Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131382e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3131382e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          /fAByMxFYjR9+8B1mX92HJHHugljCaSEBotISalNmI4=
Subject key identifier:   B0:50:5F:58:78:92:6D:D9:2F:11:E9:7C:80:C0:C2:D0:0E:2B:5F:96
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       26647DA3680E80B50BBFD9A9A3F7C9475D119472
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131382e302f32342d3234203d3e20323632313832.roa
Signing time:             Thu 16 Jul 2026 17:58:11 +0000
ROA not before:           Thu 16 Jul 2026 17:53:11 +0000
ROA not after:            Thu 15 Jul 2027 17:58:11 +0000
asID:                     262182
IP address blocks:        190.52.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 12:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:64:7d:a3:68:0e:80:b5:0b:bf:d9:a9:a3:f7:c9:47:5d:11:94:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jul 16 17:53:11 2026 GMT
            Not After : Jul 15 17:58:11 2027 GMT
        Subject: CN=B0505F5878926DD92F11E97C80C0C2D00E2B5F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:81:ff:d3:0e:fa:3c:98:32:f7:3f:47:b7:
                    9a:15:aa:38:ac:cb:c2:71:2d:16:ec:cc:fd:10:50:
                    34:33:e4:63:af:77:66:95:00:0a:35:f3:7d:8d:aa:
                    a2:23:a5:b8:b7:8a:71:7b:8d:90:de:87:6a:88:8c:
                    fd:2a:65:03:96:6e:51:f7:92:8d:4c:fe:4b:8d:7a:
                    83:83:06:28:53:28:de:0b:7f:28:cb:df:56:2d:65:
                    16:3b:60:43:e5:1d:ff:f5:bb:c0:fc:c3:38:8c:90:
                    6a:ea:1c:d0:9b:8f:b1:f8:79:77:0c:9c:8a:fe:ee:
                    67:6e:fa:89:5e:0c:62:98:34:bf:9d:84:e1:00:a2:
                    07:4d:c7:45:49:35:6f:b2:0f:c2:55:82:c6:d5:e5:
                    29:d8:4e:04:e4:1c:61:c7:6f:95:c9:01:42:f5:a0:
                    11:93:d1:de:b1:10:1c:ec:be:bf:d6:c0:65:1c:bf:
                    ad:4c:78:f4:b4:cf:51:68:f8:b6:30:de:11:e6:26:
                    24:7f:76:1c:68:d0:98:42:96:ed:30:d5:34:29:d9:
                    0a:2e:e8:34:45:99:1b:b3:a4:aa:27:9c:e9:86:92:
                    3d:5e:73:00:93:fd:29:fd:f9:73:97:8b:38:ee:68:
                    39:ef:6f:4c:b0:e8:a4:9f:d6:8d:fb:f4:29:b8:41:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:50:5F:58:78:92:6D:D9:2F:11:E9:7C:80:C0:C2:D0:0E:2B:5F:96
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131382e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:ee:c7:fc:94:af:ba:cb:a8:f7:5a:2b:7d:a6:11:82:78:
         d3:c1:ba:0b:e0:21:07:0b:23:b0:4c:b3:89:fb:4c:91:73:0e:
         23:b6:c8:e8:1d:31:25:48:61:45:28:78:c3:2e:31:7d:9a:0c:
         24:79:c4:45:90:53:7c:13:de:27:ea:5a:f5:2f:7a:69:a9:d9:
         2b:10:7f:3b:ee:ce:1f:0e:53:35:39:41:34:2f:e2:ba:7e:33:
         a0:c0:e5:5f:e3:e6:a0:f6:be:2f:89:dc:1c:56:5a:f3:cb:ff:
         80:04:73:50:e3:33:d6:7c:7c:8f:50:07:20:74:e0:ef:21:78:
         27:51:58:e8:02:f0:03:7e:5f:cc:1b:a0:57:b5:bc:25:03:77:
         2a:d7:73:ec:73:f0:00:b1:75:73:ab:54:f9:57:57:39:f3:70:
         ad:ab:da:ce:b0:ac:77:c6:93:13:73:c4:95:c4:d8:f5:ce:8c:
         0e:35:1e:7b:6e:c3:0c:c4:e9:5c:c0:10:8b:2b:2a:ff:8c:af:
         51:c8:52:9b:7a:a5:f3:32:03:58:fb:98:29:f9:7f:b3:11:79:
         2e:30:7d:7f:ab:0c:9c:83:c9:45:cc:a7:2e:b4:58:f3:71:6b:
         af:10:c7:88:8b:b9:44:33:6d:31:27:9f:74:30:b7:91:dc:04:
         25:28:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:58:01 2026 by rpki-client