Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136392e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3136392e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          MEn2SEiqD+Wylzcj/9MDRvoS9Eb0t6MsBsnp1z5cJ7c=
Subject key identifier:   6F:E8:3D:14:75:AE:C3:5D:54:68:17:35:CA:20:E3:8B:DA:C8:C6:06
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       2138408FBD562FEBF5003D29DBBD81C34108F23F
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136392e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 06 Jan 2026 19:22:52 +0000
ROA not before:           Tue 06 Jan 2026 19:17:52 +0000
ROA not after:            Tue 05 Jan 2027 19:22:52 +0000
asID:                     28099
IP address blocks:        190.3.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 08:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:38:40:8f:bd:56:2f:eb:f5:00:3d:29:db:bd:81:c3:41:08:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Jan  6 19:17:52 2026 GMT
            Not After : Jan  5 19:22:52 2027 GMT
        Subject: CN=6FE83D1475AEC35D54681735CA20E38BDAC8C606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:e0:de:e0:1f:44:43:ea:f4:50:4e:47:a2:
                    4e:51:7b:e6:4e:28:f7:86:64:74:9e:54:9b:41:75:
                    bc:30:78:41:d3:e5:ee:53:5a:4d:a3:2c:d6:a2:97:
                    5f:c0:25:17:69:54:61:38:08:36:79:87:18:65:d4:
                    14:64:e4:3a:79:ac:3f:cd:17:8e:e0:f7:8a:03:2d:
                    a8:bc:e1:d6:d4:ae:dc:47:fc:c8:a5:a8:63:8b:c0:
                    42:c3:39:33:9d:cb:a2:f8:9e:94:f7:ba:ae:ff:b4:
                    df:cc:7e:d7:09:2c:97:7d:8d:a2:a0:41:70:93:57:
                    a5:01:78:26:1c:3c:24:70:de:fb:58:55:e1:a8:97:
                    41:88:db:2d:e4:6e:9c:a7:33:77:21:3a:e8:f0:f9:
                    37:10:9b:6e:c1:2b:a3:6c:6a:42:2d:c6:38:14:25:
                    eb:df:0c:30:a9:0c:fa:67:14:9e:5f:c5:27:2a:fc:
                    41:a5:b3:43:18:43:50:8a:2c:97:7a:56:99:d2:56:
                    a0:f6:a8:bc:0b:62:7f:6f:d3:a5:dd:e5:43:c5:c1:
                    15:ef:2a:48:2a:c1:93:1d:93:1f:db:08:a0:2a:ff:
                    6f:a3:07:f6:1c:13:bf:3c:f1:c3:11:ae:1e:80:47:
                    4b:b0:f2:eb:41:1e:cb:d2:b8:c8:1e:ea:4c:fd:8c:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:3D:14:75:AE:C3:5D:54:68:17:35:CA:20:E3:8B:DA:C8:C6:06
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136392e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:09:2a:1d:d4:38:73:e7:14:f2:6d:2c:29:bc:ed:87:3d:10:
         78:01:86:18:76:a6:52:bc:d8:f3:e7:46:9c:63:97:98:c9:bf:
         2e:3e:59:19:bd:b5:51:69:05:4a:66:d0:10:fa:e4:ad:65:82:
         bc:37:1f:3a:eb:55:97:6c:73:51:ce:74:13:37:36:c0:f1:7f:
         2f:3a:36:64:15:15:d1:51:fb:61:f7:07:7f:1d:ba:10:23:af:
         75:28:63:b2:eb:3c:9d:bd:9d:01:97:7f:db:d3:94:18:de:55:
         92:61:cc:1e:0f:ac:0c:74:6c:b5:82:04:7b:5f:8e:5c:86:9b:
         24:79:97:57:78:dd:92:a5:e6:a5:00:58:cf:fe:79:6e:2d:33:
         16:66:61:4f:e5:36:7c:67:d9:01:6e:21:d2:e2:e8:11:c2:4f:
         4a:78:76:04:e8:02:c8:3e:4f:ea:d5:04:c2:93:25:75:41:ed:
         15:3d:cb:d3:e5:68:d6:df:d4:57:a4:99:29:41:fc:31:9f:2e:
         54:d3:e0:8b:a3:ba:41:b4:e1:4d:70:fc:42:d5:19:37:ad:2c:
         66:d5:b2:9e:72:c8:1c:b6:76:11:2b:aa:78:80:1f:f3:f5:b1:
         be:2b:85:1f:e8:8e:11:48:72:3e:a2:3c:94:d9:4a:ae:1e:91:
         cd:c7:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:14:48 2026 by rpki-client