Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          Zk03nRPOmGAhCpD1HJGkAzpJDGq2vt1JkcOBsIiHVDM=
Subject key identifier:   75:BB:EA:A9:7F:B5:77:3D:AC:9D:8D:01:4E:D1:7C:84:E9:A8:73:43
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       769939A7B25FE4051ECAE63C246FCFE3FF079AFA
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 06 Jan 2026 19:11:51 +0000
ROA not before:           Tue 06 Jan 2026 19:06:51 +0000
ROA not after:            Tue 05 Jan 2027 19:11:51 +0000
asID:                     52330
IP address blocks:        190.184.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 14:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:99:39:a7:b2:5f:e4:05:1e:ca:e6:3c:24:6f:cf:e3:ff:07:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Jan  6 19:06:51 2026 GMT
            Not After : Jan  5 19:11:51 2027 GMT
        Subject: CN=75BBEAA97FB5773DAC9D8D014ED17C84E9A87343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:15:a6:bf:fc:8b:cd:9e:54:3f:fc:88:a5:
                    64:4a:cc:51:c6:56:1f:7f:bb:5a:92:10:fc:85:ae:
                    f7:42:39:1d:ba:b9:be:14:ef:1e:c8:d1:78:00:69:
                    e6:53:9d:6f:8c:f2:d1:46:35:3a:12:75:bd:0f:92:
                    c2:13:2d:6e:37:f5:95:bb:6c:65:d3:b2:9f:aa:98:
                    08:00:4c:d0:e7:4c:9b:dd:3d:7b:72:a8:30:41:ae:
                    9f:ea:ae:60:8e:3b:56:5c:6e:a9:6c:92:c4:53:14:
                    57:1f:d2:3e:39:47:91:82:56:e2:c6:9d:e7:47:88:
                    2e:44:70:9e:e2:6b:56:ff:d7:16:29:1f:eb:a0:be:
                    a4:fb:34:ab:bb:1a:ef:22:5c:59:22:be:67:b0:cb:
                    66:21:fc:77:89:0e:5b:e0:fe:ea:a6:a8:9b:2a:a7:
                    da:59:71:a0:2b:20:60:df:0b:0e:01:b4:36:17:5b:
                    73:ff:f5:d8:d6:c6:58:1c:d8:b9:cc:18:e4:b8:dc:
                    10:72:42:0e:d4:39:9e:51:cc:c3:50:b8:72:61:3f:
                    35:56:56:ed:81:53:8e:58:4b:1d:79:63:42:ad:33:
                    08:e2:dc:7b:dc:e3:ca:c4:7e:5a:1f:cf:5b:ce:2d:
                    f4:40:5e:40:0d:96:0f:3a:4d:63:76:85:21:0d:e6:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:EA:A9:7F:B5:77:3D:AC:9D:8D:01:4E:D1:7C:84:E9:A8:73:43
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:b4:69:b8:a1:a4:3c:ba:66:d8:4e:67:5e:e1:c4:0f:7e:
         53:47:b3:20:dc:44:a5:78:54:31:17:fa:b4:1e:be:28:63:31:
         b4:b5:b5:7f:47:4b:ab:a5:74:97:ca:8d:a1:ac:81:fa:4f:71:
         e9:13:1c:36:6b:79:25:d8:d4:9f:76:4e:ab:01:77:3c:e9:fc:
         fe:08:60:8d:db:20:63:92:e7:19:3c:83:77:fe:72:c3:38:d4:
         2b:5b:1e:d8:41:df:42:41:c6:1f:5a:26:32:f9:f5:e6:0c:c8:
         53:52:c8:54:4d:57:af:0c:0d:99:6e:f9:79:cc:5d:e6:20:a4:
         8e:72:e2:23:e9:e9:02:6b:e5:ad:1c:86:be:2e:2f:01:0f:1e:
         91:fd:6c:ae:3d:57:02:fd:8d:f5:a0:8d:5b:7f:58:0e:8b:5e:
         32:1b:e9:37:41:77:70:37:43:b5:cc:8a:f9:5d:d5:fa:ff:8b:
         ad:4a:a1:e5:ba:22:5a:5b:fc:25:d0:5a:2f:15:a3:42:e5:c8:
         5d:13:2c:a4:6b:7b:0d:6c:48:64:1d:5e:96:59:bc:87:62:15:
         1d:8f:e8:1b:04:d0:17:95:c1:df:1b:85:b0:ce:5c:0f:38:40:
         a7:04:55:02:3e:58:52:8d:de:18:a9:3e:41:e5:4a:0a:c0:a4:
         06:88:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 15:44:54 2026 by rpki-client