Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          DXSSuJpawpMbd2BTzfdAL2KKdn9bnq/jgkf4pPxDKZg=
Subject key identifier:   8F:10:68:F6:55:54:9A:00:22:0B:84:A0:97:E9:6F:63:B5:EA:74:2A
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       4037A9FFE7B18432D6C52D1919668460C59146D9
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa
Signing time:             Thu 16 Jul 2026 17:58:11 +0000
ROA not before:           Thu 16 Jul 2026 17:53:11 +0000
ROA not after:            Thu 15 Jul 2027 17:58:11 +0000
asID:                     262182
IP address blocks:        190.52.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 12:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:37:a9:ff:e7:b1:84:32:d6:c5:2d:19:19:66:84:60:c5:91:46:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jul 16 17:53:11 2026 GMT
            Not After : Jul 15 17:58:11 2027 GMT
        Subject: CN=8F1068F655549A00220B84A097E96F63B5EA742A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:df:20:95:bf:23:ac:68:08:31:e7:6e:32:
                    2a:97:fe:fa:6f:90:2d:77:35:69:cb:6c:ba:ad:2c:
                    76:e6:a3:0c:04:a4:98:0b:00:96:7d:7b:24:4f:11:
                    76:f3:2d:98:c4:da:87:d3:c7:b2:ef:2b:d9:1c:8c:
                    95:2e:cc:35:cf:2d:a2:c3:97:ea:a9:5a:14:a9:42:
                    af:68:23:1a:81:76:d8:69:07:2c:a4:7c:5f:f1:34:
                    cf:2d:f1:d8:79:5c:b3:64:46:70:90:a4:50:76:1d:
                    e4:9b:45:8c:99:45:03:59:a9:ba:a2:3f:67:e3:3e:
                    a1:21:0d:42:68:61:d6:39:75:66:18:83:e2:25:c2:
                    c8:16:a9:14:df:8f:ad:90:73:b3:04:92:35:0d:bb:
                    e9:86:93:b5:ef:65:96:d3:cc:13:04:2c:e6:0e:bc:
                    aa:56:be:d5:5f:08:1e:a6:37:d8:6a:09:86:15:fd:
                    c4:5a:9e:7a:a4:97:a0:a4:70:0b:06:0f:7c:5b:da:
                    61:a8:83:13:d4:e9:b9:40:c4:a2:27:23:e4:e5:54:
                    ff:ba:8e:b7:be:c5:da:65:d7:de:08:99:79:37:d3:
                    fe:fc:b9:7e:ee:e7:a8:5b:00:c3:1f:22:c7:88:b0:
                    0e:fd:34:22:ab:e2:92:02:be:30:ae:7d:3b:f8:33:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:10:68:F6:55:54:9A:00:22:0B:84:A0:97:E9:6F:63:B5:EA:74:2A
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:4a:94:b5:e2:d8:7a:80:aa:3e:0b:13:a8:f5:e8:6b:93:70:
         f0:af:61:cb:95:37:81:82:15:30:16:8f:3f:9e:76:fe:de:17:
         db:f3:91:92:6d:69:18:45:50:ae:82:e1:4f:9c:09:88:85:00:
         b1:b9:94:39:dd:74:61:d3:77:84:1d:d3:93:eb:0a:38:69:29:
         98:11:72:a8:14:86:20:ff:2e:ec:ef:f0:f8:23:0a:9c:64:79:
         f9:0e:e5:2c:d9:e3:84:51:5b:19:9e:96:a3:a6:59:1e:65:4e:
         e2:d3:9e:63:b4:ee:4a:b0:30:ee:ac:25:55:2f:a6:00:91:0e:
         0d:02:89:01:ec:9a:d6:7f:36:91:e2:d8:b5:dc:d9:1d:f1:a2:
         77:be:b0:67:30:7f:80:6b:3c:4b:1d:c5:81:5d:13:8e:0e:e8:
         c1:13:d0:e6:52:58:80:d9:03:d5:63:d8:4d:10:c6:49:87:b8:
         23:72:df:c2:61:9f:c4:7d:e8:fe:5c:89:7c:92:e2:33:be:aa:
         5f:fa:81:06:8b:47:b5:37:2c:3d:d2:5c:57:e0:3a:cd:a5:cb:
         cc:96:19:01:0d:dc:ae:f7:1f:45:73:05:c4:44:f3:8b:d0:72:
         23:ba:28:66:f1:f3:04:53:ac:b2:42:6f:82:dd:d2:25:3d:96:
         df:87:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:58:01 2026 by rpki-client