzMDJlMzEzMTMwMmUzMjM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm76
MA0GCSqGSIb3DQEBCwUAA4IBAQBFedAT6GnPuaYbtWVBpJeRWUtqXxr+EHAB4Tyw
NiumeMDik9EDJY60uriAdxsG36lzjA7tkYc79DzBBSdXUtVMMIY/QaYJSbgKZUWM
RooISeOPX6nZuzU7I+HnnogDNm9ODHUCztk9DbdViQy9CuUzAQVyOOuR+pqD6TnS
oIfPJrURZ4cfgActyWbFc4lawpytBNFoMaPhp97O7Wl4R0R9T1XA1LVC/zFyGlX5
UDMZqXZsmhO0wOWfPQDpE0iU41HIF96BghbYEKDZY1Oxi25xbjxwbPam6C9EZcf7
uIqdf7AdEu0IaZnGdYVmxEIRCwb1ic+PEUiVPG5+ZUxV0RzO
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:27:58 2026 by rpki-client