Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3136302e302f32322d3232203d3e203237363531.roa
File:                     3139302e39312e3136302e302f32322d3232203d3e203237363531.roa (raw, json)
Hash identifier:          gk6FpTE26NGMqTiR4+f2FROHlaKvkiMq9YlkZ1FiT4A=
Subject key identifier:   30:D2:82:92:82:9A:30:BE:7F:7C:7E:59:35:59:FD:C4:BE:88:11:13
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       6E49A9190B931F9FACE0D015884D09217681D8F6
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3136302e302f32322d3232203d3e203237363531.roa
Signing time:             Thu 30 Apr 2026 21:40:37 +0000
ROA not before:           Thu 30 Apr 2026 21:35:37 +0000
ROA not after:            Thu 29 Apr 2027 21:40:37 +0000
asID:                     27651
IP address blocks:        190.91.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 May 2026 05:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:49:a9:19:0b:93:1f:9f:ac:e0:d0:15:88:4d:09:21:76:81:d8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Apr 30 21:35:37 2026 GMT
            Not After : Apr 29 21:40:37 2027 GMT
        Subject: CN=30D28292829A30BE7F7C7E593559FDC4BE881113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:bd:04:4c:9c:9c:34:09:ca:da:98:69:37:
                    33:4a:9b:c3:c8:60:1d:22:40:9d:74:c6:36:c0:28:
                    66:ed:d8:c1:b0:2a:47:fd:59:49:c3:27:67:76:6e:
                    e0:a2:23:ad:de:11:d4:f2:19:a4:13:6f:3e:04:3a:
                    fd:19:fc:50:f3:01:a0:0a:f1:95:52:69:cb:9d:e9:
                    db:69:1c:fc:55:48:23:17:e3:b4:c4:eb:94:b1:9e:
                    8c:a3:50:b5:bd:08:6c:e7:7a:6d:44:2f:d7:6e:54:
                    98:72:0f:8c:d8:f9:65:1b:86:da:11:8e:37:af:12:
                    11:70:06:2b:2a:1d:65:e6:47:93:73:ab:fa:0c:87:
                    9f:af:32:64:04:e2:89:b9:a8:ea:0c:9e:52:27:53:
                    a9:73:4f:47:df:f1:22:55:74:78:6d:31:a0:3b:e1:
                    3d:65:1d:27:27:e1:fa:41:d5:12:59:bd:b9:dd:17:
                    42:63:b8:b3:e4:15:b1:8a:22:6f:1e:d0:04:09:df:
                    e0:4e:53:ac:9c:b0:f3:47:cf:10:75:d2:55:4a:68:
                    4b:74:ed:7a:8f:cd:52:51:25:a8:de:39:83:6c:3c:
                    ce:95:92:e1:37:b7:cd:d9:c3:b2:d4:37:f5:79:9c:
                    29:00:b0:2f:8a:5b:20:95:42:8a:66:9b:11:5c:e6:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:82:92:82:9A:30:BE:7F:7C:7E:59:35:59:FD:C4:BE:88:11:13
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3136302e302f32322d3232203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:5e:3d:94:37:bc:6b:cd:d3:05:41:71:03:c6:40:8d:2f:
         47:60:f4:a9:c9:2f:2f:61:9a:4b:9e:37:cf:c9:0d:1c:96:09:
         5b:99:d2:33:6e:3c:12:7c:e0:be:9d:bf:d3:12:80:e4:75:fe:
         5e:cc:9b:08:9f:91:98:61:d5:1e:3d:8e:6f:91:ab:47:b9:b2:
         c2:c0:eb:f2:9c:97:c6:06:b0:5a:d5:22:6b:08:ee:17:d0:e9:
         79:e4:b6:1d:19:0d:a5:00:89:74:bb:74:f3:8e:62:70:64:17:
         31:86:63:59:64:00:be:6a:7d:23:74:70:b0:e0:0e:b7:bd:b9:
         a5:1a:09:c0:80:53:b4:f1:f2:b0:36:2d:4d:99:f6:be:a0:c2:
         57:02:24:3a:18:5a:83:49:1e:d5:3f:94:a6:05:c7:b4:30:db:
         9a:28:0f:ea:af:10:83:16:aa:ae:f0:cd:d6:81:8a:6b:b3:42:
         f9:be:99:f7:d1:82:4b:5a:18:bf:42:69:41:93:56:75:7e:e6:
         0f:65:84:82:9c:c3:99:18:e7:99:45:a2:4c:7a:cc:be:fe:c8:
         6e:dd:7b:97:fd:af:03:5e:45:1d:59:a0:58:db:61:ad:c3:d0:
         e0:5d:9e:51:4d:69:1f:31:09:8e:dc:bd:98:25:3b:fc:6e:c3:
         00:f7:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 02:54:00 2026 by rpki-client