Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa
File:                     3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa (raw, json)
Hash identifier:          Tbw0ftbp0bARfhja3WUGSbxjw4aLyi07K7kIxYCExB0=
Subject key identifier:   E4:5F:49:CD:FC:63:18:1E:0E:7E:6F:1B:E3:EC:BA:53:D3:51:2E:32
Certificate issuer:       /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial:       3A1CD9C80A25C60916718D4625C5B45D3576AF76
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa
Signing time:             Wed 12 Aug 2026 16:25:10 +0000
ROA not before:           Wed 12 Aug 2026 16:20:10 +0000
ROA not after:            Wed 11 Aug 2027 16:25:10 +0000
asID:                     28107
IP address blocks:        190.124.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 02:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1c:d9:c8:0a:25:c6:09:16:71:8d:46:25:c5:b4:5d:35:76:af:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
        Validity
            Not Before: Aug 12 16:20:10 2026 GMT
            Not After : Aug 11 16:25:10 2027 GMT
        Subject: CN=E45F49CDFC63181E0E7E6F1BE3ECBA53D3512E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:55:e3:fb:38:18:c1:fe:44:31:3c:06:6b:
                    bf:31:15:67:43:0c:14:6c:87:70:92:66:31:dd:8c:
                    34:ca:ff:95:31:fd:ba:1d:04:61:9a:04:90:57:ce:
                    9c:41:68:c6:15:b7:b5:c9:35:03:0b:83:40:42:41:
                    7c:14:89:a2:87:41:8b:38:26:9f:7c:f4:03:78:31:
                    9e:87:7e:c2:51:5e:af:c7:1b:66:62:e8:46:8d:06:
                    b4:28:61:8f:e5:28:e9:54:49:c6:6a:9c:0d:d1:c8:
                    6c:b5:a6:11:9f:67:50:30:66:95:8b:30:e5:33:1b:
                    e0:18:05:02:8d:2b:96:1a:54:80:c8:08:0d:fc:92:
                    9c:fc:56:7f:22:48:67:95:24:ce:1c:2d:9a:2f:be:
                    40:44:d1:0d:e2:56:df:01:51:8d:f5:a5:78:e6:31:
                    31:26:da:b2:5d:34:fe:cd:33:42:0a:f9:10:43:56:
                    da:02:f7:65:f3:9e:e3:e1:c6:fd:a6:37:9b:a3:ca:
                    f4:85:56:ac:11:2f:75:d3:1b:fc:93:37:47:48:29:
                    bd:af:41:92:c0:24:76:f7:ad:68:5d:3d:13:0e:3c:
                    fe:e4:96:5e:3f:02:22:6b:f3:b8:70:39:1d:e5:57:
                    d7:a9:a6:db:4c:80:5a:9c:21:bb:e3:a8:fd:56:43:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:49:CD:FC:63:18:1E:0E:7E:6F:1B:E3:EC:BA:53:D3:51:2E:32
            X509v3 Authority Key Identifier:
                keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:2a:48:bd:17:62:70:c8:5f:ec:29:e4:92:47:22:a6:7d:
         b1:88:8c:23:fc:ef:9b:e3:c6:61:f7:10:a9:65:69:ea:cd:24:
         41:35:58:5c:2c:c2:a0:75:00:88:33:f4:04:76:9d:83:ec:fa:
         69:37:18:b6:3d:a6:7e:e0:fc:0d:7f:46:f1:f5:60:f7:41:29:
         5c:5d:0c:02:e8:c2:11:e8:3d:b6:d1:79:3b:0a:fb:39:ee:93:
         30:4f:01:16:bf:83:3b:71:c5:c4:88:9c:4c:11:16:11:67:3f:
         12:a5:43:6f:bf:7f:b5:f0:04:ef:88:f1:0e:69:e9:c8:0a:54:
         92:2b:93:bd:76:7b:b0:aa:4c:61:02:f6:02:70:5e:ad:5f:ad:
         34:f6:72:e5:5b:6a:7b:bc:a1:0d:cf:75:45:df:3b:d8:fc:64:
         95:c7:61:ff:63:d9:85:33:be:04:a9:3f:dd:29:c9:50:c1:7d:
         87:4c:de:9f:da:08:4f:5a:8a:79:c1:72:a4:48:b1:22:bc:00:
         1c:f5:dd:fb:bd:97:7a:0d:21:d3:65:0c:92:ce:2b:fc:df:b6:
         7a:39:4c:4c:7a:b9:e7:b4:44:f0:31:56:4e:72:25:20:70:8f:
         2f:74:20:51:2b:45:f5:8e:1d:fc:a0:e0:a1:2c:a8:aa:c5:22:
         a8:a3:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 18:18:42 2026 by rpki-client