Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa
File:                     3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          6q05p30YGWoc9mmAgdewvGjGALrM80hVwHpMMnm9s1s=
Subject key identifier:   58:28:F6:25:48:9F:2D:79:CD:24:02:60:50:0E:C2:2A:41:64:50:31
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       0D7279000AF0DF7252E5CD4FB55F17FA41CADC17
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa
Signing time:             Fri 15 May 2026 16:42:42 +0000
ROA not before:           Fri 15 May 2026 16:37:42 +0000
ROA not after:            Fri 14 May 2027 16:42:42 +0000
asID:                     271773
IP address blocks:        190.13.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 02:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:72:79:00:0a:f0:df:72:52:e5:cd:4f:b5:5f:17:fa:41:ca:dc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: May 15 16:37:42 2026 GMT
            Not After : May 14 16:42:42 2027 GMT
        Subject: CN=5828F625489F2D79CD240260500EC22A41645031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:b2:55:b8:9a:fe:40:52:db:1e:41:d6:ad:
                    bf:86:cb:6a:b0:c0:46:97:c5:3e:dd:dd:38:70:82:
                    88:06:ef:1a:db:e2:c9:60:82:7b:e0:3b:c3:75:5c:
                    82:c2:ee:19:12:11:d8:15:00:a1:17:1a:3c:78:46:
                    09:b7:4e:4f:f6:be:4c:16:9c:c2:3d:a6:03:d3:1a:
                    2a:ab:07:6a:90:a7:32:81:3c:86:77:4b:41:f3:df:
                    2e:82:c2:1b:5d:9b:1f:08:8b:ba:5d:da:78:a3:fb:
                    1e:e1:27:a0:8f:38:0f:81:f0:b8:67:46:a9:72:90:
                    30:dc:4e:90:53:0b:26:df:8b:67:05:49:bf:ae:f6:
                    4b:d4:9f:28:0f:1c:4d:aa:d8:e2:12:c3:cf:59:ba:
                    3b:2e:04:ca:a1:99:c8:ce:65:80:bb:32:75:0a:77:
                    6c:0f:e8:fd:5f:45:52:1b:a5:0d:fc:48:c8:1d:97:
                    86:bf:5c:9b:43:31:c3:88:77:eb:b2:fa:90:f8:77:
                    ac:74:26:03:5e:42:8c:e8:b9:e0:33:1a:cd:ff:3c:
                    dd:6f:d6:19:ac:8a:93:ec:28:0b:54:e8:7b:92:3b:
                    22:29:78:d5:16:b2:d9:cd:75:cc:e7:c7:d1:2c:b1:
                    9f:b6:06:55:ec:07:66:39:03:cd:62:fb:e9:32:6b:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:F6:25:48:9F:2D:79:CD:24:02:60:50:0E:C2:2A:41:64:50:31
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:15:4d:14:eb:6a:96:f5:bd:8b:92:fb:30:57:d8:22:76:
         97:ff:6e:87:8e:c1:5d:f7:d8:1e:81:85:8e:ce:9e:d9:21:1d:
         e1:c6:87:dc:74:0b:fd:a8:89:07:65:97:a7:b4:19:f3:af:2f:
         67:31:d0:89:44:78:ef:6a:f7:00:ad:71:03:61:51:e9:a1:97:
         82:c6:67:3b:a5:1c:ea:56:f8:39:02:b3:4f:c7:cb:1a:08:5f:
         cb:c1:6b:a0:29:a1:44:b2:76:95:08:aa:67:83:b1:10:94:a6:
         8a:39:f8:85:d0:9f:33:c8:f5:5d:be:2c:c1:07:75:85:ce:ec:
         85:2b:03:9a:62:34:b6:71:14:70:fb:09:4c:82:4f:ba:51:fc:
         e6:34:b4:dd:37:39:ed:41:00:7b:a1:51:22:27:ea:2f:51:6e:
         a6:f8:e0:cf:3a:f6:b3:33:9a:ef:38:71:e9:1f:db:aa:9d:f3:
         2f:00:01:10:cd:c0:51:e0:58:24:df:59:83:2d:b9:8b:1e:7d:
         45:9b:b9:c9:f9:3a:4f:38:b7:5f:96:c7:48:3f:cf:49:b1:01:
         78:89:4f:79:c4:5a:3b:c4:94:45:e8:d9:b4:69:51:ea:29:96:
         e6:3f:65:ae:1e:17:6e:d7:12:22:47:68:ed:e2:cf:77:69:68:
         69:48:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:53 2026 by rpki-client