Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234332e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3234332e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          O1IlkmchGD/a4jpLhY8V2po3o2CrKeovA1gWVtV68pQ=
Subject key identifier:   1E:83:A5:45:CA:B5:19:F8:C9:09:C7:2B:F6:08:A9:83:86:CF:16:A9
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       38FB367826ACAC083386C0054BFAB6C710E7E82E
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234332e302f32342d3234203d3e203532323738.roa
Signing time:             Sat 15 Aug 2026 01:00:00 +0000
ROA not before:           Sat 15 Aug 2026 00:55:00 +0000
ROA not after:            Sat 14 Aug 2027 01:00:00 +0000
asID:                     52278
IP address blocks:        190.105.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:36:78:26:ac:ac:08:33:86:c0:05:4b:fa:b6:c7:10:e7:e8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Aug 15 00:55:00 2026 GMT
            Not After : Aug 14 01:00:00 2027 GMT
        Subject: CN=1E83A545CAB519F8C909C72BF608A98386CF16A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:98:79:ae:b8:32:88:fd:f3:19:2c:d4:cc:
                    ee:33:a4:ad:a9:bd:dc:d4:10:7e:dd:16:a3:42:23:
                    8a:48:fa:09:94:14:7a:b9:b5:92:15:31:6f:30:a2:
                    28:56:50:a2:cc:56:6f:bf:f0:0c:99:d8:89:34:02:
                    db:5d:30:78:e8:27:5e:fe:3b:7e:90:e6:97:d1:e2:
                    4d:d7:41:fb:08:84:1a:e1:f9:f6:32:c0:e8:84:97:
                    3c:dc:cd:06:c4:e1:28:d3:85:74:24:0e:85:e7:e2:
                    d5:5e:76:06:ca:a5:61:d3:1e:6c:cf:7e:ee:d5:43:
                    8e:3c:f4:2e:72:7d:5f:31:f3:cc:8f:bc:0f:d3:13:
                    f1:e6:1a:28:2c:e9:51:d1:15:fd:05:83:4d:2c:a6:
                    33:a5:ea:29:21:7a:9d:8c:c2:00:41:31:7f:30:36:
                    de:ef:fd:76:9b:82:29:1d:86:ac:c1:84:fa:86:f5:
                    0c:a2:51:5c:79:3b:b7:a2:a8:9e:8a:4c:0e:62:a8:
                    b3:62:20:1b:26:75:5f:e4:c3:3a:ca:30:c3:8d:49:
                    a3:19:5d:8d:fa:09:3b:30:82:f1:79:ee:09:2c:83:
                    5a:66:ca:67:3d:35:99:de:17:16:4e:e4:c5:3e:71:
                    7f:ac:8b:26:ca:2d:65:5b:58:95:7f:a7:ba:ef:76:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:A5:45:CA:B5:19:F8:C9:09:C7:2B:F6:08:A9:83:86:CF:16:A9
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234332e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:7b:cf:46:d5:27:48:55:95:f2:3b:65:8c:75:94:ee:b5:
         1f:0f:1a:ae:00:a3:41:6e:95:db:73:ae:d4:ec:83:78:28:04:
         0c:98:50:bf:b3:4d:03:31:ec:13:2c:8d:72:ec:46:0d:5a:76:
         98:cc:f1:12:aa:78:d1:94:03:d6:87:fa:3c:a9:6f:d6:57:61:
         d9:ef:ca:44:82:c5:b3:e8:3e:5d:29:03:08:62:ba:a2:e0:67:
         d8:5a:e3:c8:cb:c4:3b:e3:0a:54:62:f2:74:e3:99:09:b6:5c:
         2d:9a:89:6e:36:34:ba:c5:67:7f:8c:21:9b:9b:54:e8:aa:c7:
         39:e3:fa:2d:64:e9:5b:6d:da:3a:75:23:2e:c0:83:da:a5:91:
         38:78:73:79:0d:7f:32:b0:6e:30:0c:34:d2:aa:c4:fb:b2:d7:
         12:99:2d:5f:53:81:4c:6e:20:c6:fd:b8:4e:dc:cb:57:2b:01:
         65:0f:ea:d3:08:08:33:20:df:c6:df:cb:b7:ad:db:65:c4:1c:
         f3:a2:6b:1f:ca:44:42:b9:ac:54:56:f6:8a:1e:77:41:fe:15:
         15:b4:1b:f3:ef:56:29:73:08:cc:67:7a:04:bd:95:48:16:bc:
         91:6f:0d:fa:ce:1f:7a:5e:9e:fa:0b:a1:b3:d5:a1:d8:cd:6e:
         bb:e5:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:17 2026 by rpki-client