Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa
File:                     3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          EVyvQqsZYgbPJEs50XTjyoKfBeR0KgFJ21f8y1ISeJo=
Subject key identifier:   96:8F:21:BA:89:35:B1:67:45:DD:DC:84:0D:8B:FA:2A:53:13:22:63
Certificate issuer:       /CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
Certificate serial:       28853C9D0428282697C4C362AE6FA8E67BBD9DA2
Authority key identifier: 7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa
Signing time:             Fri 14 Aug 2026 18:25:32 +0000
ROA not before:           Fri 14 Aug 2026 18:20:32 +0000
ROA not after:            Fri 13 Aug 2027 18:25:32 +0000
asID:                     198949
IP address blocks:        190.103.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 14:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:3c:9d:04:28:28:26:97:c4:c3:62:ae:6f:a8:e6:7b:bd:9d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
        Validity
            Not Before: Aug 14 18:20:32 2026 GMT
            Not After : Aug 13 18:25:32 2027 GMT
        Subject: CN=968F21BA8935B16745DDDC840D8BFA2A53132263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:06:01:83:ee:95:f3:fa:84:fa:3d:bc:a1:
                    1e:5b:12:9b:50:49:70:b4:6a:f6:24:72:fb:0a:d7:
                    2f:a0:b0:1e:68:fc:42:f0:c0:b7:e0:c4:e6:c7:bc:
                    f4:d8:10:26:9b:66:7a:3f:eb:d0:db:73:78:07:b3:
                    dd:96:c4:63:23:09:d5:ee:ca:41:7e:7e:9b:da:04:
                    a9:c2:a0:d8:fb:88:e4:f9:af:ac:5d:29:07:cd:44:
                    64:4d:d0:5b:a4:e8:e4:55:d1:77:bb:2c:6b:c0:e4:
                    5f:37:78:75:6d:ef:af:59:93:61:aa:27:fc:47:e1:
                    0c:81:c6:56:a1:73:f1:00:3a:2a:60:dd:bd:02:ea:
                    0b:63:69:9c:e5:8c:8b:1d:af:bb:a2:a4:d9:3b:c9:
                    88:29:0f:d2:d1:c5:27:6e:21:12:ea:36:dc:25:27:
                    69:33:34:a1:e4:c7:87:f9:38:e8:ba:2f:2b:64:3a:
                    e1:c9:6f:52:0e:a3:f4:80:49:b8:52:08:76:da:c2:
                    cb:41:1f:5a:a5:53:25:7c:cc:ca:54:63:f5:ce:eb:
                    15:d8:6d:80:01:ff:ca:8e:1c:9b:ec:39:c5:80:58:
                    9c:c7:94:1a:ef:5c:2e:5e:ed:46:8e:00:0f:b7:ab:
                    a6:9b:22:98:e5:90:7e:dc:df:25:5d:6a:1f:d1:81:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8F:21:BA:89:35:B1:67:45:DD:DC:84:0D:8B:FA:2A:53:13:22:63
            X509v3 Authority Key Identifier:
                keyid:7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:40:e5:01:6a:45:16:57:7f:ac:c8:c8:a3:f1:e7:8b:64:6a:
         55:94:2e:63:33:1e:b5:1b:03:ae:b0:44:ef:34:fa:af:d7:14:
         64:c8:ab:35:9a:82:2e:d1:21:a2:46:b2:0c:b6:18:92:6f:d0:
         58:79:87:3d:45:d7:4e:7f:5f:04:48:4c:ae:00:a2:9c:d4:cb:
         ce:1c:f0:0e:44:9f:8e:d6:f7:71:c2:0c:80:38:f0:fa:19:09:
         2b:a1:f2:60:af:c2:12:3d:4c:bc:60:7f:2f:2b:17:74:4e:4e:
         fe:23:59:6a:ce:dd:52:2d:b1:b0:a0:2e:95:33:6d:50:d9:a8:
         e2:82:08:b2:06:d7:0b:eb:7b:8c:70:df:7a:ce:36:87:01:5c:
         d7:84:30:16:3f:76:1d:66:f2:6f:46:a2:89:44:9d:02:96:36:
         26:ab:ea:e4:0d:74:50:92:0d:1b:eb:01:a9:4a:ca:84:84:c4:
         4e:39:c8:da:cc:28:92:d0:33:43:c8:80:d7:04:c9:61:91:22:
         18:6b:cf:2e:38:fb:ed:8b:2d:1d:9c:d6:66:9f:61:0d:88:fe:
         dd:46:54:13:b5:6e:6e:96:73:dd:a8:6e:16:bf:b2:58:33:8e:
         a9:0a:23:b1:d8:fc:0e:40:62:28:62:e0:99:dc:33:1f:20:b2:
         cd:e8:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:05 2026 by rpki-client