Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231302e302f32332d3234203d3e203238303135.roa
File:                     3139302e362e3231302e302f32332d3234203d3e203238303135.roa (raw, json)
Hash identifier:          cPzoSCaNXacwV1cMvQz6iHKIimH/kF5CD7WvxI8MMzY=
Subject key identifier:   A1:FB:0B:8D:3D:2B:DB:BF:BB:F2:C9:28:82:F1:2B:67:E1:71:E6:FE
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       7D4F8A0AE04F7F9F63949C7818203C96BF548EF3
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231302e302f32332d3234203d3e203238303135.roa
Signing time:             Tue 06 Jan 2026 20:56:44 +0000
ROA not before:           Tue 06 Jan 2026 20:51:44 +0000
ROA not after:            Tue 05 Jan 2027 20:56:44 +0000
asID:                     28015
IP address blocks:        190.6.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 14:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4f:8a:0a:e0:4f:7f:9f:63:94:9c:78:18:20:3c:96:bf:54:8e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Jan  6 20:51:44 2026 GMT
            Not After : Jan  5 20:56:44 2027 GMT
        Subject: CN=A1FB0B8D3D2BDBBFBBF2C92882F12B67E171E6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:08:b9:f2:f0:78:f4:27:f5:6e:14:22:4e:
                    03:b3:a2:2b:60:bc:47:cd:29:6c:14:cc:1f:b6:6a:
                    45:8d:c6:5d:a4:f7:44:73:b3:35:96:40:24:5e:e0:
                    5f:14:93:a8:48:46:9d:bf:5e:e5:9c:44:1e:48:ce:
                    fe:5b:ef:eb:ba:8b:77:3c:34:be:2d:b2:02:51:75:
                    b5:69:06:b8:11:78:9f:91:ea:bf:54:84:30:29:60:
                    22:f6:06:1a:05:90:2b:02:46:65:ef:88:83:4a:21:
                    dd:de:3c:06:10:20:98:0d:d5:04:02:1a:dd:0e:65:
                    0e:77:9d:45:c6:b1:1f:b1:2f:f1:7a:f8:dc:e7:41:
                    e3:24:3b:60:c9:92:50:c5:07:f4:cc:53:00:ca:4e:
                    14:f1:68:a4:7f:fd:0e:5e:6c:9f:d6:48:f4:7b:0a:
                    d0:cf:5a:93:83:e4:f3:e7:ce:86:9f:34:e2:ed:ed:
                    ca:d1:2e:44:ac:37:f0:6f:68:bd:8f:78:2d:77:f5:
                    70:bc:51:4e:0c:24:f7:ca:77:b1:a4:35:94:3e:f5:
                    e2:ec:71:06:f6:79:1e:62:c9:3c:09:1f:b5:ba:ce:
                    a8:e4:ad:55:a1:72:76:aa:ce:04:43:6a:1d:a9:bd:
                    f8:c0:1d:e8:ed:f2:7c:85:7b:91:e2:44:64:0c:29:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FB:0B:8D:3D:2B:DB:BF:BB:F2:C9:28:82:F1:2B:67:E1:71:E6:FE
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231302e302f32332d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:b5:5f:f2:97:5b:b2:28:4d:36:97:4d:59:b9:5c:06:c6:28:
         cb:e5:a7:db:67:ed:b8:f1:76:91:d2:69:58:75:c8:51:0f:63:
