Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa
File:                     3139302e36332e3231362e302f32332d3234203d3e203237373338.roa (raw, json)
Hash identifier:          f3QWaQWprJYtXRB9ZuXBk2EM9h8etWS6e2vTh/rTtJ0=
Subject key identifier:   D2:D1:B7:A3:29:85:BC:A9:AE:70:2A:C2:DB:53:92:0A:9D:AC:6D:68
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       25ED9C9C2965096C64EA2D114193DCC3B3898E03
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa
Signing time:             Mon 29 Jun 2026 15:50:13 +0000
ROA not before:           Mon 29 Jun 2026 15:45:13 +0000
ROA not after:            Mon 28 Jun 2027 15:50:13 +0000
asID:                     27738
IP address blocks:        190.63.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 Jul 2026 06:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ed:9c:9c:29:65:09:6c:64:ea:2d:11:41:93:dc:c3:b3:89:8e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Jun 29 15:45:13 2026 GMT
            Not After : Jun 28 15:50:13 2027 GMT
        Subject: CN=D2D1B7A32985BCA9AE702AC2DB53920A9DAC6D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:c3:09:76:6c:39:13:5b:25:ea:36:71:71:
                    a1:e6:ff:2d:22:93:90:ae:94:a2:2d:2a:90:24:a9:
                    bc:c1:e5:4c:84:0f:e0:24:9d:0b:c8:19:b9:51:e7:
                    b6:56:b4:3d:f9:bc:6f:95:f0:e8:67:36:04:61:02:
                    e4:fa:23:e3:65:ab:81:5a:58:3c:a9:e9:f6:7a:5c:
                    a6:34:22:14:e1:23:ae:4e:a3:44:53:74:36:01:1b:
                    e9:99:ea:0f:cd:ea:f5:89:e8:51:84:d2:ce:ce:a5:
                    dc:c7:fa:13:ee:08:9f:b5:b4:3b:2d:f4:d1:ff:65:
                    d8:49:05:58:e1:79:f9:8d:bb:f9:b5:0d:e9:27:d1:
                    f5:10:28:6f:61:be:5e:23:ac:88:2e:cf:1c:02:46:
                    0b:c6:2f:42:50:87:bf:34:9b:91:6f:85:a9:b0:62:
                    4d:79:90:12:25:5d:98:6b:ab:b0:9e:0e:07:5b:f0:
                    3c:5f:e5:4d:84:f8:05:0f:d5:ac:99:1f:be:76:a0:
                    e6:76:aa:5a:32:df:7f:83:0c:6f:0b:67:f1:3d:22:
                    94:84:65:7c:cb:7d:e9:ce:af:df:e9:e5:d5:b1:e4:
                    45:bc:0a:3a:c7:9d:c7:e0:32:55:54:93:6f:a8:93:
                    8c:f2:b0:96:5e:84:2a:7c:d7:a5:57:c3:92:54:f5:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D1:B7:A3:29:85:BC:A9:AE:70:2A:C2:DB:53:92:0A:9D:AC:6D:68
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:c6:d4:00:7c:44:f7:54:a3:4a:ef:de:69:dd:4f:75:27:
         3b:f5:56:b9:97:7b:3a:a5:12:64:94:0d:91:01:88:6b:ef:6c:
         7d:02:62:f7:07:ea:0e:44:de:1c:cc:46:04:59:cb:d6:3e:15:
