Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa
File:                     3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa (raw, json)
Hash identifier:          nzfxomieTeNS6GiCkE5qazbBLzCHHV+Vz9839iTIiIY=
Subject key identifier:   97:2C:F4:BB:41:C0:13:1A:3D:84:C2:BB:AC:67:63:15:E6:95:FD:97
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       54EE2CBBD32EEF7339F74A2CBCC5DE7D3ED92BD7
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa
Signing time:             Fri 28 Aug 2026 18:32:54 +0000
ROA not before:           Fri 28 Aug 2026 18:27:54 +0000
ROA not after:            Fri 27 Aug 2027 18:32:54 +0000
asID:                     272970
IP address blocks:        190.110.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ee:2c:bb:d3:2e:ef:73:39:f7:4a:2c:bc:c5:de:7d:3e:d9:2b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Aug 28 18:27:54 2026 GMT
            Not After : Aug 27 18:32:54 2027 GMT
        Subject: CN=972CF4BB41C0131A3D84C2BBAC676315E695FD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:ac:38:82:91:d4:ca:cc:2a:79:70:a6:37:
                    97:d0:19:58:af:aa:41:11:c4:54:e8:59:27:20:d1:
                    62:ea:c9:7c:90:4f:f6:f9:5e:cc:ce:0e:12:66:1a:
                    8a:a7:26:0b:c5:9f:a7:b2:02:33:88:92:cd:60:aa:
                    8f:f3:b7:50:6b:ce:34:03:58:5c:e8:f3:41:d0:00:
                    9c:8d:04:28:af:c0:3a:a2:b2:d4:73:8a:27:71:bb:
                    be:61:05:e5:57:d0:67:85:e5:d6:d5:ce:4a:1c:bc:
                    bc:6b:86:a3:e1:25:b9:a8:be:e7:bf:43:ce:87:79:
                    40:00:ca:59:1c:52:d5:7c:f4:3d:b4:10:91:d0:f1:
                    9d:eb:6d:09:18:ea:f8:dd:31:92:d8:1f:f5:9e:ec:
                    e0:f8:66:40:6f:b7:5a:50:4e:fe:0d:20:5b:94:40:
                    bf:d7:82:16:7c:01:04:de:65:e2:f7:03:6f:29:39:
                    c2:83:e2:bd:fd:50:c3:72:a0:f4:c9:0d:9f:72:bd:
                    40:4a:e8:c9:2c:1c:e0:80:61:d0:22:18:65:e4:c2:
                    46:43:a9:57:18:19:9f:05:4f:a9:87:dc:04:33:18:
                    d2:0d:0b:55:a9:7a:73:90:63:36:5e:5f:73:96:8a:
                    65:48:9d:43:5e:41:b3:58:47:b3:fe:94:34:70:23:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2C:F4:BB:41:C0:13:1A:3D:84:C2:BB:AC:67:63:15:E6:95:FD:97
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:88:9d:be:aa:20:ba:51:6f:a6:e6:e0:e0:b8:78:11:e1:
         9d:d7:b0:bb:bf:e3:17:7c:56:cc:d4:0f:b4:38:5c:08:1d:e8:
         36:b9:fa:dc:4d:a4:55:7e:7f:7f:f3:cf:fe:ea:0e:73:00:37:
         25:68:12:e2:b3:f1:df:7a:1d:2e:89:eb:48:74:00:69:c3:4a:
         3b:c9:16:09:1d:31:b1:96:41:42:32:dd:a9:b9:12:21:d4:8a:
         ff:35:c3:df:69:08:dc:cf:81:f1:ab:3a:d3:db:a9:ff:ad:ea:
         cc:7e:46:d1:c9:33:13:7e:21:23:26:c8:8d:f7:ce:96:3a:00:
         40:cd:41:56:8d:02:07:58:74:e7:f1:de:bf:43:ca:a9:10:f4:
         f0:1d:3f:f0:eb:20:d8:08:0b:cd:d5:39:ee:6d:c0:4a:d6:fc:
         21:c1:d2:a4:24:5e:54:ea:9d:03:d6:c4:b3:c5:3f:34:e5:ac:
         4f:92:a6:ab:6c:f5:a6:23:d0:5a:3a:18:a1:ce:f4:7c:d2:b2:
         14:bb:85:cb:97:38:ab:7c:13:03:31:87:ff:d5:27:af:d2:5a:
         c9:da:9d:9c:3e:1a:83:05:72:b3:87:0b:c5:05:9d:dc:71:c8:
         52:e9:ca:c2:cc:8e:55:df:be:eb:40:8f:b1:13:15:7f:9c:60:
         24:43:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:45:55 2026 by rpki-client