Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3231302e302f32332d3234203d3e203133363832.roa
File:                     3139302e3134332e3231302e302f32332d3234203d3e203133363832.roa (raw, json)
Hash identifier:          CcQhTvdxMa5ExYrwlWR8+xqxe5IZceraYbFEeZIl4vs=
Subject key identifier:   1D:B2:F4:A8:26:A5:00:6B:15:4E:5B:E2:E4:7B:3A:85:CA:3A:7D:E9
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1042F4A7F04A5C945C6277196EAF41627BEFC1FD
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3231302e302f32332d3234203d3e203133363832.roa
Signing time:             Tue 28 Apr 2026 06:20:00 +0000
ROA not before:           Tue 28 Apr 2026 06:15:00 +0000
ROA not after:            Tue 27 Apr 2027 06:20:00 +0000
asID:                     13682
IP address blocks:        190.143.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:42:f4:a7:f0:4a:5c:94:5c:62:77:19:6e:af:41:62:7b:ef:c1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Apr 28 06:15:00 2026 GMT
            Not After : Apr 27 06:20:00 2027 GMT
        Subject: CN=1DB2F4A826A5006B154E5BE2E47B3A85CA3A7DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:81:74:5b:96:e1:d8:00:8e:5e:00:2a:79:
                    fb:23:64:be:3f:9d:d2:97:4f:85:f4:07:eb:17:f6:
                    91:46:23:29:3e:91:57:34:45:23:70:6a:8f:3c:35:
                    be:ef:1e:ed:64:ee:3c:9e:85:2e:e8:f6:b9:f3:9a:
                    3b:0a:fb:37:cf:b6:ce:bf:b9:5c:d5:c7:81:e8:46:
                    9e:30:15:25:4a:ed:42:5e:9a:cb:42:3e:3f:f6:14:
                    10:d0:d5:bd:7c:59:ea:98:ce:39:0b:6a:ed:07:f1:
                    80:48:68:43:ac:29:a1:76:7d:36:c7:dc:c8:8e:67:
                    33:be:23:12:95:f6:6b:17:44:14:46:08:36:13:3e:
                    1e:73:15:30:a1:d9:0b:61:e8:36:e1:a8:d8:cb:8e:
                    10:06:5a:e1:2d:a6:68:37:ce:b4:27:d1:83:e4:9b:
                    3a:e6:77:95:84:b8:5a:e6:87:08:6b:48:61:15:b0:
                    06:c9:99:74:4c:e5:2d:d3:bf:92:02:ae:00:42:e5:
                    08:2a:e8:9c:2a:18:88:e3:29:49:6e:b7:99:57:e7:
                    f6:70:3f:17:56:fb:ea:a6:92:2f:d7:91:54:14:3b:
                    27:74:a0:f7:9d:3e:5a:90:ca:c5:f0:05:11:d3:bf:
                    b5:93:c5:99:ad:5c:69:2e:25:56:54:93:aa:90:b4:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:F4:A8:26:A5:00:6B:15:4E:5B:E2:E4:7B:3A:85:CA:3A:7D:E9
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3231302e302f32332d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:4a:48:d1:20:b7:ba:d3:3e:83:1a:b7:66:b7:3c:f2:53:
         ba:3f:d8:8d:17:11:65:39:88:9f:72:61:25:67:1e:c6:fc:ad:
         1c:c6:71:0f:04:9a:82:ac:13:0d:20:a8:93:d2:38:c6:1e:7c:
         23:5a:45:1d:9f:fc:4c:c2:5a:b3:9e:12:67:f1:5b:33:68:36:
         08:e9:46:04:ca:17:86:80:76:70:4f:36:4f:1d:40:4f:e7:c1:
         0d:04:71:be:83:89:c4:5b:e8:3a:0f:17:dc:b4:01:c3:41:87:
         6f:ef:f6:a5:4c:96:1e:c7:f7:b7:03:77:b7:e1:9a:e0:5d:9a:
         5c:f4:07:f3:25:63:ce:29:94:f4:57:89:a1:f5:83:ce:fc:a9:
         f1:28:a2:7b:7c:85:65:c1:ec:be:83:37:3b:62:88:be:f6:8e:
         2b:34:8b:e8:f2:ec:65:2e:7f:eb:b4:b3:c6:1d:53:b0:f9:07:
         49:54:1b:b6:ee:56:cc:e9:73:8e:40:e6:7b:55:09:8e:d5:1a:
         a2:35:84:47:d5:e3:9c:67:78:49:8d:90:02:98:e2:81:6f:ec:
         a7:eb:f9:cf:db:23:b7:8f:18:2f:70:49:76:7e:37:a2:c7:10:
         27:bb:a9:16:d5:27:7c:5f:c4:98:74:be:27:d2:52:bf:ab:79:
         75:59:59:e2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEEL0p/BKXJRcYncZbq9BYnvvwf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNjA0MjgwNjE1MDBaFw0yNzA0MjcwNjIwMDBaMDMxMTAvBgNV
BAMTKDFEQjJGNEE4MjZBNTAwNkIxNTRFNUJFMkU0N0IzQTg1Q0EzQTdERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/4F0W5bh2ACOXgAqefsjZL4/
ndKXT4X0B+sX9pFGIyk+kVc0RSNwao88Nb7vHu1k7jyehS7o9rnzmjsK+zfPts6/
uVzVx4HoRp4wFSVK7UJemstCPj/2FBDQ1b18WeqYzjkLau0H8YBIaEOsKaF2fTbH
3MiOZzO+IxKV9msXRBRGCDYTPh5zFTCh2Qth6DbhqNjLjhAGWuEtpmg3zrQn0YPk
mzrmd5WEuFrmhwhrSGEVsAbJmXRM5S3Tv5ICrgBC5Qgq6JwqGIjjKUlut5lX5/Zw
PxdW++qmki/XkVQUOyd0oPedPlqQysXwBRHTv7WTxZmtXGkuJVZUk6qQtEJfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHbL0qCalAGsVTlvi5Hs6hco6fekwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDMzMmUzMjMxMzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvo/S
MA0GCSqGSIb3DQEBCwUAA4IBAQBuRUpI0SC3utM+gxq3Zrc88lO6P9iNFxFlOYif
cmElZx7G/K0cxnEPBJqCrBMNIKiT0jjGHnwjWkUdn/xMwlqznhJn8VszaDYI6UYE
yheGgHZwTzZPHUBP58ENBHG+g4nEW+g6DxfctAHDQYdv7/alTJYex/e3A3e34Zrg
XZpc9AfzJWPOKZT0V4mh9YPO/KnxKKJ7fIVlwey+gzc7Yoi+9o4rNIvo8uxlLn/r
tLPGHVOw+QdJVBu27lbM6XOOQOZ7VQmO1RqiNYRH1eOcZ3hJjZACmOKBb+yn6/nP
2yO3jxgvcEl2fjeixxAnu6kW1Sd8X8SYdL4n0lK/q3l1WVni
-----END CERTIFICATE-----
Generated at Tue Apr 28 16:14:21 2026 by rpki-client