Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130342e302f32322d3234203d3e20343032303230.roa
File:                     3139302e3138352e3130342e302f32322d3234203d3e20343032303230.roa (raw, json)
Hash identifier:          E8+fjEG7K4664uCIpZxCA1pARmxnfzicWfA/uj1vew4=
Subject key identifier:   38:7D:64:AD:67:C0:45:69:55:13:BA:94:91:3D:58:B3:1A:A9:FB:EB
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       1B8AE57CD492CB6794C61CC822B97F9C562E09D6
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130342e302f32322d3234203d3e20343032303230.roa
Signing time:             Fri 10 Jul 2026 08:00:00 +0000
ROA not before:           Fri 10 Jul 2026 07:55:00 +0000
ROA not after:            Fri 09 Jul 2027 08:00:00 +0000
asID:                     402020
IP address blocks:        190.185.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8a:e5:7c:d4:92:cb:67:94:c6:1c:c8:22:b9:7f:9c:56:2e:09:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Jul 10 07:55:00 2026 GMT
            Not After : Jul  9 08:00:00 2027 GMT
        Subject: CN=387D64AD67C045695513BA94913D58B31AA9FBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:f1:45:bd:fe:70:cc:4c:ce:4d:9f:dc:cb:
                    68:ff:6a:dd:f5:7b:ba:32:b1:e0:a4:01:db:cc:22:
                    c4:6a:6f:76:ac:d1:1c:6f:4c:9d:1c:0b:7a:e8:d1:
                    1d:30:5b:a1:7d:b9:b0:34:c9:93:0f:c5:69:5d:86:
                    49:a3:9e:2d:4c:97:5f:cd:71:f6:0d:5a:24:7e:2e:
                    d8:ac:35:18:be:04:c7:53:56:b1:99:ab:37:a4:21:
                    26:52:ba:bf:b7:57:fb:c9:d8:5b:ac:dd:3d:5d:5a:
                    24:16:b8:07:b7:73:c3:6a:27:67:c6:65:d2:25:03:
                    7b:d7:1f:fd:fb:5e:4f:7f:f6:c2:bf:2d:75:e0:47:
                    24:cf:83:8a:f5:df:68:cd:f7:ca:35:a9:c5:a8:4e:
                    de:d5:cf:42:23:19:89:e6:75:4f:8a:e6:7c:b2:63:
                    ba:b9:1a:71:54:c7:f9:ff:27:b1:5e:cf:1a:ac:54:
                    81:83:58:98:04:e0:60:ac:0f:85:05:23:73:7d:42:
                    f2:fd:74:74:2c:37:e6:8a:22:c1:4e:fa:89:94:a1:
                    89:42:38:b0:a3:03:35:99:e6:40:80:d4:11:b2:b9:
                    67:cf:a8:c5:3a:ff:f1:5c:cd:06:40:c4:0d:68:bb:
                    5a:41:68:be:63:19:4a:4e:43:e8:3e:ac:86:6a:e1:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:64:AD:67:C0:45:69:55:13:BA:94:91:3D:58:B3:1A:A9:FB:EB
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130342e302f32322d3234203d3e20343032303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:60:fa:dc:8a:60:a0:06:af:b6:5b:f5:5c:73:d1:22:fb:
         2a:ec:dd:10:9f:f0:d1:a1:45:94:eb:a0:0d:8a:ff:db:05:1c:
         03:81:ae:d9:f9:1d:cb:ce:bd:da:c9:c5:c6:3c:79:5e:ea:06:
         a8:a5:f4:54:19:94:ea:5f:d9:a7:59:99:ff:46:77:c5:91:2e:
         8e:33:56:ab:ea:21:41:e9:1f:0c:f1:e6:97:32:5b:88:92:c5:
         1c:73:44:8b:05:34:33:cc:95:49:6c:b3:7f:9a:8f:34:5c:0f:
         7e:9f:57:79:08:98:55:36:ca:ad:3b:15:f0:33:f7:57:be:1d:
         25:52:c0:0b:40:a1:27:4e:ee:88:30:ec:55:4b:e1:17:c7:6c:
         db:d4:e0:b4:a7:97:c8:af:dc:c5:be:d5:6a:b8:c5:f4:6c:9b:
         66:1b:39:cc:2c:a2:57:e5:0d:98:cf:0e:1f:c1:e4:b4:53:a1:
         cd:38:b2:6e:8c:ef:c0:42:c3:f4:49:94:72:60:b4:8d:00:b9:
         94:e0:37:9e:cd:09:31:8a:b4:6c:5b:dc:37:e1:3a:10:c8:a0:
         42:70:2b:9d:29:80:c0:f8:3d:7c:af:e3:15:0e:02:9d:54:b0:
         77:ce:0b:3e:c1:78:0b:33:a2:6f:86:97:3e:f3:64:72:8c:67:
         1a:bd:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:02:18 2026 by rpki-client