Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa
File:                     3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa (raw, json)
Hash identifier:          8VlW82Jrwwj85VSrOxoitPJxW9pC0vg3hcFxO6wLxG4=
Subject key identifier:   59:95:CF:3E:98:5B:2C:6F:69:AD:38:E9:89:45:B8:96:CE:73:63:10
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       42234194E114B2F47E26D7245D7D687A32499D1A
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa
Signing time:             Tue 06 Jan 2026 20:53:42 +0000
ROA not before:           Tue 06 Jan 2026 20:48:42 +0000
ROA not after:            Tue 05 Jan 2027 20:53:42 +0000
asID:                     272039
IP address blocks:        190.89.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl
                          rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:23:41:94:e1:14:b2:f4:7e:26:d7:24:5d:7d:68:7a:32:49:9d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Jan  6 20:48:42 2026 GMT
            Not After : Jan  5 20:53:42 2027 GMT
        Subject: CN=5995CF3E985B2C6F69AD38E98945B896CE736310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:a8:4e:9a:6e:a0:b0:ad:7b:82:a9:50:68:
                    63:69:66:17:ee:f4:84:8b:17:aa:39:f8:ce:4f:67:
                    c0:12:a5:b6:b9:db:ef:97:5f:4d:4b:27:e2:89:c5:
                    e2:9b:c3:49:fe:0e:0d:f4:11:c0:16:59:ae:3f:ff:
                    b7:3d:92:ec:27:9f:ce:1e:e6:ed:49:53:ed:89:00:
                    71:f8:65:78:65:7f:f0:86:34:60:38:f2:cc:b3:53:
                    c5:a0:b0:7c:6f:f2:08:62:ff:c1:81:eb:60:97:53:
                    bf:7c:d4:74:4d:9e:d1:ab:97:74:45:06:6e:0b:4a:
                    2b:3e:dc:11:75:31:c7:60:04:df:00:32:cb:ff:b1:
                    bd:f7:6b:10:a5:fd:9b:da:49:dc:9a:e9:2a:2d:e8:
                    ff:b1:b9:2b:a7:ef:d0:d0:b6:2a:35:e7:15:96:65:
                    3f:61:4b:0b:d0:28:b3:30:d0:71:7a:46:4b:78:41:
                    03:7f:6f:35:41:3c:94:d0:e8:71:79:30:ef:ef:81:
                    cc:84:db:1d:56:49:02:bc:fa:d3:3a:69:e3:16:8a:
                    e5:8d:b4:c6:08:55:a4:a9:15:a1:6c:6b:d0:ab:d6:
                    09:f0:e1:bd:d6:dd:12:b7:14:d0:77:60:ae:2a:3d:
                    b1:08:7e:8d:32:50:9b:29:4e:60:d0:4b:70:3f:de:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:CF:3E:98:5B:2C:6F:69:AD:38:E9:89:45:B8:96:CE:73:63:10
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:9e:f0:18:25:0f:c6:2f:e6:54:ae:1f:6b:e6:ae:5c:aa:
         8b:80:88:11:2f:35:54:ff:32:c6:04:ca:d6:63:f3:d3:e6:2b:
         0f:16:5d:10:2e:1e:3f:3a:45:e8:c5:0f:85:3e:76:74:53:7f:
