Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
File:                     3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          smi2SXS0MJNZcjPC5RdznWLm4BC7yIggQl9N/NutuYM=
Subject key identifier:   22:EF:47:78:B1:A1:17:54:74:4F:A7:7A:DE:FA:9C:1D:6D:0A:8B:C6
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       75401EB43340B3D858EF1AC7C01122753E811EAD
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 28 Apr 2026 06:15:01 +0000
ROA not before:           Tue 28 Apr 2026 06:10:01 +0000
ROA not after:            Tue 27 Apr 2027 06:15:01 +0000
asID:                     14754
IP address blocks:        190.149.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 11:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:1e:b4:33:40:b3:d8:58:ef:1a:c7:c0:11:22:75:3e:81:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Apr 28 06:10:01 2026 GMT
            Not After : Apr 27 06:15:01 2027 GMT
        Subject: CN=22EF4778B1A11754744FA77ADEFA9C1D6D0A8BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:9e:ed:c5:ce:5e:41:5d:fb:9c:4a:41:17:
                    c2:04:ef:1c:76:42:24:8c:93:30:30:62:bd:22:ae:
                    26:30:aa:eb:78:c7:1f:4b:19:44:cd:12:0f:2e:ed:
                    49:ee:eb:b1:c0:ff:da:1a:a1:88:61:42:f0:33:e4:
                    9a:c7:51:59:91:c9:dd:38:31:95:c5:1f:1a:88:5e:
                    b5:1f:97:a2:82:14:cb:cc:6b:04:a5:c5:f8:df:25:
                    4a:ba:04:09:40:33:25:2c:87:cb:c6:28:78:4b:01:
                    64:35:ee:26:fe:10:38:82:4e:8d:7e:45:d7:3b:c4:
                    6a:f7:13:69:5f:7c:f3:0b:3f:79:f4:77:57:93:50:
                    ac:1d:21:87:fd:52:99:ae:5a:2e:fd:37:72:62:f4:
                    b5:c7:0b:13:2e:e8:fc:a4:22:a8:88:81:f2:27:aa:
                    cc:8f:21:ef:a7:32:da:bb:c9:df:c2:ce:39:ac:a7:
                    43:1d:ab:f8:68:85:31:e5:6f:c9:7b:b4:82:c0:95:
                    7e:2d:ac:fc:e9:65:6a:ab:c4:eb:f3:b6:15:6d:41:
                    3b:86:ad:6d:cd:4e:47:f7:da:05:69:7f:4e:1a:59:
                    66:44:b2:91:e8:24:80:f6:4f:34:c7:d5:4a:43:68:
                    49:d0:cd:5d:5e:7a:73:5b:d8:31:a8:7d:16:63:ea:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EF:47:78:B1:A1:17:54:74:4F:A7:7A:DE:FA:9C:1D:6D:0A:8B:C6
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:05:0f:ff:43:03:5f:a9:9d:30:0c:54:b6:ad:43:3b:6b:ca:
         58:ba:07:2f:d7:46:eb:54:78:20:bd:76:c6:2e:47:64:58:7d:
         8b:55:d2:66:82:63:8a:a8:16:c9:cd:c0:48:80:e6:76:1c:bb:
         f4:9f:a8:f9:c7:05:b3:5f:04:ed:3a:b8:da:59:03:29:d8:d2:
         0f:58:2b:e1:83:ce:b5:a1:04:bc:f5:8e:39:6f:31:51:17:57:
         81:cc:24:26:04:65:80:46:84:c3:99:f6:0d:af:4e:1d:cd:08:
         9a:19:1c:d5:02:6b:75:03:33:48:24:3b:df:93:50:2b:2a:ad:
         d0:ff:3b:a2:ae:aa:9f:54:3c:46:fa:ba:ed:68:90:b8:aa:8c:
         8c:83:09:13:7c:ec:56:02:43:4f:01:54:22:f9:fd:72:1c:25:
         82:dd:42:21:5c:65:bc:fe:f3:32:61:51:f1:d7:73:82:ce:5d:
         1d:cc:36:27:6f:36:09:91:3c:91:45:8e:7c:78:3d:53:4e:53:
         bf:fe:ad:5d:a2:ad:70:b5:8e:6a:92:35:de:3c:f4:c8:bb:32:
         4d:7c:6e:d3:8a:a2:2c:7f:ca:fb:20:c3:a9:df:49:31:53:86:
         45:8a:0f:a8:5b:a3:fb:67:8b:e2:86:e5:05:f4:78:ce:66:39:
         ed:94:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:01 2026 by rpki-client