Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f32302d3234203d3e203133363832.roa
File:                     3139302e3134332e3139322e302f32302d3234203d3e203133363832.roa (raw, json)
Hash identifier:          aWqx0f1/IUAHEWqtV2IVt/Arsu1HvDSVT57qvXT9K2g=
Subject key identifier:   CA:E2:5F:34:28:43:7A:D7:55:78:CA:44:FD:50:52:9A:04:1F:03:ED
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       11E68A56C3B465DF474CA7CC757CBA077D120549
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f32302d3234203d3e203133363832.roa
Signing time:             Tue 28 Apr 2026 06:20:00 +0000
ROA not before:           Tue 28 Apr 2026 06:15:00 +0000
ROA not after:            Tue 27 Apr 2027 06:20:00 +0000
asID:                     13682
IP address blocks:        190.143.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e6:8a:56:c3:b4:65:df:47:4c:a7:cc:75:7c:ba:07:7d:12:05:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Apr 28 06:15:00 2026 GMT
            Not After : Apr 27 06:20:00 2027 GMT
        Subject: CN=CAE25F3428437AD75578CA44FD50529A041F03ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:ee:66:b4:5d:15:6d:e9:96:e9:5f:2a:01:
                    91:96:fd:45:38:61:60:61:f5:11:21:f3:7d:01:25:
                    a9:bf:80:45:bb:79:08:98:4a:e0:cc:15:c2:54:ec:
                    d8:c2:29:2b:7d:ad:56:b2:ad:90:4a:54:09:30:cb:
                    03:bb:f6:56:43:fe:de:16:f7:c9:87:40:a0:fd:84:
                    39:f8:c2:3c:f9:8f:f9:1e:61:18:9a:e8:82:4a:87:
                    99:7b:90:7c:8a:97:4e:46:e7:d3:c7:d6:21:87:51:
                    f2:be:da:8a:4a:23:a3:d2:be:4a:07:e1:52:76:b5:
                    73:45:3d:cc:e8:47:46:b0:e2:18:76:77:79:52:85:
                    4a:2f:b5:c6:ae:d5:df:4f:01:47:0d:1b:57:15:ab:
                    ca:7b:26:67:77:63:33:42:06:29:96:b0:2c:3c:a6:
                    c1:a4:7e:5e:e9:8f:96:a0:0e:4d:f1:0f:75:12:13:
                    33:4a:21:1f:54:7c:95:46:7f:1e:aa:f1:55:91:6c:
                    a5:21:7f:7a:75:1c:15:dd:2e:cc:8f:4c:07:16:a5:
                    9b:41:7c:13:d0:26:cf:88:14:e2:75:45:46:9f:88:
                    5e:6f:7b:f1:6e:d1:27:61:11:56:3a:de:b3:7f:67:
                    a5:d5:02:8b:36:84:5c:ed:07:83:8c:1b:02:5f:e2:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:5F:34:28:43:7A:D7:55:78:CA:44:FD:50:52:9A:04:1F:03:ED
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f32302d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:06:42:47:7e:af:3f:68:26:9e:1d:b0:87:64:88:38:6c:0f:
         10:ed:96:eb:ce:b6:f1:e1:55:13:c1:1c:0b:15:09:7e:36:8c:
         8a:78:25:b6:7f:38:7a:a0:2a:28:80:fd:e0:f9:25:ed:4e:68:
         e6:19:c5:d6:c5:56:94:86:39:4c:9b:64:ec:52:7f:90:e9:63:
         5d:b3:54:1f:b1:b5:98:73:8f:17:f4:bc:ee:e3:35:d6:1c:b5:
         5d:c2:9d:aa:4b:6c:8b:1c:8d:99:3f:5e:28:f3:20:f1:ea:50:
         1f:19:ad:4d:e4:53:c3:ff:e6:a1:86:73:d0:00:f3:cd:ba:a6:
         97:42:54:8e:d7:79:82:96:c9:54:69:0b:b4:16:b2:81:1c:c4:
         96:74:b2:d5:20:95:c1:96:10:e4:e5:43:b6:cd:ce:62:be:34:
         a2:38:05:e7:0b:69:64:4b:56:97:9b:bd:fa:9c:8a:1b:8a:09:
         ad:9a:dc:66:1c:31:48:b4:e6:32:d9:6e:cc:e5:08:f9:1e:b8:
         02:fb:40:cb:3a:cb:d4:26:94:5a:45:d6:7c:1b:b3:9e:9b:63:
         d5:84:00:ac:f1:a3:53:36:f3:7d:96:7d:f2:f1:28:df:45:31:
         a1:78:4a:a8:6b:5e:6a:e9:58:69:28:75:10:44:25:7f:93:0e:
         b1:88:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 16:14:07 2026 by rpki-client