Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa
File:                     3139302e372e3139322e302f31392d3234203d3e203237383736.roa (raw, json)
Hash identifier:          bhplvLn6IsyVjbsoBMJH5Fw0Ri8xxS5Tnvu5Z2D4oeg=
Subject key identifier:   92:7E:A8:EF:DD:CA:C6:64:99:3D:BF:E9:63:9B:24:A5:29:FF:D2:44
Certificate issuer:       /CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
Certificate serial:       3AEB34B21DB8050B179E2B3ED336A17998889126
Authority key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa
Signing time:             Tue 11 Aug 2026 22:25:07 +0000
ROA not before:           Tue 11 Aug 2026 22:20:07 +0000
ROA not after:            Tue 10 Aug 2027 22:25:07 +0000
asID:                     27876
IP address blocks:        190.7.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Sep 2026 15:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:eb:34:b2:1d:b8:05:0b:17:9e:2b:3e:d3:36:a1:79:98:88:91:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
        Validity
            Not Before: Aug 11 22:20:07 2026 GMT
            Not After : Aug 10 22:25:07 2027 GMT
        Subject: CN=927EA8EFDDCAC664993DBFE9639B24A529FFD244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:5a:29:8a:68:d1:29:ca:22:60:f4:41:b3:
                    cc:cd:73:58:a4:a3:7d:4a:38:02:57:db:a1:84:0f:
                    dd:18:d0:10:ca:ab:95:f8:59:df:9b:b0:51:99:7c:
                    72:36:1c:27:98:45:a5:9f:71:50:0d:69:ab:45:c8:
                    f4:b1:bc:cd:52:0c:bd:44:17:09:de:9c:4e:52:22:
                    38:ce:46:e2:8b:8c:00:34:38:f9:aa:42:b5:2f:9c:
                    50:80:8e:1f:12:8f:1f:36:16:06:f8:c5:07:97:81:
                    25:ee:11:b5:dc:2c:b2:4d:3b:f6:77:9e:ea:69:34:
                    ec:c5:a2:89:19:a0:e6:6a:cc:c5:57:60:df:bd:c5:
                    59:4d:47:c6:83:15:58:e4:bd:c0:b2:b7:7e:74:79:
                    0a:14:5b:eb:10:bb:11:cf:48:e3:49:09:d7:2a:d7:
                    32:b8:c7:5b:87:82:56:40:c8:9f:82:f4:9d:5b:d0:
                    ed:8d:ee:a2:e9:41:8a:c0:7c:3d:ec:52:fe:68:4e:
                    b0:3d:bc:3e:20:2d:1d:e8:0b:b1:15:96:d9:47:75:
                    cd:33:9d:44:84:6e:2e:cd:fb:0d:7d:d1:27:7c:99:
                    67:6f:e6:0c:56:f8:de:54:60:23:fe:59:7b:39:b7:
                    d3:38:20:22:d8:d8:29:85:c9:7b:4e:a1:1b:bb:07:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7E:A8:EF:DD:CA:C6:64:99:3D:BF:E9:63:9B:24:A5:29:FF:D2:44
            X509v3 Authority Key Identifier:
                keyid:4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:12:a6:de:1b:85:44:64:9f:2d:ec:cb:c6:a0:1c:eb:31:11:
         9d:67:48:64:54:02:97:2e:4a:45:a9:8b:4f:e4:5d:c7:91:e2:
         cc:12:7c:92:22:fb:9d:61:b8:42:9c:e6:45:af:1f:db:b1:d9:
         e9:ba:ec:fa:1d:54:7f:a2:1e:d0:7b:21:32:03:44:bc:7e:0f:
         c1:eb:0a:5f:f0:31:45:2f:4d:17:cb:ad:13:12:4d:bf:1e:2c:
         70:f0:68:d6:70:05:2f:16:7a:e9:0a:51:5c:0e:36:ec:8c:be:
         bc:2e:09:93:3b:94:90:bf:5d:cc:48:10:fe:a6:5b:ab:72:5f:
         04:2f:c3:fe:bb:a0:be:15:bd:fa:af:2f:0e:2b:ee:c7:69:4c:
         68:86:86:f5:ba:c3:bc:52:e4:2f:9b:55:3e:81:db:24:49:10:
         0c:e9:6c:02:7b:82:d5:7f:09:fc:20:de:d1:a5:bb:dd:5e:00:
         38:61:57:bb:68:6e:64:f6:9b:85:2e:28:42:52:04:3d:c1:0d:
         59:71:4e:3a:6a:00:71:79:59:52:38:3c:8d:04:23:a3:9b:f4:
         0a:dd:3e:e4:d8:85:0d:8b:36:1c:6d:2b:99:48:8e:c8:a2:38:
         ad:ed:88:3b:c5:24:2c:79:cb:bf:4a:58:2c:02:e2:78:2d:b7:
         51:58:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:41:37 2026 by rpki-client