Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230392e302e302f31362d3234203d3e2036353335.roa
File:                     3139302e3230392e302e302f31362d3234203d3e2036353335.roa (raw, json)
Hash identifier:          fjSLFNepvTphRj2+jGuvXbuBX/wQUrG2gjVyBjNS6Jw=
Subject key identifier:   56:1D:F2:F9:F6:82:F5:8A:46:A3:89:55:07:3B:4F:31:F9:C3:16:85
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       50C1CB2F0464012E51965BFF65C4D2F2BF3D1743
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230392e302e302f31362d3234203d3e2036353335.roa
Signing time:             Tue 20 Oct 2026 05:42:06 +0000
ROA not before:           Tue 20 Oct 2026 05:37:06 +0000
ROA not after:            Tue 19 Oct 2027 05:42:06 +0000
asID:                     6535
IP address blocks:        190.209.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 16:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c1:cb:2f:04:64:01:2e:51:96:5b:ff:65:c4:d2:f2:bf:3d:17:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Oct 20 05:37:06 2026 GMT
            Not After : Oct 19 05:42:06 2027 GMT
        Subject: CN=561DF2F9F682F58A46A38955073B4F31F9C31685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:36:d6:2f:49:da:22:18:47:61:59:41:8a:
                    7e:96:47:be:68:5d:13:4b:78:29:c8:c3:52:06:83:
                    21:d5:9f:5d:d3:3d:3d:03:ee:ea:42:67:f3:98:67:
                    41:e7:c3:ff:0b:52:d1:cf:6c:6d:4e:05:80:f9:36:
                    a2:16:0a:27:de:eb:fc:41:99:19:18:27:08:61:d5:
                    30:de:a8:ca:1e:17:e7:c1:3f:bd:68:01:18:33:be:
                    fd:93:b7:59:c7:40:a2:16:8e:fe:04:e9:76:07:9f:
                    6c:bd:44:38:63:e4:5b:0d:e9:d6:80:15:65:b8:f6:
                    2f:04:4f:8c:fb:4f:7c:c5:61:34:30:68:6d:66:c2:
                    d3:8e:67:6f:c1:22:0e:22:17:dd:4f:84:f3:0d:4b:
                    c3:ef:64:20:92:32:a6:64:53:bd:32:6b:b7:22:b1:
                    84:66:92:38:ff:2e:c3:36:6f:46:b7:1f:d4:9e:98:
                    40:8c:17:38:f5:0f:66:06:25:7c:22:79:78:86:ca:
                    4b:d2:d9:4f:22:01:af:21:81:62:75:53:22:7a:6c:
                    13:4d:42:b1:3b:31:2e:26:e0:d5:09:4f:f6:73:fd:
                    8c:b1:16:69:ea:e9:80:a0:94:1b:85:90:3d:53:55:
                    b3:22:9a:f8:fd:11:29:11:f1:a8:26:e3:65:ea:9a:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:F2:F9:F6:82:F5:8A:46:A3:89:55:07:3B:4F:31:F9:C3:16:85
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230392e302e302f31362d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:b5:97:49:9c:ae:d6:2f:9f:90:ba:c5:0b:23:58:c1:ee:
         3e:84:57:ba:e3:72:73:03:14:f8:a0:7e:bf:ee:51:c9:64:19:
         51:03:57:02:43:5d:57:b0:aa:b6:4e:98:0c:2d:fd:d9:2d:ba:
         6c:43:0c:fb:42:7c:51:01:fc:45:37:cf:8a:ab:c0:e6:f0:b6:
         52:43:cb:a3:4d:be:6b:77:53:fd:17:2c:8b:2f:89:35:76:ba:
         58:bf:ee:39:59:25:bd:51:ec:44:71:7b:49:17:de:de:bc:eb:
         90:1d:4d:40:ce:e9:9e:39:28:7c:76:96:79:74:ed:55:93:ce:
         33:c2:cc:e1:84:c9:19:dc:5c:05:a6:d4:9a:f5:75:f0:33:e5:
         75:71:7c:08:eb:78:24:c9:02:fb:e8:3b:02:de:74:ad:dc:34:
         3e:05:59:10:5a:7c:ba:41:16:e3:02:6c:7c:df:f6:16:14:79:
         de:ea:78:4b:43:c6:32:2f:93:74:86:c2:66:7b:f1:a8:be:88:
         e9:4a:b4:e8:1f:e8:65:ee:ce:ba:f4:88:30:b9:89:66:58:ff:
         e5:ac:60:fd:02:6a:9b:35:e8:36:79:f5:3b:3d:76:b5:d1:7a:
         16:6d:36:b4:25:6b:0c:6c:34:b2:0b:6e:58:19:6e:ee:7c:0e:
         7b:3e:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:19:51 2026 by rpki-client