Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132302e302f32342d3234203d3e203239323836.roa
File:                     3139302e35322e3132302e302f32342d3234203d3e203239323836.roa (raw, json)
Hash identifier:          37aQNVmltNdB4U0xuUyYzRMhsNrte7ASOmH5+7iQ6Oo=
Subject key identifier:   6E:7D:C6:A7:AF:43:1A:CD:48:62:B1:53:33:98:84:AA:B6:65:8E:A6
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       68F3037FC2305FEEC0A33E4F62B234002E866180
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132302e302f32342d3234203d3e203239323836.roa
Signing time:             Tue 10 Mar 2026 16:55:00 +0000
ROA not before:           Tue 10 Mar 2026 16:50:00 +0000
ROA not after:            Tue 09 Mar 2027 16:55:00 +0000
asID:                     29286
IP address blocks:        190.52.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 00:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f3:03:7f:c2:30:5f:ee:c0:a3:3e:4f:62:b2:34:00:2e:86:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 10 16:50:00 2026 GMT
            Not After : Mar  9 16:55:00 2027 GMT
        Subject: CN=6E7DC6A7AF431ACD4862B153339884AAB6658EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:00:a6:3c:20:3a:9f:ec:2b:2c:60:fc:1d:
                    cf:66:a6:3b:11:55:4d:01:a2:dd:43:3b:0a:36:96:
                    cb:b4:7a:af:88:f3:fc:ea:91:f3:70:cc:77:07:15:
                    b5:2c:9d:21:3c:2f:eb:8a:d3:26:7d:f8:ec:7d:c5:
                    24:b3:23:56:d6:b0:af:ed:e6:02:08:75:da:49:b2:
                    fa:4f:69:f0:64:08:0e:81:45:7d:71:06:57:15:f2:
                    76:e5:f0:96:f3:7e:7d:16:5f:ab:df:bc:f6:1f:88:
                    ad:b6:ce:74:d9:bb:99:ef:67:c1:82:9e:7b:a0:04:
                    ab:fd:de:0f:a0:06:01:41:d5:66:5e:77:b6:42:30:
                    76:ee:fe:52:66:70:f1:0a:02:fe:53:52:14:e6:2c:
                    fe:22:17:d9:1c:bf:6f:99:e6:f1:46:88:f3:e0:be:
                    c0:23:a7:00:0e:a5:5d:9c:1c:37:53:f4:b1:7d:fd:
                    0e:63:b5:aa:be:60:3c:f1:a0:80:0a:f0:8d:b8:fd:
                    96:ba:13:a1:bf:44:c4:29:52:c7:36:58:f9:9b:db:
                    2d:83:f6:b5:25:17:b2:23:95:07:11:37:0c:c7:47:
                    eb:c9:fb:c5:d4:98:19:ee:23:40:27:f9:29:d3:76:
                    a1:3d:96:4d:09:8a:59:89:27:08:6e:5e:16:ef:cd:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7D:C6:A7:AF:43:1A:CD:48:62:B1:53:33:98:84:AA:B6:65:8E:A6
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132302e302f32342d3234203d3e203239323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a1:0b:a0:01:0b:d7:59:c4:a2:b8:2d:f9:a0:21:cd:12:9f:
         1d:64:2b:07:d2:3b:58:ab:cc:c3:20:98:b8:05:b7:81:9c:71:
         10:35:89:31:38:eb:cc:c9:ac:38:e4:e2:fb:4a:08:bb:5c:fc:
         48:aa:ca:fe:d2:28:0a:8a:39:a2:d1:c3:b0:9e:81:aa:ef:a4:
         82:4e:27:45:9c:87:7b:17:5b:80:9e:70:ea:5b:a8:6a:eb:b8:
         12:34:3e:cf:a9:1d:50:4e:e2:17:3b:9f:b4:72:60:03:35:81:
         ac:87:9b:93:8b:d5:11:30:81:ff:70:1c:d3:4f:49:9c:51:a8:
         4c:3f:c1:a5:9b:24:06:6b:39:41:f2:14:3e:16:63:49:76:62:
         dc:ff:b5:c2:6e:3e:90:c5:d0:7f:f9:c6:17:94:59:0d:7c:f0:
         f4:2a:96:8f:c9:5a:25:81:4b:a6:83:b4:1f:97:2b:dd:45:7e:
         a7:80:be:f8:e8:98:f0:b8:c4:80:ba:a9:b1:28:79:9e:4f:cc:
         e7:5d:9d:2b:60:b0:27:8c:47:98:64:6e:1e:70:8a:62:9a:65:
         d2:dd:93:5c:81:83:90:b1:a6:b1:22:57:84:e3:96:17:da:7e:
         de:f8:45:e5:c6:11:7c:31:20:63:8a:0e:3e:ec:a2:a7:66:7b:
         a8:6e:75:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaPMDf8IwX+7Aoz5PYrI0AC6GYYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNjAzMTAxNjUwMDBaFw0yNzAzMDkxNjU1MDBaMDMxMTAvBgNV
BAMTKDZFN0RDNkE3QUY0MzFBQ0Q0ODYyQjE1MzMzOTg4NEFBQjY2NThFQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4QCmPCA6n+wrLGD8Hc9mpjsR
VU0Bot1DOwo2lsu0eq+I8/zqkfNwzHcHFbUsnSE8L+uK0yZ9+Ox9xSSzI1bWsK/t
5gIIddpJsvpPafBkCA6BRX1xBlcV8nbl8Jbzfn0WX6vfvPYfiK22znTZu5nvZ8GC
nnugBKv93g+gBgFB1WZed7ZCMHbu/lJmcPEKAv5TUhTmLP4iF9kcv2+Z5vFGiPPg
vsAjpwAOpV2cHDdT9LF9/Q5jtaq+YDzxoIAK8I24/Za6E6G/RMQpUsc2WPmb2y2D
9rUlF7IjlQcRNwzHR+vJ+8XUmBnuI0An+SnTdqE9lk0JilmJJwhuXhbvzWY5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbn3Gp69DGs1IYrFTM5iEqrZljqYwHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzkzMDJlMzUzMjJlMzEzMjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMyMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL40eDAN
BgkqhkiG9w0BAQsFAAOCAQEAGqELoAEL11nEorgt+aAhzRKfHWQrB9I7WKvMwyCY
uAW3gZxxEDWJMTjrzMmsOOTi+0oIu1z8SKrK/tIoCoo5otHDsJ6Bqu+kgk4nRZyH
exdbgJ5w6luoauu4EjQ+z6kdUE7iFzuftHJgAzWBrIebk4vVETCB/3Ac009JnFGo
TD/BpZskBms5QfIUPhZjSXZi3P+1wm4+kMXQf/nGF5RZDXzw9CqWj8laJYFLpoO0
H5cr3UV+p4C++OiY8LjEgLqpsSh5nk/M512dK2CwJ4xHmGRuHnCKYppl0t2TXIGD
kLGmsSJXhOOWF9p+3vhF5cYRfDEgY4oOPuyip2Z7qG51nw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:40:41 2026 by rpki-client