Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3131342e302f32342d3234203d3e20323731393036.roa
File:                     3139302e31342e3131342e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          HUdD4A7sKXuwtLt0pJ9vHvdVlTOEUsttUBe8GID0M34=
Subject key identifier:   57:97:B2:F3:89:36:75:CA:9B:51:47:8B:70:0A:23:5B:CE:DF:E3:42
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       70A539D79167BDB84F34D88D72A3B0881F6B093C
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3131342e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 30 Jun 2026 20:55:00 +0000
ROA not before:           Tue 30 Jun 2026 20:50:00 +0000
ROA not after:            Tue 29 Jun 2027 20:55:00 +0000
asID:                     271906
IP address blocks:        190.14.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:39:d7:91:67:bd:b8:4f:34:d8:8d:72:a3:b0:88:1f:6b:09:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jun 30 20:50:00 2026 GMT
            Not After : Jun 29 20:55:00 2027 GMT
        Subject: CN=5797B2F3893675CA9B51478B700A235BCEDFE342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:00:84:5e:84:80:fe:97:28:13:d6:76:91:
                    bd:e3:56:9a:16:06:cc:79:a1:93:63:37:fc:17:94:
                    a9:7d:c5:85:19:1b:15:e3:40:b5:d5:53:d7:a0:e6:
                    3d:75:c8:ae:62:e4:5a:7b:66:87:f8:a3:23:30:e9:
                    e4:aa:5e:94:36:0e:7f:e9:2e:9a:c6:c9:b9:14:1f:
                    ec:e7:9e:0d:7b:44:03:a8:e6:95:fa:b7:c9:65:1b:
                    15:f9:7e:c1:b0:60:ee:86:0e:f3:c2:e5:44:6c:85:
                    39:c4:73:3b:83:91:b2:d2:ed:06:e9:e0:dd:5a:70:
                    f4:da:7c:68:2e:d2:34:3f:98:12:62:59:e7:35:c6:
                    aa:bb:0a:ab:ec:a7:65:53:dc:c8:ec:9a:b4:48:54:
                    86:2a:25:2e:df:42:c6:58:a7:9d:7e:53:22:2a:81:
                    82:e4:ae:48:97:25:7a:49:34:ab:2b:e4:b3:e3:27:
                    33:b0:fa:2d:94:b6:51:61:66:f8:70:7f:fd:50:66:
                    b2:37:25:04:6f:ff:7e:21:36:2d:ee:f4:24:e9:7f:
                    35:14:57:72:60:24:97:20:00:bb:c0:db:22:02:92:
                    5a:96:62:c7:a5:e3:57:57:94:06:33:33:d1:4c:c9:
                    42:0e:df:ee:aa:f6:42:91:fd:68:64:c7:93:1a:88:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:97:B2:F3:89:36:75:CA:9B:51:47:8B:70:0A:23:5B:CE:DF:E3:42
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3131342e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:63:4f:8f:f9:94:6b:8a:bf:32:47:53:95:93:e2:24:37:c1:
         74:a5:e1:b5:4f:75:12:27:a9:66:14:25:30:b0:82:40:c8:1c:
         ea:3e:35:2d:50:b8:67:2d:c4:56:30:23:27:67:0c:9d:82:4a:
         94:73:26:7f:f5:b9:ab:1f:a8:1b:57:fa:7e:de:45:7e:38:8b:
         a2:3b:95:29:52:cc:37:ff:7c:94:a8:03:f2:9a:0e:38:b4:ff:
         62:9f:5e:18:0f:61:e5:bf:d9:d4:ac:a3:6a:cd:e0:67:d8:be:
         d2:42:ac:02:dc:0a:a1:e8:dd:36:7b:3f:a1:83:48:33:45:97:
         63:96:fa:e2:2d:ed:3e:58:2b:ea:64:69:c6:c4:bb:b6:c4:40:
         ab:1c:20:ba:b6:68:b0:10:aa:18:4c:f1:65:e2:2a:f3:47:bb:
         3b:6c:2c:ea:b7:38:70:8f:2f:38:e1:9e:40:a1:91:b4:49:ca:
         42:fe:b3:f6:93:04:d0:ca:35:f3:f0:75:c0:8d:67:65:14:35:
         97:0b:6c:53:70:ff:9f:e2:f8:ca:c9:05:6a:79:0c:90:c7:37:
         6d:ee:9a:42:e4:60:5d:e8:79:e8:f3:e0:dd:7c:bb:7d:dd:16:
         4d:c4:5d:44:0c:56:f6:45:d7:73:7d:e5:5f:58:30:2f:72:7a:
         41:2a:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:59:14 2026 by rpki-client