Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa
File:                     3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          9IJ5i57VNZyWOEQ5Z9D6UP82fSOfXamDJ0u0N2VKQjo=
Subject key identifier:   D6:3B:9A:32:60:87:CD:1D:0B:8E:3D:90:3E:93:2A:18:27:52:BD:5D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       41BC360340ED44467CD934CFB82BAEB45A9DB876
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:15 +0000
ROA not before:           Tue 06 Jan 2026 19:42:15 +0000
ROA not after:            Tue 05 Jan 2027 19:47:15 +0000
asID:                     14754
IP address blocks:        190.143.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 19:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:36:03:40:ed:44:46:7c:d9:34:cf:b8:2b:ae:b4:5a:9d:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:15 2026 GMT
            Not After : Jan  5 19:47:15 2027 GMT
        Subject: CN=D63B9A326087CD1D0B8E3D903E932A182752BD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:56:3c:f4:af:cf:38:65:13:ac:a5:eb:a4:06:
                    c8:7b:44:00:41:a1:de:a5:00:8d:47:9a:74:1f:bc:
                    34:70:1c:93:74:6e:7d:ae:08:e4:01:f7:42:a2:1f:
                    ff:97:1a:fd:0e:ac:40:65:4c:de:b4:4a:a6:b3:f0:
                    5a:4c:ab:11:21:86:0d:f4:fe:f9:8a:dc:9d:00:93:
                    02:c1:29:4a:6c:32:e1:db:63:f1:e0:96:c7:e0:20:
                    83:36:43:b9:eb:b1:65:1a:7a:c4:7b:42:f3:70:a1:
                    c2:c8:fa:52:dd:33:b2:df:3e:f5:f6:3a:f2:26:1a:
                    ad:85:52:e3:ac:89:91:2b:4e:60:94:a5:12:b9:2b:
                    0f:f1:e7:08:54:cd:f9:af:fa:04:c0:d8:0a:58:0a:
                    53:f6:3a:3b:96:66:f5:f6:ba:82:f8:df:0a:83:aa:
                    af:4f:f6:1a:dd:6e:f3:d8:23:1f:a8:66:b7:31:84:
                    45:32:6d:d5:3d:7f:51:2e:0c:1b:74:da:b6:7a:81:
                    9a:6b:43:57:56:2b:2e:20:14:69:92:f1:14:64:d0:
                    30:7a:a5:e7:1c:52:1f:57:52:47:a3:57:b0:b6:70:
                    02:91:7d:8d:27:87:5e:5f:15:f4:91:24:2e:5b:84:
                    1f:0e:2d:dc:ca:c8:0e:52:57:54:e5:28:06:31:6b:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:9A:32:60:87:CD:1D:0B:8E:3D:90:3E:93:2A:18:27:52:BD:5D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:1a:de:8c:b2:9e:d1:c0:7c:53:45:fd:69:a4:65:27:1e:
         4f:07:d3:25:1f:9a:7c:ea:29:f0:06:d3:5b:ad:7f:55:ac:e2:
         54:a8:68:b7:f2:1d:80:9a:ef:10:fd:ec:50:3d:9f:16:ea:c6:
         79:1c:14:65:e1:da:43:f6:e9:89:bd:68:93:5e:9f:d2:bd:ba:
         88:3d:5a:a1:be:fb:74:88:56:3b:f3:c0:ad:ec:a8:46:97:f4:
         75:1b:62:b6:3c:b4:62:ca:fb:11:b8:69:d0:a7:f8:9c:e9:f8:
         77:80:fe:47:75:aa:bc:d5:e8:ff:1b:7b:2e:e6:df:90:57:21:
         29:5b:47:f0:27:d1:9e:6e:91:b0:2d:22:f7:6d:5b:bd:56:33:
         15:0f:16:39:d9:2f:af:a4:f4:62:56:16:5b:ce:8e:89:3c:0d:
         12:94:33:cd:2c:87:dd:93:b2:17:7e:40:4c:98:a4:00:65:ad:
         3e:58:e6:a7:bb:54:27:3c:41:9a:88:ec:8f:dd:6b:1c:f4:4a:
         e4:b4:71:4c:77:f9:f8:0f:6e:f5:ca:be:59:dc:26:6b:9b:e3:
         3b:d9:97:b8:6b:3b:ee:65:c6:d7:b2:b1:89:db:1c:9a:b5:11:
         26:58:c0:bd:38:59:27:94:cd:17:ce:eb:55:dd:82:bb:e1:a3:
         e0:ad:0d:bc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQbw2A0DtREZ82TTPuCuutFqduHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNjAxMDYxOTQyMTVaFw0yNzAxMDUxOTQ3MTVaMDMxMTAvBgNV
BAMTKEQ2M0I5QTMyNjA4N0NEMUQwQjhFM0Q5MDNFOTMyQTE4Mjc1MkJENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPVjz0r884ZROspeukBsh7RABB
od6lAI1HmnQfvDRwHJN0bn2uCOQB90KiH/+XGv0OrEBlTN60Sqaz8FpMqxEhhg30
/vmK3J0AkwLBKUpsMuHbY/HglsfgIIM2Q7nrsWUaesR7QvNwocLI+lLdM7LfPvX2
OvImGq2FUuOsiZErTmCUpRK5Kw/x5whUzfmv+gTA2ApYClP2OjuWZvX2uoL43wqD
qq9P9hrdbvPYIx+oZrcxhEUybdU9f1EuDBt02rZ6gZprQ1dWKy4gFGmS8RRk0DB6
peccUh9XUkejV7C2cAKRfY0nh15fFfSRJC5bhB8OLdzKyA5SV1TlKAYxa2JlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1juaMmCHzR0Ljj2QPpMqGCdSvV0wHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDMzMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvo+A
MA0GCSqGSIb3DQEBCwUAA4IBAQAMVBrejLKe0cB8U0X9aaRlJx5PB9MlH5p86inw
BtNbrX9VrOJUqGi38h2Amu8Q/exQPZ8W6sZ5HBRl4dpD9umJvWiTXp/SvbqIPVqh
vvt0iFY788Ct7KhGl/R1G2K2PLRiyvsRuGnQp/ic6fh3gP5Hdaq81ej/G3su5t+Q
VyEpW0fwJ9GebpGwLSL3bVu9VjMVDxY52S+vpPRiVhZbzo6JPA0SlDPNLIfdk7IX
fkBMmKQAZa0+WOanu1QnPEGaiOyP3Wsc9ErktHFMd/n4D271yr5Z3CZrm+M72Ze4
azvuZcbXsrGJ2xyatREmWMC9OFknlM0XzutV3YK74aPgrQ28
-----END CERTIFICATE-----
Generated at Sat Feb 21 18:57:55 2026 by rpki-client