Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa
File:                     3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa (raw, json)
Hash identifier:          yEROq3P98eK+v3Vb1yzULr1ZnqhAGIWXHpFaAbWYm3w=
Subject key identifier:   71:7F:5C:0A:50:06:8B:2E:E5:F0:3F:42:42:B1:13:FB:A4:15:C6:3E
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       433CCB4AED23F943B0F9223BE322A6E1F839254F
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa
Signing time:             Tue 06 Jan 2026 19:15:33 +0000
ROA not before:           Tue 06 Jan 2026 19:10:33 +0000
ROA not after:            Tue 05 Jan 2027 19:15:33 +0000
asID:                     264845
IP address blocks:        190.112.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:cb:4a:ed:23:f9:43:b0:f9:22:3b:e3:22:a6:e1:f8:39:25:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:33 2026 GMT
            Not After : Jan  5 19:15:33 2027 GMT
        Subject: CN=717F5C0A50068B2EE5F03F4242B113FBA415C63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:61:13:d6:33:6d:15:66:dd:02:c4:d1:da:
                    9a:9d:c1:e6:b8:6c:3d:40:58:0a:65:49:e3:de:cb:
                    5a:22:97:e3:e2:ba:69:34:f0:13:a8:12:91:a7:02:
                    61:e3:37:3b:6c:03:d0:e5:84:e1:27:ec:f6:f2:61:
                    d0:cf:22:f3:c6:07:66:b6:6d:3d:f8:bc:f2:20:d4:
                    03:fb:5f:c3:9b:57:cd:77:c4:80:91:13:5f:31:3f:
                    6b:a8:eb:2e:d0:d9:0a:73:de:fc:4d:b6:3f:83:4d:
                    30:17:ba:a5:a4:19:b5:de:dc:44:4c:cd:6f:fe:7b:
                    49:62:6a:9f:2d:ee:81:f9:df:b4:53:49:87:4f:e3:
                    34:d1:f6:5b:6b:c3:55:9b:a1:92:94:11:2d:91:ed:
                    30:ae:8c:e0:1b:63:83:14:c4:78:dc:1f:25:45:e1:
                    9e:e5:c1:0a:83:e1:d4:ba:57:6b:33:dd:11:28:13:
                    1c:1b:ce:b6:2f:57:e5:a8:1e:b0:c2:c6:8a:9b:5b:
                    ea:fa:f3:ba:b7:bc:cc:a5:19:af:ba:bb:38:5a:e2:
                    a6:37:54:43:3c:90:71:22:79:e5:df:c5:c7:91:6f:
                    2f:32:22:98:48:1b:f6:88:36:f9:1c:85:d2:f8:d0:
                    d0:dd:3a:e4:2a:2d:fc:d8:a6:d5:45:28:25:aa:bd:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7F:5C:0A:50:06:8B:2E:E5:F0:3F:42:42:B1:13:FB:A4:15:C6:3E
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:80:e6:6f:a5:0a:d9:ff:7d:02:1a:6d:45:88:fd:87:02:2a:
         16:25:40:d8:4c:85:26:1f:3e:e2:45:57:c8:bd:82:f1:db:70:
         70:0f:9b:db:43:32:6f:1d:45:af:e6:02:e1:95:92:d5:d0:ba:
         00:c1:8c:4a:31:7e:82:26:b4:8d:6e:0e:2f:1b:9c:3a:fa:24:
         4e:d8:55:85:97:7e:7f:09:78:53:69:9e:f1:86:70:56:b4:d1:
         3e:fd:73:d0:33:ca:51:09:dc:8e:43:07:93:48:76:d9:08:03:
         d1:04:5a:44:d6:6e:b7:2e:47:4d:6b:b9:c4:57:f9:44:fb:ca:
         c9:1f:d9:5c:79:f6:96:f1:c5:b9:db:ef:87:1a:c6:b0:b0:15:
         45:7c:1f:f0:bb:7d:e0:9c:e7:0d:95:88:87:e5:4d:5b:a2:6e:
         cf:02:00:0f:78:f8:f1:9e:d0:92:36:9d:8d:5d:13:84:fc:3b:
         71:86:28:52:20:b6:10:58:1a:81:b6:f3:a8:f4:3f:20:24:77:
         fc:e0:80:61:06:95:8c:9f:ac:26:da:62:04:5c:56:31:46:cd:
         68:c4:a5:d0:15:9c:b4:19:f3:6c:c8:e7:d5:ff:94:15:b7:3e:
         15:f5:60:9a:34:84:b6:e8:95:81:4c:41:40:eb:5f:2c:0c:8f:
         f4:2a:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:14:20 2026 by rpki-client