Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3231312e3234332e302f32342d3234203d3e203238313033.roa
File:                     3139302e3231312e3234332e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          A+LsK/jwRDm1Ipbi+AkU/ArqmFth4iLFzBPSikYjKMw=
Subject key identifier:   6C:86:B0:B8:3C:BF:E5:9F:CD:E6:C9:FE:53:D9:07:CD:C1:D5:A6:F8
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       410A328A45C451635E0F6A8DB69160A50145D3BA
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3231312e3234332e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 15 Jun 2026 13:47:48 +0000
ROA not before:           Mon 15 Jun 2026 13:42:48 +0000
ROA not after:            Mon 14 Jun 2027 13:47:48 +0000
asID:                     28103
IP address blocks:        190.211.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 07:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0a:32:8a:45:c4:51:63:5e:0f:6a:8d:b6:91:60:a5:01:45:d3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jun 15 13:42:48 2026 GMT
            Not After : Jun 14 13:47:48 2027 GMT
        Subject: CN=6C86B0B83CBFE59FCDE6C9FE53D907CDC1D5A6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:45:11:60:c8:84:14:68:ba:9f:7e:f6:45:
                    f8:79:b0:ab:41:dc:86:1f:80:ba:bb:43:0e:64:b5:
                    0b:ab:8f:03:26:46:cb:d9:60:2b:21:41:1d:9c:cb:
                    da:fa:32:24:60:99:2a:17:ff:85:10:72:3f:4d:e0:
                    06:65:cf:17:af:9c:a3:55:df:92:4b:33:44:48:20:
                    c5:46:da:7e:49:1a:2c:8d:4a:10:20:fb:44:6d:f4:
                    fe:f1:c7:37:9f:8e:d4:bd:08:55:6b:59:85:b8:fe:
                    09:61:d9:27:67:7d:3b:08:94:a8:14:6f:96:84:d9:
                    13:e1:96:7f:b9:1b:33:63:e7:2b:e8:fe:f6:fa:c6:
                    21:3a:b4:f4:57:a0:ea:2f:4c:52:0e:b5:0c:fb:bc:
                    21:f8:78:62:cc:de:4f:ac:76:fd:75:b5:05:5d:66:
                    7a:2e:ed:03:22:40:0b:b8:ae:7f:50:20:df:fe:50:
                    ef:63:04:08:86:36:54:7d:36:60:ad:d3:6e:e9:d3:
                    6f:94:06:80:5e:36:2c:94:4c:b7:45:ff:70:55:b3:
                    b0:ed:26:d1:bc:9e:51:3b:3b:95:bd:53:da:73:fb:
                    3c:96:18:8b:22:7c:b0:22:39:41:fc:0c:d1:c5:db:
                    28:1f:03:0d:24:0f:c6:5c:df:ff:2e:1c:b4:f7:18:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:B0:B8:3C:BF:E5:9F:CD:E6:C9:FE:53:D9:07:CD:C1:D5:A6:F8
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3231312e3234332e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:da:8e:c6:44:24:40:0b:46:2c:49:a9:a3:dd:be:45:dc:
         5a:e9:ae:09:4f:04:ad:28:14:34:7c:94:27:e2:24:cd:2d:a2:
         43:de:cc:15:ab:d8:85:8d:a9:7a:8c:3c:85:4d:aa:84:2f:71:
         d1:40:2f:81:ec:4b:69:b7:42:de:0d:48:21:60:d9:34:ad:70:
         96:92:14:6d:19:b1:74:9f:d1:c7:71:63:a1:a5:e7:85:86:ac:
         53:e9:ce:45:d1:af:5b:14:ab:85:2f:15:8f:e4:e9:43:ce:6f:
         f3:c8:ab:d8:8c:c7:e7:49:b3:44:dd:9f:1a:b9:06:52:ef:0e:
         96:45:77:57:4e:79:ad:7e:e7:f5:20:e4:89:64:fc:3f:25:65:
         d3:7a:93:1c:14:34:21:81:9d:c4:8e:6e:42:c4:54:b6:e9:15:
         f4:2f:d8:17:a3:8e:d9:40:e8:1d:b9:8e:71:00:c6:68:71:28:
         ad:4d:e2:93:70:23:d8:17:24:62:d1:ab:1d:49:7b:31:c2:4d:
         06:9b:fa:e0:f0:55:1a:e7:47:d0:b2:45:62:10:72:a3:fb:03:
         ee:f2:1f:3d:00:ca:6f:ff:8d:72:b8:c5:c6:1c:dc:20:6d:bb:
         01:ca:fd:62:66:6d:c1:ad:4d:eb:75:91:fb:99:44:2c:f5:5e:
         ad:06:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:06:38 2026 by rpki-client