         1c:05:2e:6c:1a:db:7a:66:3f:b8:db:36:ed:e5:8f:11:e2:02:
         da:ba:07:d8:11:8a:12:10:2f:51:92:99:a3:b5:0d:65:e0:d0:
         0d:6a:db:5f:f4:e6:63:65:e2:26:f9:98:5b:8b:71:57:29:99:
         57:12:46:7c:36:a5:27:1d:d2:0f:ca:28:32:9b:2c:d2:cf:91:
         cc:8b:0e:6e:37:8e:ca:dc:8f:d8:47:38:d0:43:54:27:a5:e4:
         69:ec:3d:18:3a:18:dd:28:04:7e:ab:cc:f0:3f:3e:89:19:ed:
         cc:92:ec:8e:1e:e5:2d:67:11:bd:f3:3c:41:f2:18:c5:30:23:
         db:3f:7d:22:f8:1f:35:e3:75:37:9e:39:10:6f:52:44:6f:5c:
         6e:86:c7:d9:58:ab:b9:93:ed:86:d5:e4:33:09:7b:ee:49:87:
         14:2d:12:75:b2:43:55:0f:c9:a5:be:26:2b:4c:16:62:38:95:
         33:f3:1a:09:73:94:f6:2a:9d:48:9b:56:76:0c:3e:ed:b4:7f:
         73:d4:03:b7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQiNBlOEUsvR+JtckXX1oejJJnRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzNzVEMTc1RjUxQjIyMkFBODI2QzQyNEMyNzE3ODAz
QTY4Qzk5MTAeFw0yNjAxMDYyMDQ4NDJaFw0yNzAxMDUyMDUzNDJaMDMxMTAvBgNV
BAMTKDU5OTVDRjNFOTg1QjJDNkY2OUFEMzhFOTg5NDVCODk2Q0U3MzYzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fKhOmm6gsK17gqlQaGNpZhfu
9ISLF6o5+M5PZ8ASpba52++XX01LJ+KJxeKbw0n+Dg30EcAWWa4//7c9kuwnn84e
5u1JU+2JAHH4ZXhlf/CGNGA48syzU8WgsHxv8ghi/8GB62CXU7981HRNntGrl3RF
Bm4LSis+3BF1McdgBN8AMsv/sb33axCl/ZvaSdya6Sot6P+xuSun79DQtio15xWW
ZT9hSwvQKLMw0HF6Rkt4QQN/bzVBPJTQ6HF5MO/vgcyE2x1WSQK8+tM6aeMWiuWN
tMYIVaSpFaFsa9Cr1gnw4b3W3RK3FNB3YK4qPbEIfo0yUJspTmDQS3A/3lTHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWZXPPphbLG9prTjpiUW4ls5zYxAwHwYDVR0j
BBgwFoAUEDddF19RsiKqgmxCTCcXgDpoyZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzRFMDU5MkI2RkUxM0QzNDAwOUM5N0U2QUI0RjZFMTI5
QjUyQjIzRkMwRDQ1OTBFMjE1NjNEOEQyRkQ1QUU0LzAvMTAzNzVEMTc1RjUxQjIy
MkFBODI2QzQyNEMyNzE3ODAzQTY4Qzk5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMDM3NUQxNzVGNTFCMjIyQUE4
MjZDNDI0QzI3MTc4MDNBNjhDOTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTc0RTA1OTJCNkZFMTNEMzQwMDlDOTdFNkFCNEY2RTEyOUI1MkIyM0ZD
MEQ0NTkwRTIxNTYzRDhEMkZENUFFNC8wLzMxMzkzMDJlMzgzOTJlMzEzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvlmt
MA0GCSqGSIb3DQEBCwUAA4IBAQBEX57wGCUPxi/mVK4fa+auXKqLgIgRLzVU/zLG
BMrWY/PT5isPFl0QLh4/OkXoxQ+FPnZ0U38cBS5sGtt6Zj+42zbt5Y8R4gLaugfY
EYoSEC9RkpmjtQ1l4NANattf9OZjZeIm+Zhbi3FXKZlXEkZ8NqUnHdIPyigymyzS
z5HMiw5uN47K3I/YRzjQQ1QnpeRp7D0YOhjdKAR+q8zwPz6JGe3MkuyOHuUtZxG9
8zxB8hjFMCPbP30i+B8143U3njkQb1JEb1xuhsfZWKu5k+2G1eQzCXvuSYcULRJ1
skNVD8mlviYrTBZiOJUz8xoJc5T2Kp1Im1Z2DD7ttH9z1AO3
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:17:26 2026 by rpki-client