Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/3139302e39322e39362e302f32312d3234203d3e203532343134.roa
File:                     3139302e39322e39362e302f32312d3234203d3e203532343134.roa (raw, json)
Hash identifier:          3Xc0Hz5q6U1ITg1e8Ig9crxpTSog0pUK3sYVWU6yiDE=
Subject key identifier:   0F:96:FD:2C:BC:B7:B2:C2:79:F7:52:F7:23:24:17:4B:13:E1:B1:B1
Certificate issuer:       /CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
Certificate serial:       7388CCAA272ABB598058E851DC65E9D32AFE953B
Authority key identifier: 93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/3139302e39322e39362e302f32312d3234203d3e203532343134.roa
Signing time:             Tue 06 Jan 2026 20:48:28 +0000
ROA not before:           Tue 06 Jan 2026 20:43:28 +0000
ROA not after:            Tue 05 Jan 2027 20:48:28 +0000
asID:                     52414
IP address blocks:        190.92.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:88:cc:aa:27:2a:bb:59:80:58:e8:51:dc:65:e9:d3:2a:fe:95:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
        Validity
            Not Before: Jan  6 20:43:28 2026 GMT
            Not After : Jan  5 20:48:28 2027 GMT
        Subject: CN=0F96FD2CBCB7B2C279F752F72324174B13E1B1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:ce:92:8e:93:c3:57:26:1e:f9:e9:9a:8d:
                    37:31:38:1f:b8:5c:c3:7e:9c:52:1f:5f:97:72:6c:
                    db:bd:d0:d0:24:e1:db:35:e7:74:39:1f:82:4c:ad:
                    44:2d:20:14:e9:3d:0b:25:89:7d:14:3d:dc:87:2c:
                    55:c7:13:9f:8f:93:03:cc:af:ac:98:ff:20:04:36:
                    1a:21:df:e4:e8:35:49:ac:7a:8b:90:1b:b9:4d:50:
                    25:3d:ed:21:22:94:05:d3:5c:9b:67:55:df:ce:6c:
                    74:64:9e:7b:ae:af:6e:d9:d6:0c:89:ff:cf:76:6c:
                    03:a3:6c:c1:b3:f4:20:1f:9f:ed:cb:4c:64:be:ac:
                    f6:cc:54:23:e7:c8:d4:cf:48:08:c9:a0:b5:38:74:
                    c5:fb:8b:14:ae:1a:57:2f:88:b6:36:1d:87:60:88:
                    06:be:f2:2e:6b:19:db:48:1a:dd:0f:c0:76:7b:15:
                    47:cc:be:06:d4:64:6e:ce:d5:f6:a0:da:f6:c4:8d:
                    5b:32:e6:dd:2f:d8:a7:95:fc:7c:e6:82:7d:e2:5e:
                    6e:a8:9d:73:80:02:43:8b:20:8d:36:37:e4:e3:5f:
                    86:b7:81:18:36:3f:0b:10:06:1a:21:78:ea:f8:64:
                    90:59:e3:e7:6b:26:77:2a:5f:cc:f8:8e:bf:22:cd:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:FD:2C:BC:B7:B2:C2:79:F7:52:F7:23:24:17:4B:13:E1:B1:B1
            X509v3 Authority Key Identifier:
                keyid:93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/3139302e39322e39362e302f32312d3234203d3e203532343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:f8:15:6a:f5:f3:47:d1:b5:5b:ba:b5:6c:ff:14:ae:53:
