Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa
File:                     3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa (raw, json)
Hash identifier:          O2e4T0nACUvFU2fzf04MQFxG9URH6+iHvcllv7sPR+k=
Subject key identifier:   1A:2E:0C:F0:D7:6D:EF:8B:2F:BB:03:B3:15:00:CD:3B:4B:28:E8:E0
Certificate issuer:       /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Certificate serial:       625A0696C68EC9BF5ECE6000800DD234E5AA90A6
Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa
Signing time:             Wed 29 Jul 2026 14:55:27 +0000
ROA not before:           Wed 29 Jul 2026 14:50:27 +0000
ROA not after:            Wed 28 Jul 2027 14:55:27 +0000
asID:                     271813
IP address blocks:        190.123.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Aug 2026 12:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5a:06:96:c6:8e:c9:bf:5e:ce:60:00:80:0d:d2:34:e5:aa:90:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
        Validity
            Not Before: Jul 29 14:50:27 2026 GMT
            Not After : Jul 28 14:55:27 2027 GMT
        Subject: CN=1A2E0CF0D76DEF8B2FBB03B31500CD3B4B28E8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:3e:03:bc:3d:c1:75:4a:c6:0b:ea:52:1b:
                    5b:c2:23:ce:5a:63:9a:f6:6e:f2:cf:4b:b3:ff:e3:
                    46:b8:cd:0b:6b:a7:42:47:8f:e4:a7:77:3d:78:6f:
                    be:8e:77:92:6b:19:d3:f6:e3:02:60:00:e1:eb:7d:
                    97:9c:47:9a:f1:05:c6:3d:45:7e:ab:f0:8e:cb:27:
                    b2:cc:1a:61:ee:2f:73:88:2e:d4:73:a7:52:86:68:
                    d1:0f:8c:32:3f:d0:bb:b0:1d:6a:2c:b7:44:73:1d:
                    59:52:0e:11:4f:98:1f:ff:30:26:cd:b9:11:50:66:
                    bd:87:7c:95:d9:5a:9a:89:07:35:2a:e7:5f:de:17:
                    a4:87:2b:af:d3:a8:88:a9:c6:59:64:b8:98:69:4e:
                    8d:3d:46:d9:69:7b:40:60:a7:1c:2d:ac:8f:31:89:
                    48:3a:9e:67:73:75:bf:4c:3e:17:ad:aa:e9:05:3b:
                    83:f2:a5:a0:98:16:6b:e5:b6:57:62:76:d6:b5:e2:
                    13:8b:3c:e7:06:f6:c5:6f:4f:ff:b0:4b:9f:96:95:
                    86:92:b2:85:65:ac:e1:38:29:5e:be:d1:59:4a:19:
                    ac:f0:3e:e2:31:fd:eb:4f:e3:e5:80:1c:76:3b:c7:
                    67:34:f0:e3:e9:cf:17:6e:57:ff:a0:f7:2b:6b:43:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:0C:F0:D7:6D:EF:8B:2F:BB:03:B3:15:00:CD:3B:4B:28:E8:E0
            X509v3 Authority Key Identifier:
                keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:f7:37:86:4e:78:5f:a9:13:2a:81:82:51:b8:ca:f5:b2:
         76:33:62:8f:cb:5c:98:e2:68:1c:08:9d:36:31:9c:6b:25:68:
         5b:23:d4:14:fb:f3:a0:5f:a8:72:57:82:af:98:c7:67:da:9b:
         95:5c:71:72:e7:0b:f5:fa:05:6b:a3:e2:01:57:d1:b2:59:f1:
         bd:44:64:a8:fe:d3:3d:d1:33:82:7c:ec:31:43:e8:5d:8e:d9:
         06:84:d4:57:77:1d:01:a3:86:4f:42:f4:5f:cd:73:c1:d6:2b:
         f2:4b:aa:4c:67:f5:78:53:22:7d:67:dc:85:17:37:4d:2e:e7:
         fc:ad:05:91:a5:d8:b8:c9:5b:86:ec:d1:41:ca:d8:7b:89:ae:
         23:b4:47:3d:15:46:65:24:d2:84:82:8d:3b:10:e2:ef:3c:ce:
         0c:96:a6:df:92:e9:0a:c8:a0:1b:c9:00:74:4f:38:04:35:7d:
         80:b4:aa:5a:7f:b7:0d:bb:f2:3d:24:3b:b3:ed:8f:96:7f:31:
         ce:a2:df:5f:b1:23:88:41:74:10:4f:e5:21:a2:3b:d4:44:b6:
         b9:ce:f0:05:67:62:4b:3d:43:c7:43:fd:40:6c:1a:b9:b0:ca:
         6e:5e:63:d3:dc:04:6f:b3:bc:1d:84:b3:92:da:e0:cd:12:1d:
         c9:c6:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 07:55:58 2026 by rpki-client