Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa
File:                     3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa (raw, json)
Hash identifier:          XvOxOxa5PUXoE+lC1wQgSVFKXTMpk/LL8eLRpmNSOhs=
Subject key identifier:   33:20:DA:9F:E6:E4:52:69:DF:F1:92:32:19:83:18:AA:E9:70:B7:E2
Certificate issuer:       /CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
Certificate serial:       4010F7A1537444AE708707A5100D33FDDA0B8254
Authority key identifier: 77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa
Signing time:             Wed 17 Jun 2026 15:48:14 +0000
ROA not before:           Wed 17 Jun 2026 15:43:14 +0000
ROA not after:            Wed 16 Jun 2027 15:48:14 +0000
asID:                     52409
IP address blocks:        190.120.176.0/20 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:f7:a1:53:74:44:ae:70:87:07:a5:10:0d:33:fd:da:0b:82:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
        Validity
            Not Before: Jun 17 15:43:14 2026 GMT
            Not After : Jun 16 15:48:14 2027 GMT
        Subject: CN=3320DA9FE6E45269DFF19232198318AAE970B7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:87:87:0e:47:85:b4:ab:89:38:8d:f7:38:
                    10:e3:a9:8d:ca:86:f6:b2:9c:44:f9:89:c6:4e:7a:
                    8f:4f:59:53:0d:1b:39:37:9f:1c:c3:2e:c2:61:f0:
                    a8:ba:d5:6f:31:55:89:99:de:84:8d:b6:6b:db:a4:
                    16:c7:cf:a8:78:b2:03:65:86:be:e0:ea:72:99:22:
                    ad:26:1a:89:dc:77:94:23:13:d6:d8:62:b7:f9:55:
                    24:9b:24:ce:0b:fe:30:05:cf:0e:33:3f:48:3e:79:
                    e4:1f:5e:92:d9:f6:d5:8c:95:b0:7c:7b:63:79:1b:
                    66:65:ad:47:58:55:68:31:21:99:c9:b8:d3:29:4c:
                    e6:8b:06:b1:ed:70:a9:6c:d5:ea:07:6c:ab:b5:bc:
                    99:0e:ba:88:4d:f2:9b:aa:f8:e5:b3:b6:7c:6e:3e:
                    d2:3d:65:1a:8f:3a:b6:83:7e:82:21:e5:bc:6f:6e:
                    00:cf:ec:89:28:08:58:30:ab:95:9f:ef:da:aa:f6:
                    18:f5:7b:eb:4c:6b:40:29:4e:45:53:a2:b2:cd:fb:
                    9e:62:f4:82:0c:4b:3e:23:f3:b4:72:b9:8f:d1:dc:
                    cd:73:11:ed:0f:21:90:6f:7c:58:18:f5:73:1c:e0:
                    39:04:f7:5c:55:3f:14:85:90:4a:76:9b:51:56:d5:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:20:DA:9F:E6:E4:52:69:DF:F1:92:32:19:83:18:AA:E9:70:B7:E2
            X509v3 Authority Key Identifier:
                keyid:77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:5f:98:35:e9:6f:89:af:68:77:1d:be:73:3f:54:74:41:a0:
         36:bc:47:20:20:3f:ee:d9:e6:d1:87:c2:d4:94:30:ac:63:49:
         ab:80:bd:d8:1a:91:ae:22:ce:61:f3:ba:e8:4b:01:25:59:52:
         51:f9:2b:66:7d:93:2e:18:6c:8d:dd:c3:52:5b:e4:ae:4a:69:
         d7:67:8e:63:b7:85:07:7b:74:51:2c:cc:8f:f2:b4:14:19:ef:
         c7:14:64:53:1b:cb:f2:38:d3:e5:16:38:06:62:90:6e:75:0d:
         78:8e:95:05:5c:30:ee:83:2f:2e:2c:09:ac:18:38:f4:24:4e:
         1a:02:82:f8:03:a3:09:cc:49:60:b9:b8:96:00:0e:cb:e5:db:
         69:e0:06:2c:4e:69:ac:0b:21:4d:23:a9:59:d0:50:15:a3:48:
         e9:5f:19:8c:33:7d:3e:b1:76:e9:84:49:16:9d:65:57:4d:66:
         7a:29:63:1d:44:d0:4e:6c:b9:10:36:8c:91:b2:6d:a7:f6:67:
         e8:f2:a8:29:5a:ab:2d:34:f9:5e:77:f3:13:ae:0e:23:55:e0:
         aa:1f:4e:54:81:21:f8:3e:3c:57:0e:1d:18:83:e9:07:d0:b6:
         10:2c:42:85:f1:b4:3a:75:1f:8d:2a:03:44:9d:48:87:cb:3f:
         3b:fb:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:57:36 2026 by rpki-client