         c6:75:d0:4f:0a:0e:3f:9a:f7:60:6a:37:bf:fa:a9:a8:3b:03:
         b4:79:07:01:6c:b3:f1:df:22:eb:7e:7b:e6:f6:5e:df:16:c6:
         f7:a8:cd:f6:cc:09:20:88:03:d8:ea:cb:68:69:46:8f:fe:0f:
         90:84:5d:44:b5:29:64:29:b9:1d:bd:40:b3:ac:4d:1b:c1:cd:
         1f:bc:cb:00:85:57:35:47:ac:1a:17:bf:29:9b:00:02:e2:0a:
         c6:5a:df:d4:a2:d6:a3:1e:42:7e:c6:b8:99:50:d4:48:5b:c8:
         d7:d1:5e:39:59:eb:12:1e:64:12:7c:4a:e7:ad:6e:fd:43:52:
         32:ea:e7:26:e4:4e:85:8f:e5:52:4c:6e:38:ad:b9:e8:99:45:
         0a:77:62:32:59:18:07:07:43:13:b5:16:e9:5e:15:78:65:72:
         73:c6:d2:e6:30:0a:30:c8:6e:72:5e:9d:0a:d9:23:96:0f:85:
         28:bd:bf:2a:ee:10:cc:91:04:28:9e:d5:f4:36:9a:76:67:16:
         9e:bf:38:bf:4d:ff:b4:4e:bc:8b:08:b6:c5:10:c5:90:c2:4f:
         64:cf:d6:d1:51:e6:cd:5a:e5:ec:a6:21:d4:b4:7d:47:3d:62:
         3d:8f:3b:12
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUc4jMqicqu1mAWOhR3GXp0yr+lTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENDFCMzk5MTU0MzMxQzRDMEFBMEM0RUJDMTk0QUEw
QTVERUVERTAeFw0yNjAxMDYyMDQzMjhaFw0yNzAxMDUyMDQ4MjhaMDMxMTAvBgNV
BAMTKDBGOTZGRDJDQkNCN0IyQzI3OUY3NTJGNzIzMjQxNzRCMTNFMUIxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGb86SjpPDVyYe+emajTcxOB+4
XMN+nFIfX5dybNu90NAk4ds153Q5H4JMrUQtIBTpPQsliX0UPdyHLFXHE5+PkwPM
r6yY/yAENhoh3+ToNUmseouQG7lNUCU97SEilAXTXJtnVd/ObHRknnuur27Z1gyJ
/892bAOjbMGz9CAfn+3LTGS+rPbMVCPnyNTPSAjJoLU4dMX7ixSuGlcviLY2HYdg
iAa+8i5rGdtIGt0PwHZ7FUfMvgbUZG7O1fag2vbEjVsy5t0v2KeV/Hzmgn3iXm6o
nXOAAkOLII02N+TjX4a3gRg2PwsQBhoheOr4ZJBZ4+drJncqX8z4jr8izZmpAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUD5b9LLy3ssJ591L3IyQXSxPhsbEwHwYDVR0j
BBgwFoAUk9QbOZFUMxxMCqDE68GUqgpd7t4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0ZEMjE5NDE5RkU0RjU4MjBCNTFBNjNFM0JERDRFOUFF
QTQyNDAzOTE1MTBDRDY1M0ZENkIxMUVBQ0MxRUQwLzAvOTNENDFCMzk5MTU0MzMx
QzRDMEFBMEM0RUJDMTk0QUEwQTVERUVERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0Q0MUIzOTkxNTQzMzFDNEMw
QUEwQzRFQkMxOTRBQTBBNURFRURFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdGRDIxOTQxOUZFNEY1ODIwQjUxQTYzRTNCREQ0RTlBRUE0MjQwMzkx
NTEwQ0Q2NTNGRDZCMTFFQUNDMUVEMC8wLzMxMzkzMDJlMzkzMjJlMzkzNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzIzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+XGAwDQYJ
KoZIhvcNAQELBQADggEBAHb++BVq9fNH0bVburVs/xSuU8Z10E8KDj+a92BqN7/6
qag7A7R5BwFss/HfIut+e+b2Xt8WxveozfbMCSCIA9jqy2hpRo/+D5CEXUS1KWQp
uR29QLOsTRvBzR+8ywCFVzVHrBoXvymbAALiCsZa39Si1qMeQn7GuJlQ1EhbyNfR
XjlZ6xIeZBJ8Suetbv1DUjLq5ybkToWP5VJMbjitueiZRQp3YjJZGAcHQxO1Fule
FXhlcnPG0uYwCjDIbnJenQrZI5YPhSi9vyruEMyRBCie1fQ2mnZnFp6/OL9N/7RO
vIsItsUQxZDCT2TP1tFR5s1a5eymIdS0fUc9Yj2POxI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:10 2026 by rpki-client