Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa
File:                     3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa (raw, json)
Hash identifier:          b626qFkqQEsuyt5LZS2XafmMHvRZvGByvvAweHeX6Qo=
Subject key identifier:   A4:76:85:12:E2:64:0C:65:2B:2C:B3:BB:B5:ED:ED:2D:6F:27:A1:75
Certificate issuer:       /CN=92D39AD5A5179131EF8621A62156503CF92DBABD
Certificate serial:       685C519C1079E254B1F97061FF64158AD8368237
Authority key identifier: 92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa
Signing time:             Tue 04 Aug 2026 13:19:52 +0000
ROA not before:           Tue 04 Aug 2026 13:14:52 +0000
ROA not after:            Tue 03 Aug 2027 13:19:52 +0000
asID:                     274171
IP address blocks:        190.104.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:51:9c:10:79:e2:54:b1:f9:70:61:ff:64:15:8a:d8:36:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D39AD5A5179131EF8621A62156503CF92DBABD
        Validity
            Not Before: Aug  4 13:14:52 2026 GMT
            Not After : Aug  3 13:19:52 2027 GMT
        Subject: CN=A4768512E2640C652B2CB3BBB5EDED2D6F27A175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:4f:b1:19:7d:72:52:47:80:6b:4c:cc:cf:
                    f1:dc:b0:db:42:fa:a2:e3:29:1b:b1:34:ef:d4:f8:
                    8b:ff:94:0b:b4:68:65:f4:83:e3:73:65:95:97:38:
                    71:f8:4f:15:07:80:2d:a0:f2:05:1e:b2:0e:30:3c:
                    93:a5:93:66:ac:a5:69:e5:07:4d:47:d4:82:65:ee:
                    48:c7:48:6d:dc:92:eb:2a:ec:c2:f1:aa:a4:1d:b7:
                    40:44:89:7b:65:fb:3a:1f:31:d9:6e:27:c7:22:4d:
                    36:5a:bd:87:3a:14:27:a0:ec:4a:21:f3:b3:60:15:
                    ae:92:77:d8:02:17:37:46:7e:3f:87:6c:30:c9:8f:
                    52:66:0e:22:0b:ab:4a:4f:a2:5b:d6:a4:19:93:a8:
                    49:fa:69:23:04:b1:bb:1c:8b:16:73:5f:d3:ab:9e:
                    7e:76:59:81:60:40:f7:b5:1e:20:92:49:9d:52:01:
                    4d:79:90:cd:b4:bf:bd:cf:e2:5d:02:1a:05:6f:3a:
                    54:1d:77:a6:77:61:11:00:7b:99:fb:96:9e:92:3f:
                    fa:54:e1:cd:33:85:bc:e9:b0:f1:32:85:b0:ed:09:
                    7c:ea:63:82:6b:ab:b6:3a:02:ec:4d:87:a8:d8:f0:
                    de:d2:69:01:03:9f:ce:3a:59:a5:f8:51:34:d3:3f:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:76:85:12:E2:64:0C:65:2B:2C:B3:BB:B5:ED:ED:2D:6F:27:A1:75
            X509v3 Authority Key Identifier:
                keyid:92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c0:1e:3f:36:89:cf:87:0e:80:e9:93:db:fa:2c:b4:bb:18:
         33:88:5f:89:be:ad:aa:e8:cf:8d:60:6f:82:73:b6:b4:8b:fe:
         e0:38:7a:50:80:bd:31:98:c2:52:35:86:a3:fb:f1:4e:6c:ef:
         4b:cd:f2:8e:1e:0a:06:d1:14:f7:c3:9a:fa:d7:9c:83:cb:85:
         ad:45:54:da:0d:e0:c0:93:79:77:29:de:c0:dd:e1:1c:5b:37:
         1e:1e:f8:80:ef:6d:2c:44:38:2a:42:74:48:e3:bf:7e:d1:40:
         64:86:d3:aa:88:7f:4d:fc:ed:b8:ba:9b:bf:42:0b:c2:86:ab:
         43:ad:c0:c9:0e:8b:bf:36:7c:1d:4a:cf:1d:06:41:7a:c9:de:
         8f:eb:93:2a:f9:18:74:e5:14:83:08:6a:61:96:76:e9:47:f6:
         3d:b6:15:b6:d4:2d:fd:80:86:dd:73:43:0a:78:93:c9:b1:3b:
         98:f0:6d:5e:54:8d:7f:0e:39:f0:c7:70:0d:6b:1a:31:3f:42:
         e7:ef:51:86:a0:fe:9d:7e:ae:0c:13:26:38:4f:b9:d1:de:1f:
         87:07:72:1c:fb:99:6f:75:83:9f:ed:ce:17:6c:7c:f0:67:9c:
         d3:18:ca:79:0d:97:48:4d:a8:1e:24:72:ca:58:f4:c4:31:b2:
         ba:e7:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:00:30 2026 by rpki-client