Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3230392e302f32342d3234203d3e20323636383731.roa
File:                     3139302e3138352e3230392e302f32342d3234203d3e20323636383731.roa (raw, json)
Hash identifier:          2H3xGIsZ4GA7zBqhMt1/mIeTCGwsQlZmydJTAATxca0=
Subject key identifier:   2C:33:F2:C9:55:57:D0:05:59:95:96:C3:18:AE:A8:06:EF:B8:B5:9C
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       5EE0762AFA006CC854D26D4095A1DDAED562591E
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3230392e302f32342d3234203d3e20323636383731.roa
Signing time:             Tue 04 Aug 2026 23:10:00 +0000
ROA not before:           Tue 04 Aug 2026 23:05:00 +0000
ROA not after:            Tue 03 Aug 2027 23:10:00 +0000
asID:                     266871
IP address blocks:        190.185.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Aug 2026 02:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e0:76:2a:fa:00:6c:c8:54:d2:6d:40:95:a1:dd:ae:d5:62:59:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Aug  4 23:05:00 2026 GMT
            Not After : Aug  3 23:10:00 2027 GMT
        Subject: CN=2C33F2C95557D005599596C318AEA806EFB8B59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:fe:2b:5e:0c:50:72:4c:ca:1c:d1:ec:27:
                    82:f7:b0:b7:96:ed:0e:6a:c1:04:8e:52:c2:0f:76:
                    19:c4:dd:28:c9:07:50:b5:ed:d8:f7:ef:c4:e3:33:
                    f8:d6:f6:32:d6:d5:07:9e:2c:4f:63:03:7f:9c:b0:
                    bf:1c:bb:e6:e9:64:4e:d5:fb:83:97:a6:61:23:1a:
                    c4:57:3b:b7:92:3d:29:f2:2d:22:65:ba:2b:f2:9c:
                    09:24:d7:b5:61:ea:6d:37:ae:ce:c9:ad:6b:e3:b9:
                    05:a7:05:57:fb:12:14:95:c7:e8:6f:45:36:86:6d:
                    4f:ca:73:2b:38:fc:64:72:b6:15:fe:e5:19:31:81:
                    13:9c:b6:06:7b:ec:23:ab:e1:e0:4e:06:eb:25:90:
                    1b:3a:6d:34:43:47:2c:d8:66:e8:1c:59:a3:b5:fb:
                    6c:42:69:de:5b:c7:30:87:07:3b:4b:5b:33:68:8a:
                    de:80:aa:34:80:51:a9:56:10:b1:1f:0d:d8:ce:78:
                    4c:89:cf:83:dc:94:5e:1f:f4:ed:58:1d:eb:e9:cc:
                    95:ff:61:bc:a2:40:fb:5f:0c:ec:7b:ae:7d:99:99:
                    61:86:f6:74:7a:62:3e:1c:7d:32:f1:92:ef:a5:6f:
                    ff:b2:7b:33:e8:34:57:71:60:0e:34:0d:2c:7f:c8:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:33:F2:C9:55:57:D0:05:59:95:96:C3:18:AE:A8:06:EF:B8:B5:9C
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3230392e302f32342d3234203d3e20323636383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:9d:ac:88:99:8d:8f:a0:6e:d5:b1:57:3f:14:f5:02:62:
         1b:10:61:7e:eb:dd:65:23:46:75:bf:2f:a5:0b:d7:a8:9c:57:
         36:a7:65:37:70:82:b5:97:3e:b4:31:ff:ec:4d:73:30:1e:c0:
         c0:01:c7:c4:0c:ad:1c:e0:1c:8b:f3:f3:82:50:0c:25:55:51:
         94:a3:e8:87:94:21:8b:8a:2f:cb:22:f8:55:cd:95:dd:c7:05:
         a2:28:c4:f3:b3:15:30:ec:43:3a:da:5d:b7:ae:44:0a:d6:07:
         24:33:26:9e:ef:34:2c:30:63:61:20:06:d2:2d:40:f3:60:8a:
         98:7e:18:8b:bb:64:e1:5a:9c:a8:8e:1a:be:d3:23:f0:a6:fe:
         35:6f:2e:26:14:1b:57:e8:22:c4:f5:34:f2:7a:5e:57:6d:57:
         66:3f:66:c4:83:89:fd:9c:a3:e8:79:45:b2:58:22:5e:d6:bd:
         68:f0:05:7e:07:98:06:34:5f:df:eb:f3:6f:23:5d:f2:8d:74:
         3f:58:1d:63:01:e6:f8:c0:9b:0d:25:b9:4c:d6:1e:8f:3b:38:
         88:97:b4:11:de:96:13:c8:e3:4d:4c:11:84:9d:0a:6c:cd:57:
         73:ab:3b:05:71:3e:a3:f0:50:45:94:d2:64:35:e0:d9:c7:e7:
         df:3d:db:ea
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXuB2KvoAbMhU0m1AlaHdrtViWR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNjA4MDQyMzA1MDBaFw0yNzA4MDMyMzEwMDBaMDMxMTAvBgNV
BAMTKDJDMzNGMkM5NTU1N0QwMDU1OTk1OTZDMzE4QUVBODA2RUZCOEI1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRf/4rXgxQckzKHNHsJ4L3sLeW
7Q5qwQSOUsIPdhnE3SjJB1C17dj378TjM/jW9jLW1QeeLE9jA3+csL8cu+bpZE7V
+4OXpmEjGsRXO7eSPSnyLSJluivynAkk17Vh6m03rs7JrWvjuQWnBVf7EhSVx+hv
RTaGbU/Kcys4/GRythX+5RkxgROctgZ77COr4eBOBuslkBs6bTRDRyzYZugcWaO1
+2xCad5bxzCHBztLWzNoit6AqjSAUalWELEfDdjOeEyJz4PclF4f9O1YHevpzJX/
YbyiQPtfDOx7rn2ZmWGG9nR6Yj4cfTLxku+lb/+yezPoNFdxYA40DSx/yDINAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULDPyyVVX0AVZlZbDGK6oBu+4tZwwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzODM1MmUzMjMwMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzODM3MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
udEwDQYJKoZIhvcNAQELBQADggEBADC9nayImY2PoG7VsVc/FPUCYhsQYX7r3WUj
RnW/L6UL16icVzanZTdwgrWXPrQx/+xNczAewMABx8QMrRzgHIvz84JQDCVVUZSj
6IeUIYuKL8si+FXNld3HBaIoxPOzFTDsQzraXbeuRArWByQzJp7vNCwwY2EgBtIt
QPNgiph+GIu7ZOFanKiOGr7TI/Cm/jVvLiYUG1foIsT1NPJ6XldtV2Y/ZsSDif2c
o+h5RbJYIl7WvWjwBX4HmAY0X9/r828jXfKNdD9YHWMB5vjAmw0luUzWHo87OIiX
tBHelhPI401MEYSdCmzNV3OrOwVxPqPwUEWU0mQ14NnH59892+o=
-----END CERTIFICATE-----
Generated at Fri Aug 7 22:28:56 2026 by rpki-client