Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135312e302f32342d3234203d3e203231353735.roa
File:                     3139302e382e3135312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          rhjz+F+viepiFil0hYE9rFKtN4uSvRZ5ySbIB1Wh3t8=
Subject key identifier:   C4:09:4F:BF:70:09:C8:9A:0C:E0:A1:BE:EC:B5:43:5E:51:59:4E:79
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       1B6F665707CC0DF2FA6F7E75234D0838E517019B
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135312e302f32342d3234203d3e203231353735.roa
Signing time:             Thu 09 Jul 2026 21:51:42 +0000
ROA not before:           Thu 09 Jul 2026 21:46:42 +0000
ROA not after:            Thu 08 Jul 2027 21:51:42 +0000
asID:                     21575
IP address blocks:        190.8.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 05:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6f:66:57:07:cc:0d:f2:fa:6f:7e:75:23:4d:08:38:e5:17:01:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jul  9 21:46:42 2026 GMT
            Not After : Jul  8 21:51:42 2027 GMT
        Subject: CN=C4094FBF7009C89A0CE0A1BEECB5435E51594E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:c3:e1:1c:c5:5f:78:8b:78:c2:bd:12:34:
                    5c:1e:70:51:20:b0:cf:42:ac:f6:00:1d:d1:7e:8f:
                    b8:0d:51:80:16:6e:9d:f5:3c:43:85:a1:7a:81:91:
                    49:b7:e9:b7:40:20:41:da:3a:8c:1c:1b:e9:f3:fe:
                    d4:b2:ff:29:9f:50:c0:18:22:ca:5b:9c:ee:33:18:
                    bd:83:36:e2:46:56:6c:c7:8e:73:64:9c:cf:72:e8:
                    cc:3b:27:28:86:02:e8:2a:e1:bc:b7:ef:6d:68:8f:
                    bc:11:30:6f:61:65:20:eb:e7:93:d8:cc:b4:d0:c7:
                    d5:97:8c:75:7f:19:d5:45:1e:37:fc:93:60:c9:b6:
                    65:24:fe:61:6f:08:6b:13:97:04:4c:2b:88:38:82:
                    7b:8d:85:59:cb:8a:80:55:0e:4b:97:b8:51:e1:96:
                    7b:8f:96:cb:38:4d:28:da:6f:94:40:01:59:9f:36:
                    54:61:bb:42:70:e2:0a:6c:4a:54:97:28:7c:9b:e7:
                    17:fb:dd:04:c1:25:22:79:14:c2:83:0b:1a:b8:1a:
                    72:c5:f7:65:db:2e:4b:8b:52:88:62:9d:41:55:50:
                    51:a2:51:34:74:f0:7f:01:b6:52:92:61:71:19:96:
                    ae:8b:fa:b1:98:f5:ba:0f:5e:66:d7:25:32:41:d7:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:4F:BF:70:09:C8:9A:0C:E0:A1:BE:EC:B5:43:5E:51:59:4E:79
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135312e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:89:de:df:4f:c5:95:ac:28:a8:db:38:e3:6f:b7:01:45:
         bb:81:f3:7e:e7:cf:15:4b:81:77:0e:07:55:e2:8c:fb:75:ef:
         29:f6:c1:1a:3d:92:ec:17:3a:e9:98:a5:c5:d0:69:e6:80:52:
         ca:6a:ec:7a:69:48:67:ae:b2:e9:41:4f:07:8b:97:4f:19:6c:
         0a:45:03:fa:cd:21:96:da:d9:37:42:04:ec:89:d5:33:d7:07:
         cc:5a:14:e4:4a:a6:62:20:f5:5a:b4:b9:71:76:8d:c9:e3:77:
         9b:91:bc:89:45:0c:54:76:b4:89:5e:9d:7b:7c:f2:0b:be:16:
         28:48:00:be:15:a6:63:f6:54:b3:6f:21:bd:92:49:12:1c:96:
         bd:bd:af:84:11:13:af:db:8a:e8:8a:5f:93:0a:e6:c0:1a:4d:
         27:a3:a2:1b:49:da:6b:38:98:1c:6b:97:04:21:f3:18:2f:ae:
         c6:c5:1a:ed:68:42:77:09:36:58:e0:42:a3:51:53:2d:a9:6b:
         0a:f6:54:13:ed:0e:79:d0:bf:2d:78:a8:77:68:e2:1d:bd:5a:
         56:95:26:2e:c4:bd:3b:c4:3c:74:4f:b3:b1:5f:8b:9b:94:6a:
         a0:3e:c6:d7:bf:d2:a4:28:4c:03:ca:fc:51:df:4c:30:f8:52:
         4b:28:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:42:59 2026 by rpki-client