Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3139302e39372e3132302e302f32312d3234203d3e203532333837.roa
File:                     3139302e39372e3132302e302f32312d3234203d3e203532333837.roa (raw, json)
Hash identifier:          RcR3TvElpSVJc5sj/glNFklHkXqjv2BsJVsVLb+DKMo=
Subject key identifier:   D5:65:61:2F:2B:D7:4A:04:F0:F5:45:0B:46:F8:B1:18:DC:B4:0B:9C
Certificate issuer:       /CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
Certificate serial:       459D956A3088FA9953DFD22C83776BE3A3F719E0
Authority key identifier: 15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3139302e39372e3132302e302f32312d3234203d3e203532333837.roa
Signing time:             Tue 06 Jan 2026 19:25:03 +0000
ROA not before:           Tue 06 Jan 2026 19:20:03 +0000
ROA not after:            Tue 05 Jan 2027 19:25:03 +0000
asID:                     52387
IP address blocks:        190.97.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 19:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9d:95:6a:30:88:fa:99:53:df:d2:2c:83:77:6b:e3:a3:f7:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
        Validity
            Not Before: Jan  6 19:20:03 2026 GMT
            Not After : Jan  5 19:25:03 2027 GMT
        Subject: CN=D565612F2BD74A04F0F5450B46F8B118DCB40B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:fb:b4:4f:13:2b:c1:cf:af:12:65:82:08:
                    04:95:e5:01:87:0c:d8:7e:be:d1:91:02:a0:74:fa:
                    a5:34:8e:71:6b:70:3a:cf:69:20:ab:d3:ba:54:2f:
                    9b:bd:5a:1f:66:8d:2a:de:74:0e:42:b9:16:67:7e:
                    ae:ae:43:48:7a:ca:d4:dd:82:36:bb:15:b3:14:36:
                    75:e3:d1:29:5a:43:a6:50:9d:f4:a2:d9:ac:bd:5a:
                    02:57:35:a7:0a:95:f8:f8:a6:82:d8:f1:49:f6:79:
                    df:03:9f:42:4f:f9:fe:cb:cf:fd:62:f6:6a:b0:4f:
                    0d:3a:3c:41:ea:db:1a:9a:40:74:1f:0f:23:70:74:
                    6e:be:e3:69:6b:a7:b2:4f:33:da:c1:73:d2:6d:77:
                    01:71:92:01:f8:64:91:9c:92:9d:3a:c9:34:64:68:
                    73:03:42:5a:2e:17:38:84:55:e4:c2:c9:34:82:fa:
                    9a:38:33:13:58:15:94:06:e4:98:71:9b:26:4f:c0:
                    fc:ef:46:af:3a:fd:e7:8b:17:79:c3:e7:cd:91:a4:
                    14:42:0f:ac:c4:10:73:c8:94:57:9b:82:d1:6e:fe:
                    c1:45:42:e7:01:19:6e:5c:db:52:06:46:6a:dc:5e:
                    6c:e5:38:a2:e8:50:dd:74:d0:0b:b8:90:2f:65:ba:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:65:61:2F:2B:D7:4A:04:F0:F5:45:0B:46:F8:B1:18:DC:B4:0B:9C
            X509v3 Authority Key Identifier:
                keyid:15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3139302e39372e3132302e302f32312d3234203d3e203532333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:0b:09:8a:eb:57:c8:1f:af:bd:82:dd:10:23:a9:20:5b:
         ed:39:3d:15:cf:a5:ba:c0:a9:0e:2b:7d:9e:9a:f8:43:73:9d:
         c9:ca:18:45:eb:f4:38:bd:49:b5:41:b1:c8:41:ce:b3:0b:b8:
         ef:22:1e:01:19:e0:c8:91:c6:46:bc:02:47:87:3a:2a:ee:67:
         99:32:49:49:c9:14:84:47:d8:d9:d9:c1:30:63:1f:02:87:11:
         f7:ff:ff:de:a2:c8:f2:e8:41:71:4c:6e:f2:36:d7:4b:96:ab:
         af:bb:a4:4d:03:db:4c:11:80:ec:46:e2:93:68:9d:0d:24:2b:
         b5:bd:71:37:43:b5:f2:c4:1b:75:3d:b5:35:09:df:9f:77:a9:
         cf:70:b6:95:4b:f9:e9:8d:1e:5e:03:d8:25:32:6b:52:ab:45:
         84:6d:ba:f5:a7:0c:84:f6:8e:96:d1:e8:71:1c:a9:59:e7:75:
         65:ba:ef:f0:6e:cc:0f:3a:c2:cd:cd:d7:4b:39:93:6a:d7:95:
         71:1c:70:fc:11:8c:31:77:8f:15:c0:9f:04:ed:e6:70:97:16:
         62:d6:80:ee:90:e4:37:53:8c:c9:60:49:a7:2a:db:3c:e5:be:
         78:da:22:06:e8:a9:78:5a:91:1d:60:9c:26:10:7e:8a:80:2f:
         85:a1:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:11:54 2026 by rpki-client