Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e3232302e3133392e302f32342d3234203d3e20323635383433.roa
File:                     3139302e3232302e3133392e302f32342d3234203d3e20323635383433.roa (raw, json)
Hash identifier:          nIAIGSvGZT1MM4np97005vR+zjZUU9TAF5I/+Azhczs=
Subject key identifier:   50:73:90:F9:A3:FD:5A:59:A9:6E:05:22:B1:86:E3:AD:49:F0:5C:BE
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       10C3F4E830408B94C7F2F6980DE4C7C2613F5B77
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e3232302e3133392e302f32342d3234203d3e20323635383433.roa
Signing time:             Wed 01 Jul 2026 19:50:27 +0000
ROA not before:           Wed 01 Jul 2026 19:45:27 +0000
ROA not after:            Wed 30 Jun 2027 19:50:27 +0000
asID:                     265843
IP address blocks:        190.220.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c3:f4:e8:30:40:8b:94:c7:f2:f6:98:0d:e4:c7:c2:61:3f:5b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Jul  1 19:45:27 2026 GMT
            Not After : Jun 30 19:50:27 2027 GMT
        Subject: CN=507390F9A3FD5A59A96E0522B186E3AD49F05CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:96:4a:d9:a5:7a:a1:1c:df:0d:28:b1:35:
                    ec:20:2d:cc:da:4e:39:6f:7a:6d:47:a8:33:26:94:
                    4f:74:8b:bb:e0:69:c8:ee:ff:04:77:29:66:f8:64:
                    21:94:8a:b6:48:cd:1b:ae:ce:45:fb:6f:e1:c5:69:
                    0d:42:5d:ce:76:ad:0f:f1:9e:4b:5a:fc:62:2c:8b:
                    e8:80:3b:75:82:8f:c6:7f:ab:26:3e:6f:51:76:81:
                    67:34:70:bf:5f:1c:8f:be:f2:cf:ea:97:d7:64:02:
                    5b:79:63:7a:20:a4:b9:77:80:d5:3c:a2:bc:22:84:
                    80:5b:f8:4a:40:61:b2:b8:07:04:8b:a5:47:6c:02:
                    85:2c:db:fc:f6:10:a8:11:49:b7:45:9c:82:3b:08:
                    9e:14:5f:0d:fb:c5:d0:2f:24:1a:15:2b:b3:e2:4e:
                    f8:7a:ce:fe:2f:7b:77:f7:60:88:30:c3:46:58:09:
                    24:c9:f3:8a:1c:c9:ec:7e:e2:61:52:1d:18:a9:60:
                    51:1b:0e:aa:75:07:7d:56:71:cb:b0:5a:95:bf:af:
                    75:e2:05:2d:ce:d8:7d:49:40:09:9e:bd:3f:20:18:
                    33:df:fe:b1:80:ce:cb:08:9c:2c:a4:7b:66:cb:4f:
                    94:59:47:e9:84:4d:cd:bc:b2:a5:1f:8c:65:49:c2:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:73:90:F9:A3:FD:5A:59:A9:6E:05:22:B1:86:E3:AD:49:F0:5C:BE
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e3232302e3133392e302f32342d3234203d3e20323635383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.220.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:fd:0e:7c:7b:d8:5c:f0:7f:bb:f3:9d:5d:d5:27:80:3e:28:
         2e:16:d9:d4:0e:c2:00:d5:4d:7c:ec:8b:48:26:a8:2e:05:ed:
         6f:7d:fe:54:88:08:9c:cf:cf:10:62:14:29:81:b3:11:37:ca:
         04:69:83:d9:f2:f2:52:71:68:65:dd:c4:a2:c5:de:ea:c1:14:
         36:db:3b:2e:75:59:9f:25:33:07:e9:70:39:d7:4f:f1:95:98:
         f2:b9:a9:c2:b3:0e:78:92:3c:37:0f:11:07:81:73:ff:42:bc:
         c8:62:71:32:b3:7c:73:6c:aa:21:1a:34:3b:54:24:b3:66:5e:
         06:ab:fe:79:77:31:7d:2e:1f:9c:cd:5f:a2:38:62:c7:fe:2b:
         aa:2a:0d:cc:bf:9d:e4:50:31:10:e8:c3:32:95:ba:bf:72:26:
         5d:26:5b:98:ad:52:72:70:22:db:e5:a3:24:29:75:50:bb:b4:
         14:96:8f:c0:d8:6a:ea:c7:54:36:d1:a9:cd:10:b9:4a:4b:80:
         a5:2c:9d:4d:1e:71:ac:79:f1:77:e9:3f:b2:78:fc:ad:45:aa:
         d2:ab:31:54:40:77:a2:75:7e:28:0b:4b:73:de:59:4b:90:c1:
         4d:1d:ea:27:a7:7e:53:f7:56:aa:f2:5d:ba:18:ce:b4:70:73:
         d3:95:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:08:58 2026 by rpki-client