Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS262589.roa
File:                     AS262589.roa (raw, json)
Hash identifier:          RuXKAHu+tushvauLYxuDDVpyudnorfSBLx/qShVj+lw=
Subject key identifier:   C7:D8:23:94:49:7C:B2:39:EE:FD:D5:C2:51:52:8A:C7:0A:EB:36:0F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3D0E46706104971D5F11F576614D931AF372B988
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS262589.roa
Signing time:             Thu 04 Jun 2026 04:40:00 +0000
ROA not before:           Thu 04 Jun 2026 04:35:00 +0000
ROA not after:            Thu 03 Jun 2027 04:40:00 +0000
asID:                     262589
IP address blocks:        190.90.82.0/24 maxlen: 24
                          190.90.213.0/24 maxlen: 24
                          190.90.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:46:70:61:04:97:1d:5f:11:f5:76:61:4d:93:1a:f3:72:b9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun  4 04:35:00 2026 GMT
            Not After : Jun  3 04:40:00 2027 GMT
        Subject: CN=C7D82394497CB239EEFDD5C251528AC70AEB360F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:55:61:d3:64:49:12:75:e9:ca:32:49:df:
                    ff:83:0c:38:3b:9c:fc:dd:cc:59:74:b2:be:35:13:
                    2f:6f:a5:d8:28:99:dc:6a:79:72:24:a5:f8:b3:1c:
                    68:3d:f2:16:1d:f1:f1:38:a7:78:47:b8:00:4b:82:
                    e7:5e:7f:73:e0:d8:8a:e3:29:d2:ee:81:f3:e6:ea:
                    d0:09:1d:ec:73:f3:03:b6:c5:a5:49:09:bc:32:68:
                    bd:c4:8f:1e:cf:52:6d:28:49:48:5e:74:55:98:45:
                    b2:91:a5:89:87:be:d9:43:ee:4f:8c:5e:e2:4d:d8:
                    d1:dc:64:9a:71:f5:01:16:4a:1d:10:32:92:6c:28:
                    8d:19:6d:e1:28:fa:cc:af:44:57:ab:c6:6f:0e:af:
                    bd:2e:28:d3:5f:11:5f:3b:c0:1d:c7:10:8d:97:04:
                    83:01:52:53:fb:e4:99:75:a9:ff:0e:bf:08:da:60:
                    dc:c5:f1:06:6c:01:ff:bc:17:8e:fd:25:1a:9d:c6:
                    1e:73:8e:18:ec:94:b0:22:dc:9f:76:f5:56:86:8b:
                    c4:f2:dd:44:c1:e5:b8:bb:1b:ea:dd:f3:b6:75:58:
                    f0:45:b1:57:81:7a:b6:91:18:20:32:4e:5f:5b:21:
                    ff:f4:87:61:7c:8d:7a:6e:91:f9:d8:a5:f8:25:19:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D8:23:94:49:7C:B2:39:EE:FD:D5:C2:51:52:8A:C7:0A:EB:36:0F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS262589.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.82.0/24
                  190.90.213.0/24
                  190.90.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:29:56:85:9d:ff:84:7d:6a:61:e3:d5:e1:97:19:e3:b1:
         e4:6b:d4:9b:70:43:d2:38:b5:dd:a8:97:72:99:c1:c1:a1:50:
         60:da:ab:21:05:c6:62:4f:14:78:b1:57:a1:32:91:84:37:0f:
         75:b1:5f:32:81:3d:10:1d:f4:74:3d:d5:75:c0:71:51:c8:af:
         08:c2:f5:fb:22:32:36:e6:3c:2f:d7:2a:11:7e:5d:f6:33:59:
         ae:d9:a7:06:56:6c:41:ad:fd:ea:9f:51:a9:c6:b7:3b:ae:52:
         64:5f:2d:75:99:77:c2:ac:6d:14:d4:7d:93:49:4f:2d:ee:21:
         83:23:c7:44:cf:5b:3f:5c:d5:75:55:a4:56:17:ea:b2:c0:98:
         8b:b0:98:f3:03:ab:b2:3f:29:22:bf:4c:08:25:bb:88:42:76:
         6a:1f:ec:78:7d:4f:28:ac:81:77:58:94:d9:14:a4:a7:f1:7d:
         7f:02:b6:75:de:8f:f9:5e:7b:21:ac:5a:22:60:b4:60:50:16:
         9f:51:65:e3:d9:81:71:db:50:aa:7c:96:cf:b5:a2:1a:2b:c2:
         cc:df:bf:e0:3f:c9:9f:5b:74:b0:84:29:7d:69:81:f6:a7:60:
         15:af:e9:10:c6:d2:b2:e5:d7:aa:4f:09:e2:e4:f7:6c:56:a3:
         3f:6b:72:24
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUPQ5GcGEElx1fEfV2YU2TGvNyuYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjA2MDQwNDM1MDBaFw0yNzA2MDMwNDQwMDBaMDMxMTAvBgNV
BAMTKEM3RDgyMzk0NDk3Q0IyMzlFRUZERDVDMjUxNTI4QUM3MEFFQjM2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH1Vh02RJEnXpyjJJ3/+DDDg7
nPzdzFl0sr41Ey9vpdgomdxqeXIkpfizHGg98hYd8fE4p3hHuABLgudef3Pg2Irj
KdLugfPm6tAJHexz8wO2xaVJCbwyaL3Ejx7PUm0oSUhedFWYRbKRpYmHvtlD7k+M
XuJN2NHcZJpx9QEWSh0QMpJsKI0ZbeEo+syvRFerxm8Or70uKNNfEV87wB3HEI2X
BIMBUlP75Jl1qf8OvwjaYNzF8QZsAf+8F479JRqdxh5zjhjslLAi3J929VaGi8Ty
3UTB5bi7G+rd87Z1WPBFsVeBeraRGCAyTl9bIf/0h2F8jXpukfnYpfglGftFAgMB
AAGjggKlMIICoTAdBgNVHQ4EFgQUx9gjlEl8sjnu/dXCUVKKxwrrNg8wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0YxQ0VGMUY4N0Yz
ODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQVMyNjI1ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAC+WlID
BAC+WtUDBAC+WtowDQYJKoZIhvcNAQELBQADggEBAH/KKVaFnf+EfWph49Xhlxnj
seRr1JtwQ9I4td2ol3KZwcGhUGDaqyEFxmJPFHixV6EykYQ3D3WxXzKBPRAd9HQ9
1XXAcVHIrwjC9fsiMjbmPC/XKhF+XfYzWa7ZpwZWbEGt/eqfUanGtzuuUmRfLXWZ
d8KsbRTUfZNJTy3uIYMjx0TPWz9c1XVVpFYX6rLAmIuwmPMDq7I/KSK/TAglu4hC
dmof7Hh9TyisgXdYlNkUpKfxfX8CtnXej/leeyGsWiJgtGBQFp9RZePZgXHbUKp8
ls+1ohorwszfv+A/yZ9bdLCEKX1pgfanYBWv6RDG0rLl16pPCeLk92xWoz9rciQ=
-----END CERTIFICATE-----
Generated at Sun Jun 7 00:00:52 2026 by rpki-client