Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa
File:                     3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          YabiSsEnL6LHhJGvn2Cuv0l6yK04+2aTmuhQgcRhS3A=
Subject key identifier:   3E:5E:56:59:23:CD:40:D6:F5:34:6D:F8:84:FF:1E:BB:95:11:FE:EA
Certificate issuer:       /CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
Certificate serial:       5B4D07F6C24A1EFC0BAF1B72DA57DD5B825F7E7D
Authority key identifier: 7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa
Signing time:             Fri 12 Sep 2025 17:44:43 +0000
ROA not before:           Fri 12 Sep 2025 17:39:43 +0000
ROA not after:            Fri 11 Sep 2026 17:44:43 +0000
asID:                     198949
IP address blocks:        190.103.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 10:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4d:07:f6:c2:4a:1e:fc:0b:af:1b:72:da:57:dd:5b:82:5f:7e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
        Validity
            Not Before: Sep 12 17:39:43 2025 GMT
            Not After : Sep 11 17:44:43 2026 GMT
        Subject: CN=3E5E565923CD40D6F5346DF884FF1EBB9511FEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ff:ae:28:6e:9b:16:d9:c7:fa:3e:c8:1c:80:
                    bd:99:80:69:47:69:6f:69:84:dd:21:ea:7a:e1:2f:
                    a1:95:bc:60:52:b6:64:47:92:3f:c0:79:39:b7:97:
                    c6:1f:86:65:d1:43:6e:8c:2f:15:5c:a3:c1:19:30:
                    35:70:61:77:bb:9c:94:34:05:6a:d2:b1:1b:32:0f:
                    a3:38:97:4d:3c:e1:43:be:33:62:ba:3a:05:de:65:
                    98:b2:a4:6e:9b:8a:da:31:b7:b9:fd:f2:44:a1:d7:
                    35:e0:9e:ad:f1:80:53:7c:75:23:66:9c:44:3d:79:
                    74:53:69:9b:0e:58:a5:e4:6c:2a:ae:7b:b6:5e:c9:
                    5f:50:ea:17:6c:68:a5:46:48:23:91:4b:ec:25:dd:
                    05:fa:3f:28:ce:2e:e4:6d:bd:7d:54:a6:96:79:19:
                    0f:8a:f5:fc:e9:19:9a:89:90:fa:25:7a:e1:58:61:
                    a6:f4:de:c6:51:ec:58:45:97:13:99:27:7a:a6:f6:
                    3f:48:22:f6:85:38:a0:22:fc:91:05:b9:6f:f8:f1:
                    d9:d4:76:9b:0a:85:18:8c:87:0d:57:4c:63:a4:27:
                    b6:de:c3:db:be:32:2e:e4:ff:f2:97:bf:4e:19:5d:
                    7b:84:51:82:ae:ab:e7:bc:89:fa:26:9e:89:91:6f:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5E:56:59:23:CD:40:D6:F5:34:6D:F8:84:FF:1E:BB:95:11:FE:EA
            X509v3 Authority Key Identifier:
                keyid:7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/3139302e3130332e3138382e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:72:bc:49:21:e4:cc:8f:dc:ea:6a:08:92:a7:14:44:78:42:
         3f:8f:6c:3c:02:ac:e7:b1:5e:41:9b:c2:53:3f:ae:4b:df:61:
         1c:07:1e:5a:b4:46:ca:a6:8a:38:0d:80:40:b8:be:72:68:52:
         12:78:0e:05:77:85:da:8f:df:f4:5c:30:62:5a:08:79:79:b1:
         d6:74:c1:a2:3d:c3:ca:84:f3:9c:4b:8a:67:a8:c5:c3:eb:a4:
         ac:68:c2:1c:77:a5:41:7c:a2:de:d5:0a:b0:fd:66:43:71:df:
         ef:b1:62:47:44:30:fb:d1:c0:84:a8:4b:87:22:03:5f:53:b8:
         5f:85:2a:02:c1:b6:19:99:fc:1f:4c:7a:e1:ea:db:8f:6c:15:
         13:8f:f7:57:e9:16:d0:0e:12:44:f4:52:67:fe:07:09:f0:e0:
         eb:18:f4:29:da:6b:55:46:8e:cd:5e:14:62:fe:ae:0b:33:d9:
         bc:bc:41:c6:4a:4b:77:c1:bc:5f:7f:1d:93:a4:7e:59:d2:11:
         f5:d8:35:07:70:f9:7a:b7:c5:11:3d:80:c4:9a:f9:48:17:15:
         3b:29:49:18:70:66:de:1b:90:db:26:69:7d:98:7c:a6:cd:1a:
         cc:7c:44:bd:aa:53:29:ee:05:82:69:f9:ed:6a:67:d1:fc:e7:
         d6:56:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:31:26 2025 by rpki-client