Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3234382e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          SfVaiSYKHrK0qXrf6bdmda5RLRowpa2Hy877WtVaiOI=
Subject key identifier:   AC:6D:6C:25:68:D2:00:1E:E3:B7:11:26:A0:47:98:BD:CA:EB:A6:24
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       0B82741E5A5808FC3174B1CD1CCB8B87900C9D32
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32342d3234203d3e203532323738.roa
Signing time:             Sat 15 Aug 2026 01:00:01 +0000
ROA not before:           Sat 15 Aug 2026 00:55:01 +0000
ROA not after:            Sat 14 Aug 2027 01:00:01 +0000
asID:                     52278
IP address blocks:        190.105.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:74:1e:5a:58:08:fc:31:74:b1:cd:1c:cb:8b:87:90:0c:9d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Aug 15 00:55:01 2026 GMT
            Not After : Aug 14 01:00:01 2027 GMT
        Subject: CN=AC6D6C2568D2001EE3B71126A04798BDCAEBA624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:73:7e:6b:f4:05:51:23:29:f5:55:e6:34:
                    68:8a:4a:e9:19:c6:50:f7:97:5c:4f:38:e0:dc:07:
                    f8:67:39:65:17:4d:81:36:0f:4d:2f:05:fb:bd:98:
                    cf:4a:07:a8:21:ad:04:e4:ac:f5:c5:29:16:f7:6b:
                    4a:d5:e2:26:e6:6c:d7:fa:17:10:27:78:2f:3f:f3:
                    d4:af:b1:4f:2d:25:ab:1c:6b:b5:ad:5c:9a:31:16:
                    d2:7d:09:1b:fb:27:d1:d7:0b:7c:16:5a:96:5c:b6:
                    de:ee:3a:27:c4:98:26:42:4e:af:6b:e9:72:f3:4f:
                    0b:02:3a:f9:f7:2c:64:ca:dd:22:22:98:d3:a7:8f:
                    53:e5:bd:35:1d:d9:b1:68:b6:d2:fd:bf:70:95:57:
                    d6:fb:20:18:e6:d2:e3:a0:63:61:de:13:6e:cd:e9:
                    0d:72:0e:e7:56:34:fa:2b:63:a0:4b:a1:c3:39:ae:
                    78:57:f1:18:23:a4:de:ee:de:21:dd:33:03:d0:38:
                    c2:ef:88:99:53:aa:ca:db:80:b9:8b:76:69:ee:a8:
                    74:4d:de:d3:7e:24:b0:6d:39:dc:7c:47:16:98:70:
                    95:8b:e1:4f:88:20:f5:00:27:c4:58:a2:41:39:1d:
                    f4:b2:36:6c:95:00:35:f5:9a:6c:d8:fa:a9:bd:96:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6D:6C:25:68:D2:00:1E:E3:B7:11:26:A0:47:98:BD:CA:EB:A6:24
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b7:21:50:e5:e1:9f:be:ab:52:20:94:14:1a:f1:12:da:be:
         60:58:78:65:96:47:f4:74:06:05:ed:37:f2:4a:3e:9a:39:d0:
         3f:9c:54:bf:13:70:82:2d:d6:1f:5a:65:c6:63:18:62:64:e9:
         e3:e7:cb:a4:e7:d3:88:d1:76:e4:d4:ae:1c:a6:6f:c7:2e:eb:
         8c:b4:c9:dd:c9:96:c3:55:5b:68:ca:3a:6e:b8:2d:cc:a5:13:
         3a:2e:79:84:8e:2c:e9:8a:7a:38:36:5a:b1:99:44:32:c7:09:
         f8:49:89:ab:53:7f:a0:83:42:01:3d:c2:4f:3e:90:2b:81:ff:
         6e:ba:f4:83:ec:4c:f5:3d:3a:97:7c:4a:11:de:f9:d3:60:13:
         0b:2a:f0:61:42:0c:ae:e2:ad:8e:88:8a:d3:b2:34:a9:b4:70:
         b4:ee:a1:b1:f5:94:9c:73:57:b1:4f:ac:c6:a6:43:ee:fb:b5:
         69:6b:86:9e:9d:d2:d0:fc:a8:90:8f:f8:35:3c:9f:be:71:0c:
         fb:ff:ff:2d:71:83:7c:a0:7a:30:35:60:9e:e0:e6:b4:f8:a4:
         76:d3:4f:11:10:9a:9b:d8:17:bf:e2:9a:9c:5a:78:df:43:da:
         e7:57:d6:e2:15:79:76:87:e3:2f:8f:e4:8b:28:c2:52:3d:da:
         d2:cc:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:19 2026 by rpki-client