         dd:fc:b7:9d:c1:84:22:4b:52:d7:82:00:68:bd:60:e3:6a:4f:
         0d:7e:be:0b:ff:0d:25:f1:3c:0d:6f:73:0c:d2:94:16:46:bb:
         1d:36:da:a2:84:7b:dd:82:25:c1:d1:d2:01:6d:0f:8d:f1:5c:
         88:69:de:73:89:56:32:32:7c:6d:96:a1:2f:82:62:b3:4b:3e:
         3d:b8:3c:22:e1:09:ec:ad:bd:94:18:2e:7f:d0:d6:14:f1:77:
         b2:9f:db:a5:8a:d3:64:5b:79:11:19:74:f8:1d:06:e8:38:0d:
         e2:10:c8:73:c7:1b:36:65:a8:fe:63:4c:e0:6c:27:3e:7e:72:
         12:52:c0:e3:3b:bb:8c:72:6b:18:95:bf:d4:47:49:40:4e:fa:
         f3:4a:6d:90:ad:41:38:52:ac:cf:2d:0a:fa:99:14:68:df:f9:
         71:d5:c4:45:69:05:22:af:89:44:cb:ea:d3:7d:45:8e:63:01:
         d7:20:68:7a:ae:50:48:6d:5b:ba:5f:38:25:6f:56:7d:15:09:
         2f:cd:62:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJe2cnCllCWxk6i0RQZPcw7OJjgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJGOURBNEU5OUZDQkE5N0MxQzUwRDhDMEFCNUMzQjlC
OUQ2MzNBNTAeFw0yNjA2MjkxNTQ1MTNaFw0yNzA2MjgxNTUwMTNaMDMxMTAvBgNV
BAMTKEQyRDFCN0EzMjk4NUJDQTlBRTcwMkFDMkRCNTM5MjBBOURBQzZENjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5cMJdmw5E1sl6jZxcaHm/y0i
k5CulKItKpAkqbzB5UyED+AknQvIGblR57ZWtD35vG+V8OhnNgRhAuT6I+Nlq4Fa
WDyp6fZ6XKY0IhThI65Oo0RTdDYBG+mZ6g/N6vWJ6FGE0s7OpdzH+hPuCJ+1tDst
9NH/ZdhJBVjhefmNu/m1Dekn0fUQKG9hvl4jrIguzxwCRgvGL0JQh780m5Fvhamw
Yk15kBIlXZhrq7CeDgdb8Dxf5U2E+AUP1ayZH752oOZ2qloy33+DDG8LZ/E9IpSE
ZXzLfenOr9/p5dWx5EW8CjrHncfgMlVUk2+ok4zysJZehCp816VXw5JU9RSvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0tG3oymFvKmucCrC21OSCp2sbWgwHwYDVR0j
BBgwFoAU6/naTpn8upfBxQ2MCrXDubnWM6UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjQwQTEyNkNGODJERjIyMjA1QUM0OTZGRDc0MkFBRkFC
MkFFMUJDQTQ3MjlEMzU0M0JENTk4ODQxMzcwMzkwLzAvRUJGOURBNEU5OUZDQkE5
N0MxQzUwRDhDMEFCNUMzQjlCOUQ2MzNBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkY5REE0RTk5RkNCQTk3QzFD
NTBEOEMwQUI1QzNCOUI5RDYzM0E1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY0MEExMjZDRjgyREYyMjIwNUFDNDk2RkQ3NDJBQUZBQjJBRTFCQ0E0
NzI5RDM1NDNCRDU5ODg0MTM3MDM5MC8wLzMxMzkzMDJlMzYzMzJlMzIzMTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM3MzMzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb4/2DAN
BgkqhkiG9w0BAQsFAAOCAQEAX2LG1AB8RPdUo0rv3mndT3UnO/VWuZd7OqUSZJQN
kQGIa+9sfQJi9wfqDkTeHMxGBFnL1j4V3fy3ncGEIktS14IAaL1g42pPDX6+C/8N
JfE8DW9zDNKUFka7HTbaooR73YIlwdHSAW0PjfFciGnec4lWMjJ8bZahL4Jis0s+
Pbg8IuEJ7K29lBguf9DWFPF3sp/bpYrTZFt5ERl0+B0G6DgN4hDIc8cbNmWo/mNM
4GwnPn5yElLA4zu7jHJrGJW/1EdJQE7680ptkK1BOFKszy0K+pkUaN/5cdXERWkF
Iq+JRMvq031FjmMB1yBoeq5QSG1bul84JW9WfRUJL81ipA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 11:31:41 2026 by rpki-client