Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3131322e302f32342d3234203d3e20323731393036.roa
File:                     3139302e31342e3131322e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          Gb9pyWeGFsy0dAoqxVRKmSOfPdknJWByJvG6qQiH+Aw=
Subject key identifier:   52:C5:13:43:24:9D:C4:3A:43:AB:14:09:91:CF:28:0D:BE:12:84:81
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       51EDB3408F002A321E4021D80A10BA583DBD47BD
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3131322e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 30 Jun 2026 20:55:01 +0000
ROA not before:           Tue 30 Jun 2026 20:50:01 +0000
ROA not after:            Tue 29 Jun 2027 20:55:01 +0000
asID:                     271906
IP address blocks:        190.14.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:b3:40:8f:00:2a:32:1e:40:21:d8:0a:10:ba:58:3d:bd:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jun 30 20:50:01 2026 GMT
            Not After : Jun 29 20:55:01 2027 GMT
        Subject: CN=52C51343249DC43A43AB140991CF280DBE128481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:31:b3:1e:a6:cd:39:46:c1:a9:bf:ce:b2:
                    4b:96:b9:35:49:fa:19:cd:85:a6:fd:cf:a1:1a:42:
                    eb:b0:81:26:55:d8:60:ac:dd:22:11:0a:f6:8a:86:
                    04:e9:ac:8d:8e:23:d8:14:9a:bc:b6:ea:81:b4:49:
                    36:f8:01:c8:08:55:87:a8:e6:94:da:e3:ca:96:09:
                    8e:53:7c:87:eb:56:87:34:a8:39:9f:27:37:c3:3c:
                    55:0e:96:f2:3d:69:66:4f:50:8b:94:5a:5c:1e:e1:
                    78:e0:75:5f:72:d8:9c:b3:e4:8a:9d:37:b6:93:51:
                    3e:3b:6f:e4:df:6e:fb:f9:84:6a:27:f4:90:3f:65:
                    3a:54:ed:07:c2:25:e3:cc:ab:31:c3:0f:25:a6:5d:
                    e2:d8:d9:1e:e1:a3:b6:08:d3:10:84:7e:47:ac:bc:
                    b2:fa:0f:0a:d5:75:30:8d:0f:5c:0e:45:d2:c9:a4:
                    3c:df:da:e1:a2:98:f7:89:e7:37:f4:c8:74:ec:b9:
                    b4:a9:c8:6d:20:10:ac:01:be:af:7d:83:0e:94:56:
                    b1:74:0b:15:e2:07:66:e6:e8:1b:49:16:d8:86:eb:
                    39:04:d9:eb:57:02:3b:f3:1c:6a:98:de:c7:e4:ab:
                    08:d5:77:72:b5:01:8a:36:6d:a9:60:0b:c5:29:15:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:13:43:24:9D:C4:3A:43:AB:14:09:91:CF:28:0D:BE:12:84:81
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3131322e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:73:36:0e:32:0d:9f:21:d9:fd:23:f7:f7:08:3c:a6:e8:
         49:fa:13:ce:e5:ca:bf:ab:bd:11:86:99:c6:be:99:70:14:9e:
         29:4d:4a:56:0f:bb:52:63:d8:3f:5c:ae:d2:77:b9:5e:be:5f:
         28:57:e1:8b:91:95:72:a1:d2:9f:af:5c:16:f1:59:5a:54:34:
         24:01:3f:2b:0c:b2:a7:7d:65:eb:e6:f9:fb:db:eb:c3:d4:7f:
         e5:08:07:2f:6e:33:16:f8:dd:97:5f:30:b9:e7:42:c3:bc:75:
         c4:aa:f9:81:ae:f2:33:c3:33:2e:f8:98:3e:53:f9:0a:b6:bc:
         13:bb:61:21:13:cd:06:72:aa:c3:bc:52:38:ee:22:06:d5:b8:
         3c:7d:aa:17:d2:98:bb:9a:f9:b2:2b:ef:3f:ff:93:81:c2:af:
         84:da:94:96:08:5d:51:de:dd:12:12:7f:54:c1:1b:fb:72:08:
         a6:cb:df:da:01:5b:b4:f5:8a:c6:e4:f6:b2:d0:f9:54:f4:a5:
         bb:38:12:db:68:a5:fb:82:37:6e:55:c3:9b:41:95:7b:d3:9d:
         e8:59:c7:b3:7d:53:49:9b:47:f1:af:55:e6:00:e7:ee:34:c8:
         d7:6b:cd:1c:88:8a:56:5f:12:fa:ef:90:1e:6f:c5:78:3f:c9:
         bf:3c:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:00:27 2026 by rpki-client