Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135382e302f32342d3234203d3e203231353735.roa
File:                     3139302e382e3135382e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          UpNVTpKY9E4Rj7AVllnMiKOhOhbsylL1HsdNBZB5dxg=
Subject key identifier:   27:87:35:C9:6F:34:EF:DE:E2:A6:30:6D:76:BA:EF:E9:5A:FA:C3:9F
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       19FEDAA599FD20F4447391E17912FC9E06F6B167
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135382e302f32342d3234203d3e203231353735.roa
Signing time:             Thu 09 Jul 2026 21:51:44 +0000
ROA not before:           Thu 09 Jul 2026 21:46:44 +0000
ROA not after:            Thu 08 Jul 2027 21:51:44 +0000
asID:                     21575
IP address blocks:        190.8.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 05:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fe:da:a5:99:fd:20:f4:44:73:91:e1:79:12:fc:9e:06:f6:b1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jul  9 21:46:44 2026 GMT
            Not After : Jul  8 21:51:44 2027 GMT
        Subject: CN=278735C96F34EFDEE2A6306D76BAEFE95AFAC39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:36:d6:ce:a7:80:db:09:c4:03:a3:ff:62:
                    ee:ed:4c:35:0e:f6:0e:ed:01:98:bd:93:57:e6:49:
                    55:14:ff:0c:e9:c4:b1:da:6d:ff:cf:0d:9d:de:5b:
                    33:98:56:bf:14:40:cd:ec:5c:db:9b:e9:f3:74:c6:
                    a5:7a:ad:32:8c:ce:f6:d3:b3:5c:6c:20:bf:48:4d:
                    a4:9d:08:45:71:8d:f0:b8:32:3d:3d:a6:1f:e1:cb:
                    56:0c:6d:b8:b2:db:f1:0b:1a:59:ef:21:61:ac:31:
                    5d:b6:80:62:71:5c:3e:7a:df:4c:a4:8c:6f:12:46:
                    ee:4d:9c:49:cf:67:fd:5c:02:82:8a:a1:15:42:c8:
                    be:c1:75:75:57:48:33:ae:11:8f:da:57:ae:6b:1f:
                    f1:e2:fa:4a:23:5e:59:ef:61:6c:98:cf:3e:06:15:
                    46:ed:0e:4c:89:4a:19:87:a5:02:9e:3b:ea:9d:cd:
                    2c:63:58:a7:6f:22:59:a3:fa:fe:05:fa:5f:1e:96:
                    78:ff:d5:6a:27:3e:cf:7a:11:61:30:96:8b:95:ff:
                    be:aa:6e:bd:7b:7d:cc:02:c0:67:09:60:9a:d1:5b:
                    08:51:2b:7c:e2:59:a8:d4:1e:26:b0:f5:dc:77:43:
                    f2:ee:f4:2f:3f:db:ff:8e:e6:db:de:f4:78:89:dd:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:35:C9:6F:34:EF:DE:E2:A6:30:6D:76:BA:EF:E9:5A:FA:C3:9F
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135382e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:b1:fd:5a:33:40:07:2e:5c:51:a6:ad:db:9d:d3:1c:21:
         07:77:f4:d5:2a:41:d0:38:68:3d:c0:c7:82:16:d0:82:ba:0e:
         99:ba:75:3a:de:39:2c:34:3e:01:b4:1c:09:20:e8:8b:4b:6c:
         78:e1:75:c1:c2:10:6b:46:3b:14:2f:21:f7:9c:ab:4c:66:6e:
         c7:36:b4:ab:69:b7:ae:ec:4a:45:1d:ca:10:e0:c9:6c:45:a1:
         c8:04:21:e4:a5:9c:be:aa:29:9a:60:36:93:2e:72:75:58:b2:
         f7:1a:6b:9e:cc:07:cf:0e:be:a6:b6:fb:32:78:f1:82:4f:68:
         d7:be:95:12:a4:f8:d8:6b:d8:27:5d:39:f4:6a:f9:39:7c:00:
         cf:56:87:32:cd:15:cc:74:b9:3d:33:b7:8c:44:5c:49:ba:23:
         c4:53:8a:51:40:66:d8:d0:eb:06:8e:54:51:47:64:ca:a8:04:
         b9:c5:99:b7:3a:df:80:3a:4d:4c:25:f5:0c:86:79:b4:0b:80:
         73:a2:24:61:71:85:3d:be:79:83:f1:72:05:da:89:ae:ee:b6:
         c9:ca:ac:6f:14:a2:91:fa:4c:1c:ce:b3:37:be:33:98:f4:cf:
         6d:c3:91:1e:98:70:10:76:cf:e6:13:65:8a:4e:ae:c6:3b:1e:
         32:7c:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:43:19 2026 by rpki-client