Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa
File:                     3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa (raw, json)
Hash identifier:          CY2Yrbc8d9rTeI7LD42imWXXGlbmZXjy72jqwjHzitw=
Subject key identifier:   98:80:09:A2:A7:EC:22:74:BF:28:16:2E:B6:41:C5:D8:1B:6F:A7:91
Certificate issuer:       /CN=822238317AA58BF50F02E72654D92F5AAF15F921
Certificate serial:       245EE4E9E640D116006A51ABB0BC0D4EB2BC1DDE
Authority key identifier: 82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa
Signing time:             Tue 06 Jan 2026 19:07:40 +0000
ROA not before:           Tue 06 Jan 2026 19:02:40 +0000
ROA not after:            Tue 05 Jan 2027 19:07:40 +0000
asID:                     270058
IP address blocks:        190.115.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5e:e4:e9:e6:40:d1:16:00:6a:51:ab:b0:bc:0d:4e:b2:bc:1d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822238317AA58BF50F02E72654D92F5AAF15F921
        Validity
            Not Before: Jan  6 19:02:40 2026 GMT
            Not After : Jan  5 19:07:40 2027 GMT
        Subject: CN=988009A2A7EC2274BF28162EB641C5D81B6FA791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:33:cd:d5:b9:77:d5:0a:7f:70:86:ac:20:
                    ac:ed:2d:0b:9f:1b:a2:c7:3a:6a:25:a7:8d:e1:e6:
                    b7:52:41:a3:91:90:25:be:87:59:ce:2d:0f:30:c0:
                    cb:3c:dc:60:37:22:5c:f1:9e:72:91:37:18:0f:c5:
                    a6:da:8b:9c:8d:b1:71:38:09:63:46:75:11:b5:8b:
                    92:33:7b:df:a0:c6:b1:ee:02:8b:a7:96:61:60:db:
                    06:b7:06:fb:ae:7e:36:8a:08:8a:f2:01:d5:82:9f:
                    3b:3e:66:f8:95:44:1e:ba:db:b4:f9:ce:5c:b7:aa:
                    09:f4:bc:68:5c:18:6d:f0:8d:7d:11:99:c0:41:cb:
                    2c:66:c0:53:9f:29:50:42:e8:98:f5:2a:1c:ea:69:
                    cc:cb:6d:4e:f8:75:f5:43:da:e4:79:4b:70:ac:bd:
                    67:96:dc:38:ef:fe:b5:46:4d:14:e4:be:30:4a:f0:
                    39:5c:d5:15:13:44:22:b0:38:8e:b5:da:08:42:84:
                    06:59:ca:28:e0:96:6f:5c:62:fd:9e:17:25:5d:d6:
                    8f:4b:ef:d0:76:a4:16:af:b8:3f:90:3c:ff:0c:12:
                    e3:30:c6:c3:a6:b0:47:fb:02:6d:ef:68:6b:53:68:
                    fd:3d:73:73:43:c5:6a:41:5f:35:8b:1f:8e:5e:99:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:09:A2:A7:EC:22:74:BF:28:16:2E:B6:41:C5:D8:1B:6F:A7:91
            X509v3 Authority Key Identifier:
                keyid:82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:81:f9:69:20:7b:ad:9f:a6:e8:45:5e:77:ed:89:e8:0b:
         7c:d8:ad:af:83:48:aa:fc:09:2e:e6:e1:e1:3b:9c:46:a6:e5:
         42:5e:28:49:4c:ad:d4:7b:24:8b:40:b6:20:7f:34:98:8d:10:
         c3:3b:36:ab:69:45:66:df:8d:bb:a8:28:de:ea:82:ef:21:64:
         16:8b:80:8a:7d:1c:9e:4b:de:68:07:b9:97:6e:47:a6:2d:ea:
         f6:14:ed:05:cb:f3:a8:6d:14:7d:03:b0:92:31:e5:80:83:5a:
         62:08:92:eb:64:fe:dd:d6:b8:8b:96:be:9a:96:aa:47:c0:ef:
         0c:29:75:4b:55:51:83:a1:bd:88:9d:74:7e:e9:fe:59:02:d4:
         ae:59:fb:db:45:fd:c3:45:0a:ff:6f:4c:b1:a2:80:47:97:a7:
         52:15:23:8d:98:46:53:22:ef:8d:b9:9c:67:ea:79:56:4c:16:
         b4:b6:60:cb:98:a8:4b:a4:eb:45:44:ab:94:85:76:43:05:ce:
         ba:d8:a1:ad:67:7c:4a:79:8f:0b:98:a2:a0:22:21:22:18:6a:
         6d:23:86:07:22:90:55:1c:9a:aa:c8:6e:76:92:bc:2d:a9:54:
         fc:94:90:bb:63:e8:29:b8:36:fe:02:19:6b:cf:dd:c4:42:6a:
         96:87:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:03 2026 by rpki-client