Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa
File:                     3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier:          nBu6O/Aa+9IbratZTkssjSEn+efboI5JJ1BDwdm/K4c=
Subject key identifier:   E9:8A:9E:53:66:15:F1:59:E2:36:7A:C6:28:DB:A2:54:C9:23:35:79
Certificate issuer:       /CN=E6A820EE93E703A0216021C391FBFFC2B6A5C3E9
Certificate serial:       1DA321B1138698C469BEB54C9692CD5EE6856792
Authority key identifier: E6:A8:20:EE:93:E7:03:A0:21:60:21:C3:91:FB:FF:C2:B6:A5:C3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa
Signing time:             Fri 28 Aug 2026 12:32:50 +0000
ROA not before:           Fri 28 Aug 2026 12:27:50 +0000
ROA not after:            Fri 27 Aug 2027 12:32:50 +0000
asID:                     30058
IP address blocks:        190.105.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 21:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a3:21:b1:13:86:98:c4:69:be:b5:4c:96:92:cd:5e:e6:85:67:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A820EE93E703A0216021C391FBFFC2B6A5C3E9
        Validity
            Not Before: Aug 28 12:27:50 2026 GMT
            Not After : Aug 27 12:32:50 2027 GMT
        Subject: CN=E98A9E536615F159E2367AC628DBA254C9233579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:89:e0:26:96:57:4f:c3:e5:d0:7b:c2:be:
                    b0:d6:fd:bd:b2:18:96:4b:ec:c4:07:e3:d8:46:12:
                    2a:bc:f9:c3:32:d8:8b:bb:23:81:3d:d2:0f:96:e6:
                    96:6d:b4:10:95:f8:b1:77:09:47:cb:4d:e0:65:2e:
                    51:a8:6d:ae:d8:2a:7b:cc:f3:8b:3d:92:92:54:86:
                    a9:ab:90:df:8b:57:f2:f8:e8:25:35:64:5d:37:1d:
                    22:53:be:1d:72:b2:28:de:2c:14:90:14:33:e8:ae:
                    da:20:34:73:cd:b9:d4:8b:94:5e:b8:66:8e:0c:d8:
                    bb:d1:af:f5:59:af:ff:ab:e5:f2:f4:59:cc:26:58:
                    86:ea:05:d5:46:c3:0e:0f:ec:4c:df:c6:9b:d3:1c:
                    e9:6d:45:8b:bf:18:4d:f1:7b:ba:44:f9:39:96:af:
                    a4:f6:9c:70:56:df:3c:56:58:66:06:5d:28:e6:65:
                    ad:7e:ce:4d:59:d6:5b:02:30:03:d5:a5:0b:c1:3f:
                    f9:01:11:b5:f6:e8:64:09:50:f9:44:34:eb:87:99:
                    cc:e6:99:6a:d5:b1:e2:5a:3f:8b:8a:22:79:aa:30:
                    f1:66:a7:d1:a8:aa:e2:6d:5c:7c:4f:44:5a:8c:e2:
                    8e:44:f3:ef:6d:2c:03:f1:16:d2:7e:c9:42:eb:a3:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8A:9E:53:66:15:F1:59:E2:36:7A:C6:28:DB:A2:54:C9:23:35:79
            X509v3 Authority Key Identifier:
                keyid:E6:A8:20:EE:93:E7:03:A0:21:60:21:C3:91:FB:FF:C2:B6:A5:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:94:3b:5a:6d:15:44:35:54:d7:91:96:4a:94:a3:06:b1:9b:
         c6:60:4b:56:e8:7c:c1:ed:69:c8:9f:e0:90:18:fe:f9:48:b3:
         6a:f0:fa:98:49:25:ee:8e:44:15:07:a8:d7:d5:51:65:68:4f:
         da:ef:ed:b1:9d:44:53:86:e1:5f:7b:8f:b7:15:e4:5d:e6:ae:
         fc:e2:31:39:f6:36:73:4a:dc:c7:c5:fe:6e:8d:e5:05:88:a9:
         56:eb:52:50:d3:20:40:c2:f6:57:59:dc:c5:73:62:52:55:24:
         ac:44:7b:d5:65:d3:40:a7:f9:42:61:0a:af:5a:43:31:69:7d:
         5a:59:49:64:cc:31:4a:dd:95:bd:74:1f:2a:81:0a:c3:3e:b9:
         e7:76:99:64:61:4f:6a:27:7a:c6:10:b7:8d:8d:97:15:84:f5:
         3c:ac:bb:60:c6:80:d8:ab:dd:0e:1e:29:fe:b9:9a:42:d2:6e:
         ca:fd:ce:5c:45:7c:4e:21:16:0c:93:b9:36:84:bf:fd:4b:e8:
         53:c8:a2:d1:88:e9:62:e7:64:7a:5a:8b:0f:5c:51:bb:20:c9:
         2b:2f:7d:10:28:e5:78:d0:c3:46:a0:35:21:76:f1:ab:1a:ce:
         55:a5:98:dc:96:6a:1d:16:49:c7:a9:70:ca:e8:31:e0:b8:0b:
         ff:80:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:45:13 2026 by rpki-client