Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa
File:                     3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          Dxb7wsQx8TJ0/uzgUdNWTBrhUf4Ag1a8Ji2FFhfLc1Q=
Subject key identifier:   16:8D:3A:56:58:CB:55:DC:B8:C6:9B:B5:EA:AB:16:E8:F0:BA:6A:37
Certificate issuer:       /CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
Certificate serial:       2AE3A86D22DDA9A8CBD11CFCA748AB04A779B0EC
Authority key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa
Signing time:             Tue 14 Jul 2026 08:52:34 +0000
ROA not before:           Tue 14 Jul 2026 08:47:34 +0000
ROA not after:            Tue 13 Jul 2027 08:52:34 +0000
asID:                     272027
IP address blocks:        190.112.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e3:a8:6d:22:dd:a9:a8:cb:d1:1c:fc:a7:48:ab:04:a7:79:b0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
        Validity
            Not Before: Jul 14 08:47:34 2026 GMT
            Not After : Jul 13 08:52:34 2027 GMT
        Subject: CN=168D3A5658CB55DCB8C69BB5EAAB16E8F0BA6A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:34:a7:42:89:cd:f5:9b:09:4c:72:a0:6a:
                    38:7f:7b:1e:2b:27:2e:8e:5a:c9:a4:29:8d:43:bc:
                    1d:01:90:ef:9c:ce:89:57:f5:86:66:01:6f:de:3a:
                    2b:4e:92:9a:cc:b4:12:c8:1a:d5:5d:ce:fc:a2:f9:
                    82:60:0d:b7:f5:ca:41:09:58:36:87:43:6d:0b:83:
                    34:58:e7:2d:25:6a:b9:56:aa:9b:10:60:a2:e6:8d:
                    52:ac:d0:96:77:54:91:a0:f2:eb:80:a3:e3:74:53:
                    82:36:3d:ec:5f:5c:c9:fd:fd:fe:9d:ff:f9:d6:d3:
                    06:8f:49:2a:74:c6:9c:1d:62:94:2a:54:75:b3:3c:
                    85:07:28:09:d1:be:44:c9:30:f9:d0:5b:47:21:be:
                    56:3e:93:85:22:49:e8:61:6f:4c:80:b9:f8:25:11:
                    fe:a5:c2:43:20:ca:91:4d:38:34:53:9c:ac:5e:cd:
                    7d:13:ff:d1:50:26:23:44:d9:09:42:f4:5f:be:d0:
                    4f:29:7b:e3:36:e3:6a:9c:c4:4d:39:08:3a:e3:1b:
                    20:0b:f7:6b:cf:0b:9f:ad:fb:a8:5c:01:dd:a8:a4:
                    b3:38:c0:d2:88:7e:1f:b5:87:f7:21:b0:b9:00:86:
                    f6:3a:3e:44:3b:ec:0d:ae:15:83:f9:87:8e:74:02:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8D:3A:56:58:CB:55:DC:B8:C6:9B:B5:EA:AB:16:E8:F0:BA:6A:37
            X509v3 Authority Key Identifier:
                keyid:97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:bb:2e:cf:82:ef:51:cd:d6:52:0f:81:f7:a5:91:10:5b:f8:
         d6:6d:74:47:5f:8a:5d:41:1d:56:7e:0d:ed:ce:95:e6:45:d2:
         d7:66:b1:2e:fa:6a:5a:a6:b6:e1:ab:12:4c:52:b1:c3:b7:f5:
         cf:59:b8:9c:74:17:61:a4:24:b3:d6:fe:b8:1e:56:6b:2a:c3:
         bb:b3:b2:e4:87:73:58:3e:4e:70:74:42:ae:4d:f1:cd:dd:98:
         8d:af:3e:7c:e2:28:18:86:ad:77:96:cd:d6:19:04:24:ca:46:
         05:b8:36:a8:91:ca:5d:b5:78:2b:b5:b8:14:c2:17:b3:68:9f:
         d8:09:a4:58:72:c0:92:11:e4:9d:76:9a:5e:b5:4b:aa:64:c5:
         2b:a6:8b:dd:62:e2:12:f9:d5:d7:18:74:ed:54:24:e5:f0:19:
         a1:e9:f7:b0:07:f0:c8:37:96:90:c0:19:cc:94:e1:ae:fa:a8:
         84:49:2d:68:7f:d6:d5:49:74:c8:32:16:e7:61:9d:cb:bd:dd:
         19:30:dc:1d:41:42:7c:33:db:b0:04:df:8a:76:39:d1:71:1b:
         97:72:16:da:81:db:c9:3d:7d:0a:80:b3:6c:44:a8:90:ca:bc:
         8d:7b:74:de:a4:4c:48:48:51:05:b5:25:69:9d:8d:e9:4e:e9:
         89:01:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:29:59 2026 by rpki-client