Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234322e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3234322e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          zIBJI6JlK5OUmvi5aqvhQzrniXbImfz8y1s8t4B/R6k=
Subject key identifier:   C5:D1:3D:29:1F:E1:4C:38:DF:E8:2C:CF:E9:43:A7:DD:58:C4:91:58
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       215E734B60C6EF14D41C1F7364F8475098FE3B07
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234322e302f32342d3234203d3e203532323738.roa
Signing time:             Sat 15 Aug 2026 01:00:02 +0000
ROA not before:           Sat 15 Aug 2026 00:55:02 +0000
ROA not after:            Sat 14 Aug 2027 01:00:02 +0000
asID:                     52278
IP address blocks:        190.105.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:73:4b:60:c6:ef:14:d4:1c:1f:73:64:f8:47:50:98:fe:3b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Aug 15 00:55:02 2026 GMT
            Not After : Aug 14 01:00:02 2027 GMT
        Subject: CN=C5D13D291FE14C38DFE82CCFE943A7DD58C49158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:60:95:a2:1c:25:90:31:77:f3:44:6e:e0:
                    73:a9:f1:3e:b0:3e:70:f4:2f:6a:7a:72:b6:76:43:
                    c9:87:71:a1:74:79:76:80:84:bf:c3:8f:32:ca:5c:
                    76:de:2c:38:47:8a:c5:af:28:4d:74:52:f8:2c:4e:
                    a1:bb:8b:41:06:f0:ad:d2:9e:f5:ee:89:45:55:67:
                    13:3a:b3:f8:15:76:83:8f:ad:81:65:1d:c3:22:06:
                    27:2f:7a:6c:bd:af:a7:2e:d0:56:3b:ac:82:e0:2c:
                    ed:e9:22:73:5d:84:dc:80:e4:23:31:7d:99:68:ff:
                    92:2a:49:50:87:1c:b5:9a:f9:c1:66:2f:a5:d7:34:
                    cf:e6:7f:c3:9e:d5:dc:22:96:40:6f:be:d9:d6:7e:
                    69:59:20:83:b7:a3:ff:6f:85:f6:25:09:9f:bc:a4:
                    b5:b5:e0:5d:40:33:53:1e:52:48:a9:c0:21:86:6f:
                    70:fa:a5:7d:25:0d:db:d0:35:0e:42:53:c6:b6:54:
                    cb:39:27:6a:60:f3:7f:0c:11:3d:6f:48:f6:f2:99:
                    b6:81:32:af:45:03:85:61:82:6e:a4:58:48:c4:fe:
                    4f:45:69:da:2d:b6:e7:9c:60:72:0a:c7:22:08:b1:
                    75:96:d7:ef:95:a1:d5:cf:df:67:5d:38:3b:00:20:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:3D:29:1F:E1:4C:38:DF:E8:2C:CF:E9:43:A7:DD:58:C4:91:58
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234322e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:22:01:8e:04:a0:28:86:34:11:66:e9:06:b0:22:fe:03:48:
         48:fa:fd:4e:eb:4c:d8:e2:2f:97:3f:58:a6:e4:3e:a9:81:b5:
         c3:a8:10:51:01:44:2e:a0:f3:86:cb:36:f5:ba:f5:2c:45:60:
         d7:6f:6b:96:fc:ea:19:c2:ad:00:a1:4d:0e:de:aa:6f:46:c9:
         82:1a:ca:10:43:1a:3c:99:35:9a:49:11:48:f6:b8:f9:88:46:
         45:54:59:75:7c:1e:56:c1:f6:38:da:78:6a:6e:b9:4f:3d:78:
         bc:a5:a3:80:df:c3:92:da:85:a6:e9:88:7b:0b:eb:67:6d:73:
         52:29:18:e6:b3:ba:79:dc:81:bc:6c:27:0c:9b:d3:e3:ab:04:
         19:04:79:d5:65:53:46:38:f3:78:80:1d:33:4a:5f:ba:ff:73:
         88:f8:83:dd:02:c0:94:91:48:93:20:9d:f0:54:d7:2d:5f:ed:
         1b:7f:08:ce:05:02:71:bd:87:f9:6d:d3:58:0c:d2:b2:74:51:
         83:fe:74:3f:78:9f:00:e5:a5:f7:30:ea:89:d9:25:d9:36:19:
         0d:32:b0:75:00:84:0c:75:53:b1:02:50:38:59:fd:e4:ee:80:
         85:65:74:2d:df:1c:52:91:e9:4b:23:26:57:66:8a:2c:fd:f0:
         c0:70:d4:95
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIV5zS2DG7xTUHB9zZPhHUJj+OwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNjA4MTUwMDU1MDJaFw0yNzA4MTQwMTAwMDJaMDMxMTAvBgNV
BAMTKEM1RDEzRDI5MUZFMTRDMzhERkU4MkNDRkU5NDNBN0RENThDNDkxNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKWCVohwlkDF380Ru4HOp8T6w
PnD0L2p6crZ2Q8mHcaF0eXaAhL/DjzLKXHbeLDhHisWvKE10UvgsTqG7i0EG8K3S
nvXuiUVVZxM6s/gVdoOPrYFlHcMiBicvemy9r6cu0FY7rILgLO3pInNdhNyA5CMx
fZlo/5IqSVCHHLWa+cFmL6XXNM/mf8Oe1dwilkBvvtnWfmlZIIO3o/9vhfYlCZ+8
pLW14F1AM1MeUkipwCGGb3D6pX0lDdvQNQ5CU8a2VMs5J2pg838MET1vSPbymbaB
Mq9FA4Vhgm6kWEjE/k9FadottuecYHIKxyIIsXWW1++VodXP32ddODsAIJ1XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxdE9KR/hTDjf6CzP6UOn3VjEkVgwHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMxMzkzMDJlMzEzMDM1MmUzMjM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmny
MA0GCSqGSIb3DQEBCwUAA4IBAQAXIgGOBKAohjQRZukGsCL+A0hI+v1O60zY4i+X
P1im5D6pgbXDqBBRAUQuoPOGyzb1uvUsRWDXb2uW/OoZwq0AoU0O3qpvRsmCGsoQ
Qxo8mTWaSRFI9rj5iEZFVFl1fB5WwfY42nhqbrlPPXi8paOA38OS2oWm6Yh7C+tn
bXNSKRjms7p53IG8bCcMm9PjqwQZBHnVZVNGOPN4gB0zSl+6/3OI+IPdAsCUkUiT
IJ3wVNctX+0bfwjOBQJxvYf5bdNYDNKydFGD/nQ/eJ8A5aX3MOqJ2SXZNhkNMrB1
AIQMdVOxAlA4Wf3k7oCFZXQt3xxSkelLIyZXZoos/fDAcNSV
-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:15 2026 by rpki-client