Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34352e302f32342d3234203d3e203532333438.roa
File:                     3139302e31342e34352e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          OVREDcwDVsON/q8cXQCqkY7M4YzGG6OTvZcdgos+rSM=
Subject key identifier:   B4:E1:E1:0E:9A:68:DA:2C:AF:27:F3:8E:DE:C6:2A:0E:71:EC:2E:CD
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       3D0454966EB531CA42952F4D2856BDAAC28F132A
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34352e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 06 Jan 2026 19:30:27 +0000
ROA not before:           Tue 06 Jan 2026 19:25:27 +0000
ROA not after:            Tue 05 Jan 2027 19:30:27 +0000
asID:                     52348
IP address blocks:        190.14.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:04:54:96:6e:b5:31:ca:42:95:2f:4d:28:56:bd:aa:c2:8f:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Jan  6 19:25:27 2026 GMT
            Not After : Jan  5 19:30:27 2027 GMT
        Subject: CN=B4E1E10E9A68DA2CAF27F38EDEC62A0E71EC2ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:34:ed:32:98:ee:b6:86:3b:0f:cc:f0:67:
                    2f:c0:d3:e3:7d:4c:a7:38:20:31:0d:bf:71:5f:6e:
                    cf:1c:2b:03:0a:a8:ac:e6:08:6a:e2:76:90:e9:c1:
                    58:fb:5f:1e:ba:46:28:04:b3:d1:6a:24:7d:c4:66:
                    d1:0b:c4:ca:ec:fb:f1:5e:33:8b:64:99:98:23:80:
                    d3:69:ea:97:30:64:df:23:12:d7:61:88:e6:10:fb:
                    c5:34:38:d2:d2:d2:24:71:96:37:7b:bd:8b:6d:ca:
                    53:71:1e:e5:0d:af:19:e6:fc:63:ef:2a:62:a1:78:
                    cb:c8:ce:28:4b:60:5f:e9:7c:7d:35:52:83:df:aa:
                    ec:b5:d1:26:1f:29:11:56:c3:20:88:af:e0:12:6b:
                    ab:4e:16:bd:4f:f2:3d:67:51:69:16:89:f7:44:96:
                    20:55:61:41:a8:bc:f0:08:47:99:be:7a:fd:e2:b9:
                    71:71:61:35:7e:d0:a4:56:f6:aa:ae:2c:a3:71:35:
                    6a:2d:eb:cb:67:41:6c:19:d9:ed:75:ca:f7:3d:df:
                    99:44:47:2f:e5:21:85:7d:70:05:e2:c2:12:aa:10:
                    d9:d0:f3:9c:28:83:d6:01:61:46:c8:88:7d:26:57:
                    04:eb:8f:cd:cf:92:af:e6:fa:52:95:39:04:0e:9c:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:E1:0E:9A:68:DA:2C:AF:27:F3:8E:DE:C6:2A:0E:71:EC:2E:CD
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34352e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:c0:28:00:5f:c6:38:25:c4:1e:85:78:c8:f4:c6:fa:e1:
         81:20:b9:7c:d1:5f:9c:2c:3b:53:ff:ac:85:18:f3:aa:d0:c4:
         56:0b:f8:c6:6b:8d:a6:86:02:3f:8d:44:c6:e0:f7:40:fe:de:
         06:8d:8c:83:bb:e0:55:06:75:6e:f5:50:da:6b:11:32:66:cd:
         1b:11:1b:b9:e9:7b:e1:8b:b3:f3:72:b2:99:f7:ae:b1:72:39:
         de:6a:89:67:dd:33:fd:3d:31:6b:42:40:af:98:6f:ae:ff:67:
         a1:49:0a:9e:67:0a:1c:a7:93:14:c1:95:36:34:95:ed:60:0a:
         e3:05:be:a6:da:23:e8:68:8e:74:4f:a0:31:5a:82:cb:40:7f:
         c6:6f:03:09:fc:ca:76:56:13:44:7d:eb:6a:39:d6:34:1d:2a:
         cd:78:ab:45:48:58:12:2a:8a:28:6e:87:b1:78:d5:b6:34:8a:
         f0:50:f5:22:b4:19:a2:74:1c:c5:76:47:c1:58:29:58:8f:f1:
         2b:9f:53:ec:2e:78:65:6e:42:9f:98:2a:05:40:5f:5f:26:b4:
         28:db:b5:9b:65:67:e8:c7:bf:4f:b7:fc:77:9a:4a:fe:3b:4f:
         2e:15:7d:a4:07:4b:3c:38:41:1c:bf:30:66:e5:c7:3a:1e:e1:
         9f:f2:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:47 2026 by rpki-client