Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234362e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3234362e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          M22s8BgTJmDfTzRWz5+o2820DYnI3dHjxdhzzi+LfL0=
Subject key identifier:   9C:41:B0:09:DF:DB:E1:36:E7:62:20:7B:F4:A5:9B:91:DD:05:BC:C1
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       3768569484463E3397401CB4C53CE412B65D63B3
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234362e302f32342d3234203d3e203532323738.roa
Signing time:             Sat 15 Aug 2026 01:00:03 +0000
ROA not before:           Sat 15 Aug 2026 00:55:03 +0000
ROA not after:            Sat 14 Aug 2027 01:00:03 +0000
asID:                     52278
IP address blocks:        190.105.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:68:56:94:84:46:3e:33:97:40:1c:b4:c5:3c:e4:12:b6:5d:63:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Aug 15 00:55:03 2026 GMT
            Not After : Aug 14 01:00:03 2027 GMT
        Subject: CN=9C41B009DFDBE136E762207BF4A59B91DD05BCC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:27:4a:39:4f:1c:d0:fa:58:ee:a4:f8:70:ac:
                    be:43:e5:94:43:46:5c:38:f8:ae:76:ce:66:48:15:
                    79:18:c1:cf:ed:e4:a7:38:52:80:d4:94:2b:ce:de:
                    4c:02:e4:3c:c1:39:f2:3b:e1:a5:af:f6:36:50:ba:
                    98:1d:44:f3:04:23:a7:6e:23:9c:99:dc:7a:13:f0:
                    23:ce:44:cb:3f:27:6c:14:74:55:2b:36:86:ff:84:
                    76:de:19:12:f1:cf:2c:0a:ea:f3:cc:57:4a:ae:2c:
                    71:c1:62:8b:17:44:e5:5b:02:35:31:de:dd:cd:d6:
                    2e:51:d7:4b:f5:62:e3:6f:db:8f:02:fe:9d:f1:eb:
                    bd:72:50:7e:df:d6:22:e4:33:c5:1a:63:e2:03:c4:
                    f2:4e:b9:a0:29:a2:27:51:f5:23:51:74:b4:33:1d:
                    a4:a0:3f:aa:71:ef:1d:a5:9f:ee:01:c9:fc:12:46:
                    a1:4f:a0:47:d9:9b:fc:d9:da:dc:78:53:78:f9:62:
                    a5:4f:22:19:55:b1:c6:c4:6f:b1:e0:66:f5:e5:c9:
                    24:5c:31:77:43:1e:c8:13:c2:b8:71:44:0b:c1:d5:
                    7a:bb:69:3e:96:5e:85:eb:55:9e:74:37:c6:40:b5:
                    4f:1f:c7:a2:05:0e:92:10:9d:fc:b2:f4:21:e4:29:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:41:B0:09:DF:DB:E1:36:E7:62:20:7B:F4:A5:9B:91:DD:05:BC:C1
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234362e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:cd:5a:db:70:67:d8:ab:a2:03:c3:03:66:f5:4c:76:74:
         8b:17:83:31:35:3d:56:f5:49:53:44:c3:37:d8:6c:d6:ff:09:
         a0:97:5f:86:93:9a:f8:f2:40:1f:a2:c2:56:78:5d:bb:90:9e:
         94:ad:d2:32:a9:d2:aa:28:31:89:84:d1:8d:ba:96:73:b3:c7:
         35:db:e3:ca:a0:b4:cb:0d:14:b4:ce:d4:e0:56:d0:44:05:48:
         41:c7:e4:4a:c2:d8:9d:a1:fe:8b:6b:1d:b8:e4:c7:2c:2a:19:
         e0:0a:12:67:f5:6b:b9:76:de:61:02:1b:6a:48:6c:18:bf:ac:
         99:e3:eb:f4:8c:6e:3c:45:a9:fa:cc:5f:25:2a:09:49:a5:dc:
         77:8a:70:93:84:64:20:7e:b6:72:ee:59:89:43:d6:67:15:55:
         39:b8:aa:73:fe:49:5c:72:b9:a6:e5:ea:71:84:2a:e5:bc:e6:
         f6:5c:9f:d1:29:dc:3d:0c:6e:d8:21:8a:88:65:f1:c8:f5:1c:
         39:e8:d1:76:14:fe:19:a6:c5:ae:be:0e:13:47:c2:08:fb:94:
         f6:47:3a:05:77:8b:a2:f1:08:df:29:d9:33:72:a4:67:3a:0a:
         7f:e3:7f:8c:6e:f9:e3:82:8b:d1:20:7c:27:00:79:e3:df:a9:
         03:a6:8d:1f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUN2hWlIRGPjOXQBy0xTzkErZdY7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNjA4MTUwMDU1MDNaFw0yNzA4MTQwMTAwMDNaMDMxMTAvBgNV
BAMTKDlDNDFCMDA5REZEQkUxMzZFNzYyMjA3QkY0QTU5QjkxREQwNUJDQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0J0o5TxzQ+ljupPhwrL5D5ZRD
Rlw4+K52zmZIFXkYwc/t5Kc4UoDUlCvO3kwC5DzBOfI74aWv9jZQupgdRPMEI6du
I5yZ3HoT8CPORMs/J2wUdFUrNob/hHbeGRLxzywK6vPMV0quLHHBYosXROVbAjUx
3t3N1i5R10v1YuNv248C/p3x671yUH7f1iLkM8UaY+IDxPJOuaApoidR9SNRdLQz
HaSgP6px7x2ln+4ByfwSRqFPoEfZm/zZ2tx4U3j5YqVPIhlVscbEb7HgZvXlySRc
MXdDHsgTwrhxRAvB1Xq7aT6WXoXrVZ50N8ZAtU8fx6IFDpIQnfyy9CHkKQLtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnEGwCd/b4TbnYiB79KWbkd0FvMEwHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMxMzkzMDJlMzEzMDM1MmUzMjM0MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmn2
MA0GCSqGSIb3DQEBCwUAA4IBAQAiHM1a23Bn2KuiA8MDZvVMdnSLF4MxNT1W9UlT
RMM32GzW/wmgl1+Gk5r48kAfosJWeF27kJ6UrdIyqdKqKDGJhNGNupZzs8c12+PK
oLTLDRS0ztTgVtBEBUhBx+RKwtidof6Lax245McsKhngChJn9Wu5dt5hAhtqSGwY
v6yZ4+v0jG48Ran6zF8lKglJpdx3inCThGQgfrZy7lmJQ9ZnFVU5uKpz/klccrmm
5epxhCrlvOb2XJ/RKdw9DG7YIYqIZfHI9Rw56NF2FP4ZpsWuvg4TR8II+5T2RzoF
d4ui8QjfKdkzcqRnOgp/43+MbvnjgovRIHwnAHnj36kDpo0f
-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:18 2026 by rpki-client