Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa
File:                     3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa (raw, json)
Hash identifier:          R/C0JBOb7/+uSnhMHiYUOyz6TfGvXVBUyZyO7HtyFi8=
Subject key identifier:   CC:B4:C3:17:F0:8C:6A:92:16:9D:A2:02:CB:28:BC:A0:40:2A:2A:7A
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       02B8BCCDC5BC689E7A7CD919D154EB1F90E1F292
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa
Signing time:             Thu 24 Jul 2025 15:55:00 +0000
ROA not before:           Thu 24 Jul 2025 15:50:00 +0000
ROA not after:            Thu 23 Jul 2026 15:55:00 +0000
asID:                     266796
IP address blocks:        190.182.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b8:bc:cd:c5:bc:68:9e:7a:7c:d9:19:d1:54:eb:1f:90:e1:f2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jul 24 15:50:00 2025 GMT
            Not After : Jul 23 15:55:00 2026 GMT
        Subject: CN=CCB4C317F08C6A92169DA202CB28BCA0402A2A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:a4:72:43:e7:37:c7:a7:f8:8d:6e:35:04:
                    db:b4:0d:8d:76:ee:bd:4f:a8:f6:a4:9a:c1:b6:94:
                    eb:46:b0:3b:22:12:ec:a7:b3:7e:10:9a:35:4b:96:
                    df:53:51:7c:e7:2f:e2:38:9e:c3:72:ec:d7:06:dd:
                    5f:d2:ef:53:de:cc:77:3a:49:b6:37:21:d0:c7:8c:
                    45:3b:0b:b9:86:f9:ed:43:3a:77:3a:76:84:36:e6:
                    4d:e5:37:ed:38:8e:34:4a:26:0f:15:20:73:01:cf:
                    8d:96:f3:54:51:40:b7:f4:ab:d6:c3:c0:d1:a3:fb:
                    1d:fa:3c:f1:4f:e9:9f:f8:c3:c9:10:c1:64:00:82:
                    85:28:85:3e:a8:3d:a7:e9:96:9f:7b:1e:9e:fa:2c:
                    d8:36:95:4e:e1:08:ea:21:2e:af:e9:8d:ac:ee:9a:
                    2f:92:ab:ca:09:f6:3a:68:1f:46:d8:6f:2a:2e:37:
                    21:4c:cb:01:73:ef:24:70:fd:67:50:6d:21:01:6a:
                    27:d9:ae:c2:f4:e1:0a:4b:9c:35:94:18:61:e9:f0:
                    3a:6f:53:66:0c:45:17:3c:54:28:ba:8d:cf:60:a0:
                    df:9d:0b:f2:8f:d5:4f:f7:75:a0:ba:05:ef:8f:3f:
                    04:d0:6d:73:62:90:06:2c:a5:ef:1b:26:ef:a4:47:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B4:C3:17:F0:8C:6A:92:16:9D:A2:02:CB:28:BC:A0:40:2A:2A:7A
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:8f:2a:79:9a:3a:60:70:b3:f3:40:34:01:a9:30:a6:63:
         8b:fc:89:ee:6f:63:fb:38:5a:05:33:f9:83:df:0e:e8:1f:d5:
         f9:1a:9e:5a:f5:62:2a:9c:80:f0:8c:a5:d6:4a:5f:7a:31:8e:
         ad:2f:72:a6:af:c1:3d:b2:24:4e:73:ec:d0:51:d0:40:a8:b3:
         6e:d5:10:46:fb:81:f7:a9:11:b8:20:b6:98:f1:8d:cf:e9:93:
         ac:e9:d7:dc:77:cb:ce:18:c8:c0:db:a0:ab:a0:90:a8:0b:2d:
         eb:37:97:86:d7:5c:3f:92:89:87:95:7f:bf:14:f1:1f:dc:95:
         4b:c6:01:d5:58:2e:e6:6a:12:b8:81:e9:47:35:1d:54:e4:45:
         6a:f1:36:fb:b8:0e:97:94:3a:3f:37:25:4a:50:2f:6a:63:48:
         08:0e:9f:3c:2b:8c:75:10:65:52:74:4a:4f:8d:97:92:97:08:
         4b:1a:b0:6b:7a:a7:aa:df:ee:f5:12:cf:6e:b7:46:26:1c:d1:
         eb:15:82:49:81:26:6f:4e:7c:ca:d7:5d:ed:97:0a:9b:1c:70:
         5c:30:a2:79:b9:2d:46:1f:a7:5c:74:dd:3d:69:bb:c3:49:b4:
         d0:89:3a:d1:15:a7:98:22:62:e4:a1:05:7e:30:15:1a:a0:fc:
         79:6b:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 14:12:57 2025 by rpki-client