Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32332d3234203d3e20323732303237.roa
File:                     3139302e3131322e3230322e302f32332d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          6bNPoJWsGHJ69K+a+oEqg9ZVEdAvxSF4ssW7799U/pU=
Subject key identifier:   60:60:CA:74:E0:1B:33:8F:D6:7C:41:45:2E:60:4D:47:50:5D:1D:BC
Certificate issuer:       /CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
Certificate serial:       4B1C4F664B44B60FC49AF0439B3B487EE2E7D0F9
Authority key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32332d3234203d3e20323732303237.roa
Signing time:             Tue 14 Jul 2026 08:52:33 +0000
ROA not before:           Tue 14 Jul 2026 08:47:33 +0000
ROA not after:            Tue 13 Jul 2027 08:52:33 +0000
asID:                     272027
IP address blocks:        190.112.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1c:4f:66:4b:44:b6:0f:c4:9a:f0:43:9b:3b:48:7e:e2:e7:d0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
        Validity
            Not Before: Jul 14 08:47:33 2026 GMT
            Not After : Jul 13 08:52:33 2027 GMT
        Subject: CN=6060CA74E01B338FD67C41452E604D47505D1DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:88:45:1e:df:10:e8:a7:ba:de:01:a0:e8:
                    ef:53:99:36:81:66:e3:8b:f3:08:74:08:8e:cc:a3:
                    06:11:72:58:33:e9:22:84:35:72:ad:ef:cc:f1:1d:
                    2d:d4:12:5e:ea:d2:df:da:c2:53:1f:1a:04:58:e5:
                    20:68:00:9a:74:e1:44:c2:be:88:fd:f7:08:00:5d:
                    0c:7b:21:09:66:e0:15:34:ba:f5:6f:de:78:c1:bc:
                    42:91:1c:7d:45:25:c5:f0:f4:74:0f:1b:82:91:88:
                    3f:a6:75:f2:02:ff:37:ae:7e:62:90:7b:51:1e:b8:
                    da:61:56:00:b5:3c:6a:0a:69:6c:a0:c3:07:9a:7d:
                    bc:9a:c7:d5:92:75:20:73:ef:bc:ca:b8:ee:f5:48:
                    81:5d:dc:34:bc:2e:6e:7a:b1:7a:8b:a3:87:ad:03:
                    01:6d:b5:8d:5d:38:33:c4:f2:0c:0c:7a:7d:dd:b6:
                    ce:68:2d:b9:c5:ed:de:67:84:55:a4:59:b4:40:64:
                    b4:38:cd:ab:ed:55:4f:45:6b:a9:f4:33:09:31:57:
                    74:71:c1:3e:b3:53:69:3f:3c:de:e7:5f:1f:64:d1:
                    63:dc:aa:20:84:6e:c0:e8:a6:8a:f6:ff:98:90:27:
                    2f:00:43:35:c6:0c:32:0d:5e:91:96:a7:43:ea:17:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:60:CA:74:E0:1B:33:8F:D6:7C:41:45:2E:60:4D:47:50:5D:1D:BC
            X509v3 Authority Key Identifier:
                keyid:97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32332d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:56:71:0c:0a:f4:2f:1c:94:88:6f:06:c8:36:8a:b6:42:fb:
         18:c1:bf:9e:c4:2c:ed:36:74:16:79:a9:a9:c7:b3:40:f6:66:
         19:af:5e:1a:eb:d9:ac:2a:a8:2b:bd:0a:bf:fc:3f:7e:0f:db:
         a0:9e:38:33:f3:e3:78:29:94:f8:cc:ce:42:bd:6b:4b:fb:86:
         cb:de:46:67:72:cd:66:b8:96:df:e5:24:62:57:20:ae:42:5b:
         4b:1a:86:76:fb:8e:e0:7a:ec:3c:8c:35:a0:2d:50:38:08:a2:
         15:d0:fe:43:eb:d8:51:70:c0:05:43:0d:66:13:54:7d:eb:ad:
         c8:8b:a2:ae:29:f0:d7:0d:f0:b2:26:de:72:8d:34:fb:27:4f:
         cf:6c:56:f6:11:26:c7:7e:84:ff:4e:60:5d:40:2d:7a:d4:fe:
         7e:66:11:a2:09:15:2e:ac:fd:b5:20:d9:d9:e4:42:79:99:52:
         12:30:92:da:62:69:c2:36:f3:f6:bd:30:fe:a7:15:73:fc:a3:
         95:46:b9:22:52:51:a3:e2:75:02:fa:7f:8f:97:68:fe:65:ee:
         7f:99:d3:a4:85:ee:75:31:ce:1c:fb:84:31:17:a0:9f:19:67:
         8d:2e:6e:a7:b2:c1:9a:96:30:06:48:f0:40:89:c8:5e:a6:2b:
         9a:68:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:30:17 2026 by rpki-client