Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130342e302f32312d3234203d3e20323632393332.roa
File:                     3139302e3131342e3130342e302f32312d3234203d3e20323632393332.roa (raw, json)
Hash identifier:          V+0JpYVk5/72Pi5Q4LpB1Ci/rUSKLp5x0qyig5GC4gs=
Subject key identifier:   B4:F9:BF:84:E1:3F:2E:B8:4E:19:1E:15:6E:C0:A2:DE:2A:EB:39:F3
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       29963239DACE59E996EF7F6C7FAB2D0696DB4D75
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130342e302f32312d3234203d3e20323632393332.roa
Signing time:             Fri 17 Jul 2026 18:00:42 +0000
ROA not before:           Fri 17 Jul 2026 17:55:42 +0000
ROA not after:            Fri 16 Jul 2027 18:00:42 +0000
asID:                     262932
IP address blocks:        190.114.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:96:32:39:da:ce:59:e9:96:ef:7f:6c:7f:ab:2d:06:96:db:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jul 17 17:55:42 2026 GMT
            Not After : Jul 16 18:00:42 2027 GMT
        Subject: CN=B4F9BF84E13F2EB84E191E156EC0A2DE2AEB39F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:31:f4:3c:de:e2:a6:54:76:4a:9f:62:7a:
                    cd:82:1b:16:bd:3d:cf:8c:42:2b:a8:49:e8:6b:2a:
                    d0:ca:ad:36:f9:7f:02:cd:82:1d:e3:7c:e4:f3:b1:
                    b8:4b:ae:2d:e2:29:a6:98:c3:d2:10:bb:53:5b:28:
                    42:e7:9f:bb:71:4f:d7:5c:73:7a:3e:2f:fa:4d:4e:
                    59:ba:9d:fd:8e:6c:b7:48:69:76:09:e3:ce:3b:e6:
                    50:38:5e:c6:15:3d:94:a7:b6:ed:2b:90:f4:3e:a8:
                    7b:88:db:44:bd:f5:4b:5e:8f:0f:43:30:d3:c9:82:
                    77:49:17:69:e7:63:cd:8d:31:2c:41:78:2d:bf:4c:
                    af:ec:3e:c4:06:2c:86:a7:20:96:0b:ba:67:12:00:
                    33:78:e5:93:a8:cc:f0:90:00:ea:50:9a:ce:25:af:
                    56:f5:c4:15:7f:07:49:4a:32:bb:07:bf:dd:78:40:
                    60:42:31:9e:0d:0e:9d:c0:c4:42:ca:ad:bc:fb:8c:
                    85:67:e2:5c:6e:ad:72:91:ce:90:8d:57:78:53:ad:
                    33:6d:fd:98:65:57:4a:48:32:db:d8:4d:d9:da:28:
                    81:9e:d4:40:33:fa:d2:d9:6f:56:87:e2:0a:0a:70:
                    18:45:c9:62:86:f1:08:90:20:3c:11:e3:05:f8:66:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:BF:84:E1:3F:2E:B8:4E:19:1E:15:6E:C0:A2:DE:2A:EB:39:F3
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130342e302f32312d3234203d3e20323632393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:56:5e:e6:94:f8:62:de:4d:4d:7c:2c:5f:e2:ac:2b:04:
         db:6d:f0:3f:6b:f9:f5:a4:d5:02:a3:52:a9:43:8f:fe:82:b1:
         4a:61:56:6d:29:a7:42:a4:fa:fe:fb:b1:8b:a2:76:07:f1:98:
         ad:dc:4c:c4:60:9a:0c:9c:1e:68:f5:ec:64:41:c6:d1:01:33:
         6c:3a:08:3e:14:26:3b:6b:3c:9e:0e:01:14:f7:96:d9:ab:11:
         5e:4f:c0:03:4b:a4:e3:be:04:c1:ee:a7:f5:2c:e3:67:54:06:
         a7:38:45:db:5b:f4:4c:7b:3f:8c:b0:9e:9c:d0:30:6b:fd:b9:
         f2:22:18:fe:72:36:1b:e0:14:b5:73:2d:39:9a:95:4d:4e:e0:
         8c:45:ca:e7:2a:48:dd:02:6b:8d:62:f6:1e:9d:2b:fd:aa:98:
         2c:4e:d9:bf:47:ed:a8:f1:b0:b8:3f:87:cf:d1:68:16:19:7f:
         00:3a:de:9c:12:63:58:4c:13:ef:16:84:39:c0:0e:66:1a:1f:
         88:01:3e:64:28:f2:ce:72:60:83:f4:06:c2:36:8a:b1:83:84:
         0c:0d:2f:f6:b8:a9:5a:a5:cf:c2:9a:8e:fd:4f:a0:a5:38:7b:
         6d:7c:84:f5:51:73:2f:98:cf:da:12:eb:43:c4:2e:14:ec:94:
         03:15:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:04:30 2026 by rpki-client