Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3230392e302f32342d3234203d3e203133363832.roa
File:                     3139302e3134332e3230392e302f32342d3234203d3e203133363832.roa (raw, json)
Hash identifier:          sn+BohKzxDy0JM584RFSqiGg9jeUxewvoBXGmW2ky7E=
Subject key identifier:   6A:13:51:15:B9:3F:BF:FF:B1:3E:6E:8A:EE:24:2E:DE:C2:9B:DE:75
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0DEAAD17231368C6826FFC3CFFCC4FE70CAD6725
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3230392e302f32342d3234203d3e203133363832.roa
Signing time:             Tue 28 Apr 2026 06:20:00 +0000
ROA not before:           Tue 28 Apr 2026 06:15:00 +0000
ROA not after:            Tue 27 Apr 2027 06:20:00 +0000
asID:                     13682
IP address blocks:        190.143.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ea:ad:17:23:13:68:c6:82:6f:fc:3c:ff:cc:4f:e7:0c:ad:67:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Apr 28 06:15:00 2026 GMT
            Not After : Apr 27 06:20:00 2027 GMT
        Subject: CN=6A135115B93FBFFFB13E6E8AEE242EDEC29BDE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:c7:c2:54:82:00:ef:8f:93:be:be:42:e1:
                    68:37:4a:ef:49:ad:60:32:9c:16:29:95:15:44:e8:
                    1b:97:79:ce:be:9b:58:69:ff:d2:0e:c0:71:2d:b3:
                    ff:6a:cc:b0:ca:54:9a:6e:93:4b:a8:6b:2b:79:6d:
                    5f:48:b6:0d:2b:7d:b0:b9:a1:e4:41:a7:3e:17:2d:
                    8f:37:99:33:3f:e4:21:9c:74:50:5d:98:11:64:c9:
                    4e:d4:40:7a:f1:fd:d6:eb:91:94:64:fd:66:33:2b:
                    5f:6b:a7:9d:04:d1:98:09:30:b5:fa:80:d5:e5:60:
                    64:d3:b3:f5:08:cf:1e:95:af:36:f4:74:50:ae:c0:
                    82:ab:17:b8:70:1a:a6:b7:a0:7d:60:9a:67:a6:e2:
                    84:b0:4d:ec:d7:2f:ae:d8:cb:44:30:55:c4:07:30:
                    c7:07:bb:45:3e:da:2b:b3:ff:1e:87:71:34:b0:ee:
                    d4:08:db:57:ab:20:17:cf:a1:28:4f:1c:3f:97:62:
                    19:23:30:9b:34:16:ab:56:07:bf:d0:bc:63:22:59:
                    dd:94:4b:4c:42:77:7c:d4:6c:dd:0d:57:dc:09:7b:
                    ba:3a:8a:43:7b:9b:5d:b2:b4:fc:f5:60:ee:83:88:
                    96:89:64:08:c7:0a:14:1a:95:f8:c7:ff:93:6d:ea:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:51:15:B9:3F:BF:FF:B1:3E:6E:8A:EE:24:2E:DE:C2:9B:DE:75
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3230392e302f32342d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:69:8c:48:fd:82:58:75:1e:ff:58:2a:40:a2:89:d6:4c:
         b0:b6:36:6a:d8:9e:07:7d:50:ed:d4:55:11:b0:f1:76:0f:04:
         14:7d:c6:f2:7c:68:50:e8:90:d2:29:11:88:e1:f0:2a:17:9a:
         4c:18:55:a0:a0:ec:11:c3:e8:65:02:b9:27:71:5e:d9:d0:4c:
         83:ec:33:3b:58:e7:69:9b:02:7e:81:7f:58:1c:08:1f:ba:51:
         a8:65:e0:72:d7:70:56:90:ba:6a:3d:a4:93:1d:87:0b:38:d0:
         3a:fc:48:be:3a:88:8f:2f:f3:b4:41:16:70:5d:ab:f6:bc:84:
         b0:e8:6f:59:e6:7b:bc:a6:03:98:4b:9c:f8:f9:df:88:0e:50:
         54:51:af:8f:c9:d0:86:ad:dd:d5:08:83:c0:e4:77:57:70:5d:
         89:f4:3e:88:43:31:70:64:7e:ae:fc:b2:04:a3:56:65:c8:16:
         10:db:62:fc:64:03:5f:67:0b:85:9e:ac:cc:58:e4:fd:49:0b:
         d9:49:8a:d7:2a:aa:47:10:28:38:28:28:85:7d:7f:d0:b5:ff:
         5c:61:db:c0:0d:38:f2:3e:2d:5f:0d:3e:1f:54:d0:82:83:44:
         8a:ae:66:e6:90:21:63:3f:33:5f:3b:f1:e8:b2:a9:24:ee:fc:
         40:72:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 16:14:19 2026 by rpki-client