Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e203134373534.roa
File:                     3139302e3134332e3232342e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          ucmBycWEYFKuAU41254Ysu9q/9fhrvo1T2V1LJW2lHI=
Subject key identifier:   39:0E:5D:22:2D:0E:3A:0F:C9:14:A6:F2:BD:FE:BE:EC:42:0B:2B:58
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       6E7F1C3281068A243EC5572824014384ED8A666C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 28 Apr 2026 06:15:00 +0000
ROA not before:           Tue 28 Apr 2026 06:10:00 +0000
ROA not after:            Tue 27 Apr 2027 06:15:00 +0000
asID:                     14754
IP address blocks:        190.143.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 11:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7f:1c:32:81:06:8a:24:3e:c5:57:28:24:01:43:84:ed:8a:66:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Apr 28 06:10:00 2026 GMT
            Not After : Apr 27 06:15:00 2027 GMT
        Subject: CN=390E5D222D0E3A0FC914A6F2BDFEBEEC420B2B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:6a:f4:aa:48:1c:b6:01:bf:e6:ae:f4:e9:
                    52:52:16:b8:ef:e6:44:e7:3b:3a:6b:ef:c8:95:d6:
                    6b:f6:d6:7c:29:d7:1c:31:ef:84:ac:4f:61:c3:c1:
                    f8:fe:cf:6f:14:17:f1:e6:87:66:6e:27:d3:65:e1:
                    02:8a:c6:4b:1c:a3:01:90:81:0b:a7:e2:d2:58:aa:
                    6d:cc:7c:00:66:32:26:f2:bd:01:93:93:fc:2f:03:
                    ac:ce:9b:09:03:d6:b0:bf:4d:2d:eb:9f:91:08:7a:
                    d2:a0:c0:dc:83:e3:40:eb:a2:e1:12:cc:50:4f:fa:
                    28:a3:2e:3d:a4:71:20:19:49:34:02:32:62:ef:89:
                    c8:9e:59:92:a8:57:61:0b:f7:14:52:bc:e5:8c:0f:
                    17:9f:aa:6c:87:c1:28:d3:a4:dd:e5:06:d5:8a:58:
                    42:45:bb:30:b6:8d:a8:74:15:3e:ee:37:91:54:20:
                    da:7f:09:52:aa:83:98:7b:ef:0e:85:52:39:97:95:
                    1d:8f:7b:28:c3:4f:79:af:b4:db:bc:07:3e:b5:4b:
                    b7:17:05:23:8b:97:34:65:d2:6c:02:e0:fd:70:e2:
                    f4:07:2b:8d:79:5e:82:46:0a:d9:9a:7b:80:dc:10:
                    45:40:f7:c6:25:66:fd:cf:9f:f1:cd:73:00:fd:b0:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:5D:22:2D:0E:3A:0F:C9:14:A6:F2:BD:FE:BE:EC:42:0B:2B:58
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:7d:23:fd:47:16:58:07:c3:0a:c0:55:d8:84:68:3a:9d:
         39:a8:78:e6:fa:ea:e4:7e:d9:27:ba:dd:d3:35:7f:ed:89:f6:
         d8:9e:95:50:48:b1:c5:f4:85:89:dd:f1:a8:fd:06:ee:1b:40:
         48:ac:33:71:89:f9:04:66:9c:5f:cd:24:f4:48:a4:be:a4:0d:
         89:8f:2d:77:62:4a:1d:f4:74:9f:55:a4:1e:5d:93:b5:5e:ef:
         04:80:d4:fa:1c:a0:6f:bc:77:f5:3e:c1:67:f7:14:c3:8d:b1:
         db:71:35:4a:48:6e:7e:70:cc:36:3d:e6:70:9c:1a:85:f6:cd:
         c2:62:7a:23:6a:d6:90:7a:f3:be:d4:0b:76:75:fe:f1:22:5a:
         67:ea:48:95:0a:0e:f5:b2:19:af:11:6d:00:57:dd:01:5d:0f:
         29:d1:36:c6:2f:0e:4b:e4:5e:83:a0:38:25:53:e9:49:86:57:
         dc:10:58:eb:04:8c:cf:51:b5:8f:98:75:ac:fb:74:9c:85:32:
         89:4d:3d:ff:1d:ac:05:aa:fb:38:a9:47:bc:39:ce:dc:88:07:
         03:99:3c:d8:85:64:ce:51:cb:d1:91:9e:10:68:02:fb:49:8d:
         ab:a8:02:b1:50:af:f7:0b:cc:27:7a:2a:c8:a6:3f:95:df:37:
         a0:d0:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:07 2026 by rpki-client