Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3139302e3131302e3232392e302f32342d3234203d3e20323732393238.roa
File:                     3139302e3131302e3232392e302f32342d3234203d3e20323732393238.roa (raw, json)
Hash identifier:          W1CnEDfTXe3yyTl3bJSOEo5FINOrsVPLaSdg3qQdPpg=
Subject key identifier:   28:51:58:1E:AE:18:48:BB:41:95:8F:6C:A2:11:82:46:5E:EE:C7:6C
Certificate issuer:       /CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
Certificate serial:       0D2FA951061C476693F11118C17B6295BEAB1731
Authority key identifier: EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3139302e3131302e3232392e302f32342d3234203d3e20323732393238.roa
Signing time:             Wed 14 Jan 2026 22:00:36 +0000
ROA not before:           Wed 14 Jan 2026 21:55:36 +0000
ROA not after:            Wed 13 Jan 2027 22:00:36 +0000
asID:                     272928
IP address blocks:        190.110.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2f:a9:51:06:1c:47:66:93:f1:11:18:c1:7b:62:95:be:ab:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
        Validity
            Not Before: Jan 14 21:55:36 2026 GMT
            Not After : Jan 13 22:00:36 2027 GMT
        Subject: CN=2851581EAE1848BB41958F6CA21182465EEEC76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:97:0a:5f:8c:14:c4:a8:07:39:89:c5:75:
                    e7:54:47:50:a2:f0:19:95:5d:f6:da:7e:54:bc:41:
                    7b:99:44:03:15:ed:28:7b:d4:18:80:53:72:ae:de:
                    0a:3f:fc:41:83:98:5a:f7:73:c4:5a:ee:d3:35:4f:
                    38:86:26:62:0a:76:49:fb:83:dc:62:14:30:8f:8c:
                    9e:2a:74:fc:30:8e:ae:59:85:90:95:bd:ca:54:ff:
                    38:d8:6d:2b:5c:28:c6:c6:15:f8:46:d7:98:91:62:
                    40:9c:cd:c6:d8:74:58:29:5e:ae:28:79:18:39:d1:
                    56:c1:cb:ad:09:c3:d7:83:cc:b5:51:ef:f8:80:19:
                    41:35:34:9d:2b:19:09:ef:24:16:2c:ec:88:c1:59:
                    ca:57:be:83:36:ec:29:31:7f:16:7f:5d:69:39:63:
                    75:cf:a2:ec:fd:e2:a7:1c:89:4f:79:35:28:71:09:
                    88:d7:17:e7:5e:d7:fd:b5:94:af:53:e8:20:55:5b:
                    8a:14:9c:0f:e7:4f:b0:30:d0:7f:0c:b7:a8:4f:60:
                    64:b1:c5:a3:1a:df:23:7a:e4:bb:d7:0f:9e:0e:53:
                    ef:b2:e7:cb:9b:79:67:25:2e:04:4f:44:22:ac:1f:
                    f3:25:18:1d:4d:76:64:79:29:6b:70:61:bd:25:ab:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:58:1E:AE:18:48:BB:41:95:8F:6C:A2:11:82:46:5E:EE:C7:6C
            X509v3 Authority Key Identifier:
                keyid:EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3139302e3131302e3232392e302f32342d3234203d3e20323732393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:18:12:06:06:51:82:fb:67:c5:a5:64:e4:26:42:8f:62:e0:
         b2:66:39:56:4a:c5:6e:cd:35:ba:41:a0:20:53:36:57:e7:e5:
         21:18:47:6b:c7:53:a4:0f:41:1e:aa:4d:33:ae:e3:e1:d1:3e:
         c9:48:c7:c0:23:a6:fd:bb:71:13:d9:3b:f2:3e:fa:4c:c5:58:
         75:bb:97:f3:8a:0a:b6:4e:ca:07:13:9c:a4:81:13:94:6b:b4:
         74:96:69:76:55:5d:21:0d:11:cb:1a:30:06:6d:eb:12:3e:05:
         b9:6d:f1:27:bd:b7:83:1d:94:fe:54:ae:af:e3:2d:f4:bf:6d:
         42:93:73:33:8b:54:d7:47:07:68:16:ce:26:7d:83:81:30:f4:
         87:7b:c5:54:01:01:f0:3d:ff:b8:5c:7d:ab:a4:69:11:b2:67:
         23:1f:b9:ef:87:03:0a:41:78:45:03:3b:ed:47:2e:db:f2:45:
         93:e4:07:d2:99:e4:c6:10:b5:58:e8:0e:e4:62:ec:d2:23:aa:
         e3:ac:11:55:f8:8b:23:ed:a3:52:e2:fe:20:cd:9e:da:b5:82:
         b4:2f:4a:db:d7:77:f3:7f:2f:f0:67:56:a9:d1:45:3d:86:95:
         35:ae:5a:b7:7f:1d:e8:86:66:5e:3e:97:3a:86:a4:30:12:7b:
         14:33:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:25 2026 by rpki-client