Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa
File:                     3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa (raw, json)
Hash identifier:          EpcRYBMDTMTHTEp9GdA0MbTq2f85IyI2NELwDyuWPgM=
Subject key identifier:   3B:A9:57:83:8C:C0:5A:F8:CC:B4:03:E2:DC:0F:55:88:B0:23:C6:3F
Certificate issuer:       /CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
Certificate serial:       1497658C1DF97C245974097A85E3806948577CCA
Authority key identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa
Signing time:             Wed 27 May 2026 15:44:22 +0000
ROA not before:           Wed 27 May 2026 15:39:22 +0000
ROA not after:            Wed 26 May 2027 15:44:22 +0000
asID:                     52372
IP address blocks:        190.110.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:97:65:8c:1d:f9:7c:24:59:74:09:7a:85:e3:80:69:48:57:7c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
        Validity
            Not Before: May 27 15:39:22 2026 GMT
            Not After : May 26 15:44:22 2027 GMT
        Subject: CN=3BA957838CC05AF8CCB403E2DC0F5588B023C63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:d5:ad:3a:a6:0f:8c:43:e2:d2:af:62:95:
                    3f:97:de:05:a2:b3:19:42:28:47:72:92:06:ba:8e:
                    42:7c:b1:ba:08:1e:58:78:fe:a0:f7:f5:fc:fd:15:
                    28:85:48:77:19:ed:fc:3e:e7:78:b2:23:06:b3:a1:
                    d4:04:ce:19:45:b2:c8:2b:c7:37:bb:81:77:8b:c5:
                    37:3e:f1:a2:d3:05:1e:f7:19:b9:83:cf:f3:92:4d:
                    c3:3b:73:92:5c:67:60:ca:bb:25:50:17:78:b5:87:
                    e7:ae:f1:3a:d6:87:10:58:84:eb:b0:0b:2a:f9:78:
                    af:e7:2f:37:43:5f:0f:d1:1f:90:7d:47:e1:54:26:
                    56:0b:97:bb:29:f4:44:a2:63:b8:a8:8a:8b:4d:5d:
                    42:f6:c4:dc:46:22:9d:05:5d:a5:a1:8e:dd:16:24:
                    11:63:5e:e4:17:f3:d4:67:9e:bc:a2:b6:3d:f8:8e:
                    42:3b:28:22:61:86:48:1f:d5:9c:40:03:c5:9a:6d:
                    54:81:a0:08:4c:a0:11:31:2d:80:6d:9e:ba:5a:91:
                    05:98:25:e9:22:b0:c2:b8:7c:12:75:01:c9:c3:3d:
                    2d:7c:cf:5b:9f:a7:ad:9d:38:d5:4a:6a:d0:30:e0:
                    e0:1d:7d:29:14:69:07:d2:5b:24:b5:29:fd:4c:42:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A9:57:83:8C:C0:5A:F8:CC:B4:03:E2:DC:0F:55:88:B0:23:C6:3F
            X509v3 Authority Key Identifier:
                keyid:66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d2:04:d3:e0:3a:4b:53:0e:26:8a:e0:fc:dc:25:f2:5b:d0:59:
         b7:cb:9b:7d:36:1a:12:fc:ba:4e:22:17:d8:2c:d8:25:e8:57:
         9b:aa:18:0e:21:26:74:95:d7:f9:55:dc:11:ee:e4:59:bd:d4:
         56:68:f0:84:5e:77:c8:21:d6:09:57:43:98:66:0d:35:98:5a:
         0b:10:2e:47:fc:4a:ed:2c:b2:cc:c6:73:56:57:1d:1f:6f:1e:
         4b:7a:a6:d8:c1:34:f6:04:60:e6:78:3d:7d:fe:0d:56:af:82:
         51:06:af:65:dc:40:7c:a8:ca:70:56:59:12:a4:1b:d6:71:dd:
         1d:81:40:1f:a6:a4:47:a8:72:df:08:ff:6e:bf:5f:4f:ab:b3:
         f9:62:28:66:cf:4e:81:9e:0c:fe:62:93:0c:2e:fb:92:cd:a2:
         e0:e3:e8:c2:08:68:b0:9c:0b:8c:c0:b4:eb:e8:bf:f7:07:6c:
         74:e9:c3:fb:e7:26:d0:3b:c3:a9:5f:56:57:34:0a:32:43:1a:
         03:7a:1e:9a:d1:f4:02:a2:33:0c:d0:c7:e9:b0:23:a2:fa:bc:
         be:49:7b:2c:38:1f:5e:56:50:43:84:5c:f0:6f:55:bf:87:80:
         16:31:29:64:64:34:22:a1:e6:63:e0:c4:17:f1:d4:f5:9e:e8:
         9c:d3:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:18:58 2026 by rpki-client