Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS273120.roa
File:                     AS273120.roa (raw, json)
Hash identifier:          9uqSU7fRIliD/SlBu/tftx4ibI3gGV8ue8hqgJnkK2E=
Subject key identifier:   56:E3:8D:86:6C:5E:E1:72:68:94:AA:33:0B:D5:42:18:49:58:C4:01
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1C9DD5229BF25DC418EA58BE2946A69869FFDF00
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS273120.roa
Signing time:             Fri 27 Mar 2026 21:05:08 +0000
ROA not before:           Fri 27 Mar 2026 21:00:08 +0000
ROA not after:            Fri 26 Mar 2027 21:05:08 +0000
asID:                     273120
IP address blocks:        190.217.20.96/28 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9d:d5:22:9b:f2:5d:c4:18:ea:58:be:29:46:a6:98:69:ff:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:08 2026 GMT
            Not After : Mar 26 21:05:08 2027 GMT
        Subject: CN=56E38D866C5EE1726894AA330BD542184958C401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:3c:05:63:03:cb:89:67:c5:c3:ec:3f:44:
                    4a:0b:8a:5e:24:cf:30:e1:78:44:66:fa:6c:b6:8c:
                    53:28:01:06:fb:f3:2f:b4:7b:73:c5:f0:cc:40:03:
                    2d:1b:6e:62:66:ea:a7:be:eb:70:49:72:9b:07:68:
                    fe:42:1f:4e:4c:4c:0f:1e:04:52:de:3c:2a:27:a0:
                    b3:82:88:eb:fa:88:70:95:7b:46:ab:fb:24:1c:a8:
                    85:3e:26:03:41:71:4b:8e:9f:5f:4b:1e:a8:f5:39:
                    74:60:5c:fd:7f:e2:d0:d4:bb:28:5b:8a:8d:85:42:
                    4a:12:a2:49:eb:f6:f6:7a:21:e5:76:c5:03:7f:41:
                    48:d9:86:97:78:cc:f5:16:f9:00:af:fd:8a:0b:cb:
                    97:8d:da:84:01:ba:bf:0f:08:99:61:ba:a6:48:82:
                    28:2d:d0:23:f0:ee:70:53:cf:c3:10:04:51:46:dc:
                    d4:42:27:1e:66:ba:17:dc:7e:24:f0:27:ab:d0:55:
                    fe:5d:0f:00:2b:e2:37:f3:f8:88:da:2e:9b:b1:8d:
                    0f:4f:a3:5e:83:a4:57:15:fe:84:b5:eb:20:5b:85:
                    cf:df:db:b3:7f:45:2f:91:fc:a9:8c:43:b9:a2:d6:
                    81:63:45:e2:d5:e7:26:e0:ba:2d:76:96:a3:9b:09:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:8D:86:6C:5E:E1:72:68:94:AA:33:0B:D5:42:18:49:58:C4:01
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS273120.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.20.96/28

    Signature Algorithm: sha256WithRSAEncryption
         82:9d:2b:23:96:fd:26:72:10:ef:82:c2:7f:b6:36:ed:04:e8:
         bb:68:ea:60:72:bb:e6:e6:83:d6:18:1e:09:32:ba:c6:69:b6:
         0e:96:69:8f:e3:74:74:a1:47:2a:f8:e6:06:d9:fc:81:44:59:
         92:cb:30:b5:94:0f:ad:53:f5:60:d4:62:9e:a3:69:ea:5c:ca:
         18:eb:29:7c:ef:56:95:3b:36:18:4a:a4:47:7f:85:c0:aa:79:
         57:a9:56:cb:9e:ec:e3:6a:47:9e:8e:b1:33:d7:f4:c0:1f:8c:
         c2:6d:05:8c:97:61:15:20:6b:80:3f:a8:3d:84:80:0c:72:03:
         30:43:c9:02:3a:ac:c0:e7:96:57:da:08:e5:1f:63:f3:38:e0:
         ec:20:35:39:d8:ce:65:73:53:44:0c:f2:8e:64:b3:0a:09:08:
         bc:95:79:3c:33:4c:7d:dc:d8:75:8f:10:08:0f:21:fd:81:b4:
         13:f4:c9:c6:30:80:2a:91:80:5d:96:72:49:32:ca:83:6c:21:
         0f:4e:4b:09:40:4b:9b:03:d5:da:67:f8:7c:41:f7:a6:2c:f9:
         a4:97:39:33:d8:09:97:a0:80:3d:38:27:98:db:f7:19:8f:be:
         0d:9e:1e:45:db:96:b9:f3:80:55:21:e2:23:2a:17:fa:9e:af:
         45:c8:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:39:54 2026 by rpki-client