Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135342e302f32342d3234203d3e203231353735.roa
File:                     3139302e382e3135342e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          KQkYxbRt+yrhLUyRmhbBE5m4Xslr7EIJ4iesE1XzPiY=
Subject key identifier:   22:74:D2:DA:B3:44:37:51:A7:AC:FA:6C:42:0F:6C:FB:06:E5:60:94
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       0804D183D6AE9C17D669EDF0F8227F9336C6E6BD
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135342e302f32342d3234203d3e203231353735.roa
Signing time:             Thu 09 Jul 2026 21:51:43 +0000
ROA not before:           Thu 09 Jul 2026 21:46:43 +0000
ROA not after:            Thu 08 Jul 2027 21:51:43 +0000
asID:                     21575
IP address blocks:        190.8.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 05:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:d1:83:d6:ae:9c:17:d6:69:ed:f0:f8:22:7f:93:36:c6:e6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jul  9 21:46:43 2026 GMT
            Not After : Jul  8 21:51:43 2027 GMT
        Subject: CN=2274D2DAB3443751A7ACFA6C420F6CFB06E56094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:79:65:c3:7f:72:ab:e2:d8:e7:cb:f5:c7:
                    0e:68:56:16:08:f9:68:f0:bd:be:9a:82:42:df:65:
                    93:1f:56:98:ae:34:69:fe:b7:f0:f5:77:ba:00:fb:
                    f1:dd:e9:20:59:5c:28:31:73:94:ba:a6:74:7b:ce:
                    fb:e7:c5:11:85:da:a5:9c:43:0d:b2:a3:92:9d:8e:
                    1b:37:b2:cb:d2:5a:73:78:3d:2a:4c:ed:c2:af:c0:
                    91:1d:d7:1e:42:ec:f5:a9:eb:2c:16:d9:dd:9f:c6:
                    45:37:5f:35:c1:28:1e:be:91:63:40:dd:99:7a:85:
                    11:55:cf:d1:ba:99:09:2b:2d:fc:92:c4:85:60:91:
                    9a:c0:8a:53:11:64:b9:19:84:50:fc:6e:f6:c4:08:
                    75:d0:b4:56:a1:a2:c1:13:99:a6:fd:86:11:b7:1c:
                    c9:0d:7a:e5:49:83:c3:7e:f7:4b:01:dd:d1:d2:c9:
                    12:96:0f:75:ef:8b:43:f1:24:a5:d6:46:64:bc:dd:
                    f3:44:03:c8:5c:b7:81:eb:ff:e8:93:f1:2e:6e:ea:
                    a1:46:c5:5f:de:ea:49:4c:56:c7:2d:3a:a9:5a:a0:
                    fc:4a:65:4d:f3:d8:1c:36:ee:5c:ae:1c:ff:f8:ee:
                    20:15:a6:0d:cb:ee:a3:2d:db:0c:a2:d5:e1:16:a5:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:74:D2:DA:B3:44:37:51:A7:AC:FA:6C:42:0F:6C:FB:06:E5:60:94
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135342e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:25:f8:1c:de:8e:b6:fc:07:32:02:71:7d:08:ff:28:7e:
         e7:33:a0:45:c5:6d:c3:cd:a2:1b:2a:56:3b:e9:70:a6:1f:35:
         17:18:8a:05:12:51:f7:a5:e9:fd:05:fc:17:1d:82:6d:f8:2a:
         6f:7f:ec:3a:2e:65:4e:55:30:eb:b5:af:45:c0:25:5a:16:d8:
         9a:76:a3:89:2c:a5:19:8d:3f:3a:b8:d9:3c:dc:b6:27:72:fe:
         56:45:88:8d:19:7c:6a:43:f7:71:b3:71:0b:bf:e9:0c:57:c9:
         a7:1a:39:21:60:7e:45:96:3e:47:88:96:36:2c:7c:83:83:d8:
         f8:04:df:10:ca:83:87:27:2e:03:3a:89:55:78:22:ee:ca:a5:
         99:f1:9a:e1:de:ac:dc:0e:64:e3:64:69:5c:96:fd:70:b0:e3:
         01:40:7a:ac:91:10:92:ac:c0:f3:03:48:98:dd:c1:8a:f7:4e:
         a8:4b:44:b7:9a:8b:9a:de:f3:f7:ed:e0:71:61:23:8d:e0:e4:
         31:71:ca:97:96:8c:c2:5e:34:9d:4d:77:ee:4c:7a:69:8c:6e:
         ba:b4:e5:c5:95:70:bc:5e:e3:3e:7d:11:ec:a8:3f:41:2c:05:
         23:dc:cd:57:1e:ee:16:44:3e:0d:45:02:5d:1c:24:d5:7e:64:
         0d:1b:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:43:20 2026 by rpki-client