Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3234302e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          inYEHv1kUbQirhbDrMen0Wser5+lAiPjDH8nk0KMxjI=
Subject key identifier:   CF:2C:49:3B:30:F7:5A:9B:DF:DA:A7:2F:97:3C:1E:07:EE:5D:10:EE
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       45BF950F46C1A7B6927C78F626EFA0190854C377
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32342d3234203d3e203532323738.roa
Signing time:             Sat 15 Aug 2026 01:00:00 +0000
ROA not before:           Sat 15 Aug 2026 00:55:00 +0000
ROA not after:            Sat 14 Aug 2027 01:00:00 +0000
asID:                     52278
IP address blocks:        190.105.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bf:95:0f:46:c1:a7:b6:92:7c:78:f6:26:ef:a0:19:08:54:c3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Aug 15 00:55:00 2026 GMT
            Not After : Aug 14 01:00:00 2027 GMT
        Subject: CN=CF2C493B30F75A9BDFDAA72F973C1E07EE5D10EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:e9:fe:6d:14:78:75:f2:05:8a:f4:52:81:
                    81:4f:bc:bc:07:fc:d2:0a:6b:bf:b5:ea:9f:73:33:
                    e8:96:5b:b9:99:b5:f8:16:33:f4:69:0d:ec:ab:49:
                    2f:96:50:e8:a7:a5:29:77:15:04:29:5a:10:2d:cc:
                    fd:bd:ed:8c:fc:04:b3:58:18:4b:9c:7e:73:95:2a:
                    92:90:19:36:4b:d7:54:33:62:75:9f:e5:89:7c:ed:
                    1d:61:d3:4d:a8:ab:51:5b:75:c9:f4:78:79:1b:42:
                    38:93:8b:3b:9b:b0:23:f2:76:01:4b:cf:63:4d:ee:
                    f5:7c:31:0e:79:60:cc:66:aa:f7:00:17:00:53:83:
                    a9:d5:5e:0c:d3:7e:2a:72:97:0c:6c:28:33:02:45:
                    3f:b3:f3:c7:a8:d8:53:4e:7f:5e:53:3e:ed:97:1f:
                    11:a7:f6:12:1c:8e:bb:d6:f7:78:81:9d:d4:62:62:
                    76:dd:db:e1:f8:9d:e5:59:9a:be:08:75:69:2f:77:
                    d4:a0:3a:b1:7f:aa:56:a5:d2:85:14:29:da:bf:0b:
                    c9:e6:16:68:3a:f4:91:f1:9c:e3:51:c5:c3:82:8a:
                    61:a8:65:59:c4:39:e0:8f:40:ba:23:fb:d3:cf:7b:
                    3a:44:73:1c:39:c4:cc:eb:ac:03:bd:c5:0c:e8:56:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2C:49:3B:30:F7:5A:9B:DF:DA:A7:2F:97:3C:1E:07:EE:5D:10:EE
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:48:55:a2:09:da:1d:27:c9:12:26:cb:b8:ae:2e:1a:f1:81:
         01:d8:71:5d:da:1b:7c:64:bf:63:df:c0:5e:11:f4:6d:2a:b4:
         f6:0d:23:12:78:1c:17:cb:ed:3c:0a:e6:01:fe:11:2d:b2:79:
         bf:bc:70:15:8f:ec:14:71:13:60:ba:0e:49:0f:2b:28:2d:72:
         66:79:ed:9a:e8:67:a8:42:42:5d:4b:b7:59:f2:5c:4b:fc:68:
         af:a7:05:4f:b8:c6:ee:da:d5:9f:ab:aa:9b:e8:c5:1a:29:63:
         72:9d:59:dd:8a:03:96:cf:48:73:1d:bb:b4:cd:ec:dd:59:a9:
         c5:c8:80:bc:a1:26:59:90:8e:5f:9b:9a:4d:ec:b7:80:84:53:
         46:df:5a:3f:63:72:4d:f8:d6:ed:96:b6:7d:bf:1d:9d:45:2a:
         2c:73:43:1d:c9:bc:69:58:bf:a2:a0:10:f9:51:98:6f:81:7a:
         f1:47:5a:69:6c:02:18:38:78:27:b4:ea:ea:0b:fb:4c:da:5c:
         b5:1e:32:8d:c1:41:c5:5c:17:f9:3f:f3:72:41:2b:40:fc:2a:
         3a:d4:05:8e:1f:ba:8c:dd:d6:4e:1c:8e:f8:b5:b0:29:78:5c:
         80:b2:d7:4d:cf:12:8a:a7:47:6d:81:67:4d:c3:53:77:58:c3:
         91:34:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:16 2026 by rpki-client