         40:6d:03:fa:f8:30:e7:ef:4a:bf:82:a3:95:c0:96:f8:a3:e0:
         e1:2d:f8:0e:a6:2e:31:ec:50:c9:6c:1f:36:4e:1e:a8:7a:cf:
         38:11:1f:0e:c4:87:d3:76:aa:6f:04:f8:f3:4f:82:29:a5:7e:
         29:66:33:0f:62:80:44:fd:fd:c2:2f:2f:7c:71:49:93:17:57:
         f6:35:86:68:fc:b7:07:d7:7e:14:10:45:11:85:87:ff:e0:55:
         c4:cc:72:6b:0d:81:f1:1a:51:a5:60:ea:ed:f9:36:2d:57:2c:
         26:3e:02:00:25:b5:f8:51:9d:2f:d5:32:d3:38:3b:36:3d:4c:
         22:3c:b0:ef:3c:eb:f4:3f:87:59:ca:02:4d:ba:7c:55:f8:cf:
         49:2a:d2:76:ee:46:3b:b1:a6:b9:23:a6:02:4b:8b:0c:9b:7b:
         22:dc:17:54:ab:6c:16:1d:e2:1d:82:f5:dd:a4:71:63:60:e0:
         8f:eb:8e:ff:0e:82:ce:2b:ed:f1:d4:24:cc:04:84:e9:f0:3e:
         55:08:48:d2:0e:84:c3:a0:ec:c3:40:0a:19:2e:22:47:ea:25:
         dc:ef:f2:1c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUfU+KCuBPf59jlJx4GCA8lr9UjvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDMTZBRDRGODJFNzJEOTI4N0E1RDRFQjk5NzY4QjBD
NDFDODA2MTAeFw0yNjAxMDYyMDUxNDRaFw0yNzAxMDUyMDU2NDRaMDMxMTAvBgNV
BAMTKEExRkIwQjhEM0QyQkRCQkZCQkYyQzkyODgyRjEyQjY3RTE3MUU2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAAi58vB49Cf1bhQiTgOzoitg
vEfNKWwUzB+2akWNxl2k90RzszWWQCRe4F8Uk6hIRp2/XuWcRB5Izv5b7+u6i3c8
NL4tsgJRdbVpBrgReJ+R6r9UhDApYCL2BhoFkCsCRmXviINKId3ePAYQIJgN1QQC
Gt0OZQ53nUXGsR+xL/F6+NznQeMkO2DJklDFB/TMUwDKThTxaKR//Q5ebJ/WSPR7
CtDPWpOD5PPnzoafNOLt7crRLkSsN/BvaL2PeC139XC8UU4MJPfKd7GkNZQ+9eLs
cQb2eR5iyTwJH7W6zqjkrVWhcnaqzgRDah2pvfjAHejt8nyFe5HiRGQMKVo5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUofsLjT0r27+78skogvErZ+Fx5v4wHwYDVR0j
BBgwFoAUtsFq1Pguctkoel1OuZdosMQcgGEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0Q1MDBERkQ3QkIxQTZBMTMyNjQ0RDkzQ0ZERjUzMTc0
Qjg0MzVBNjQwRjhCQTc0MDJFNkU2RTEzRkIwNTM2LzAvQjZDMTZBRDRGODJFNzJE
OTI4N0E1RDRFQjk5NzY4QjBDNDFDODA2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkMxNkFENEY4MkU3MkQ5Mjg3
QTVENEVCOTk3NjhCMEM0MUM4MDYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNENTAwREZEN0JCMUE2QTEzMjY0NEQ5M0NGREY1MzE3NEI4NDM1QTY0
MEY4QkE3NDAyRTZFNkUxM0ZCMDUzNi8wLzMxMzkzMDJlMzYyZTMyMzEzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzgzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+BtIwDQYJ
KoZIhvcNAQELBQADggEBAE+1X/KXW7IoTTaXTVm5XAbGKMvlp9tn7bjxdpHSaVh1
yFEPY0BtA/r4MOfvSr+Co5XAlvij4OEt+A6mLjHsUMlsHzZOHqh6zzgRHw7Eh9N2
qm8E+PNPgimlfilmMw9igET9/cIvL3xxSZMXV/Y1hmj8twfXfhQQRRGFh//gVcTM
cmsNgfEaUaVg6u35Ni1XLCY+AgAltfhRnS/VMtM4OzY9TCI8sO886/Q/h1nKAk26
fFX4z0kq0nbuRjuxprkjpgJLiwybeyLcF1SrbBYd4h2C9d2kcWNg4I/rjv8Ogs4r
7fHUJMwEhOnwPlUISNIOhMOg7MNAChkuIkfqJdzv8hw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:29 2026 by rpki-client