Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3138312e302f32342d3234203d3e20323633323338.roa
File:                     3139302e392e3138312e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          noD3Ak7UsV+Pz14aLW8hpYtaLoXQtC9173Zl/6zCURI=
Subject key identifier:   29:23:58:21:CB:4F:06:74:70:DE:A5:5C:30:5A:A5:3B:F1:5A:FE:D7
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       2B0D1B9E5B5720CF26B204486BE236B348AF197C
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3138312e302f32342d3234203d3e20323633323338.roa
Signing time:             Tue 20 Oct 2026 19:15:00 +0000
ROA not before:           Tue 20 Oct 2026 19:10:00 +0000
ROA not after:            Tue 19 Oct 2027 19:15:00 +0000
asID:                     263238
IP address blocks:        190.9.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 18:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0d:1b:9e:5b:57:20:cf:26:b2:04:48:6b:e2:36:b3:48:af:19:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Oct 20 19:10:00 2026 GMT
            Not After : Oct 19 19:15:00 2027 GMT
        Subject: CN=29235821CB4F067470DEA55C305AA53BF15AFED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:03:bd:33:fa:5e:ca:a7:a4:43:01:ed:80:
                    9e:7d:fe:ee:fd:f5:66:93:6d:b9:7b:44:e4:30:cf:
                    ee:d9:b2:01:8d:04:bc:b4:77:1b:cd:33:2b:f0:4f:
                    a0:4d:06:95:d8:17:e1:f3:91:56:ec:38:69:d6:84:
                    43:d2:38:7a:68:e1:41:05:ed:ca:c4:be:10:d3:db:
                    7c:8b:7b:3b:5c:a6:9f:3b:c9:7a:05:cf:76:fe:9b:
                    6a:bf:67:5b:e6:74:fa:6f:7a:2c:6f:16:da:84:cf:
                    69:06:e2:05:30:b8:38:e1:9a:3a:29:79:25:54:a4:
                    a0:26:f6:03:01:bc:18:bb:4f:90:ce:72:69:e2:d9:
                    6e:1c:e8:a6:ce:c3:2a:ba:90:a1:51:8e:50:14:0d:
                    6e:14:a5:14:a1:4b:c0:e0:7b:4e:8a:6e:8d:2b:a4:
                    ef:42:94:16:91:8c:9b:80:45:45:21:b1:0c:c4:87:
                    c1:9c:2c:c5:e8:9a:dd:00:2e:af:b5:73:dd:12:cd:
                    6b:7b:bf:1c:d9:16:e5:c8:a8:9a:ea:3d:bd:40:fe:
                    58:35:3b:b6:bc:a1:a0:81:b9:e6:cb:56:49:5d:c4:
                    59:b1:cf:93:98:1d:b7:a2:97:9f:c1:cd:31:16:cf:
                    77:ca:f4:26:26:84:80:5c:66:3f:31:1c:21:f3:5d:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:58:21:CB:4F:06:74:70:DE:A5:5C:30:5A:A5:3B:F1:5A:FE:D7
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3138312e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:be:dc:8a:25:e1:a0:90:fb:da:ac:e0:85:10:84:d5:ca:8f:
         a5:fc:c1:b0:23:f1:37:45:a3:cc:82:87:ed:4e:21:ec:79:93:
         e4:22:c7:46:c7:2b:e6:68:6b:1a:a0:e3:d2:90:1a:58:65:d8:
         39:4e:5d:b7:da:0e:6c:4f:c0:00:ba:e0:16:27:2a:75:14:48:
         6d:23:00:71:19:e0:61:e0:34:41:d9:3d:55:2d:e6:5a:ce:71:
         99:fb:08:3f:32:36:b2:b0:41:e4:f9:6c:df:2d:f4:12:6f:34:
         cc:12:f4:1c:50:da:f1:d5:f6:11:ae:dd:f4:d5:91:1e:81:eb:
         2c:31:84:6a:c0:6a:a5:9b:c8:8d:4c:d5:e8:4f:47:e6:15:d1:
         fc:ce:1f:ae:b1:10:5c:62:57:25:72:1c:3b:3a:30:b5:69:ae:
         06:fa:fc:09:55:01:c3:99:43:de:ef:d5:cc:c6:4e:1f:69:02:
         0a:ef:95:06:be:b6:e1:fe:4f:6a:b2:85:65:c5:41:22:ef:df:
         82:4b:cf:12:95:f5:3c:96:90:a7:7b:ea:3a:d1:59:10:81:09:
         29:68:a0:4c:bc:aa:e1:75:68:25:81:b9:5c:72:c4:69:9c:82:
         22:e3:e4:69:94:6f:27:15:cb:d1:4f:9c:18:e4:43:c1:c5:1d:
         92:8f:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:17 2026 by rpki-client