Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233322e302f32332d3233203d3e203532333939.roa
File:                     3139302e3131302e3233322e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier:          d/BkrXaDcxk2KPR/286JGp9Xd0TnWO1EXCLQvMgLUuM=
Subject key identifier:   87:13:20:B6:6C:92:CE:7B:B9:E5:32:4D:CD:97:46:A8:23:BC:5C:48
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       74B97A409B33221813476611756273D3176155B0
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233322e302f32332d3233203d3e203532333939.roa
Signing time:             Mon 30 Mar 2026 18:00:00 +0000
ROA not before:           Mon 30 Mar 2026 17:55:00 +0000
ROA not after:            Mon 29 Mar 2027 18:00:00 +0000
asID:                     52399
IP address blocks:        190.110.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 20:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:7a:40:9b:33:22:18:13:47:66:11:75:62:73:d3:17:61:55:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar 30 17:55:00 2026 GMT
            Not After : Mar 29 18:00:00 2027 GMT
        Subject: CN=871320B66C92CE7BB9E5324DCD9746A823BC5C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:89:a9:bd:a1:f1:e6:86:87:ab:6a:4b:c4:
                    7d:fa:b9:b9:0e:cd:fb:b0:4c:11:0a:d2:75:87:8e:
                    22:69:14:63:9f:1f:9f:87:4e:92:6f:7e:1c:fe:55:
                    8c:38:ac:9f:b6:57:ef:f8:68:79:e8:3c:dd:98:26:
                    a7:93:f9:cc:41:d6:69:e8:33:8c:b9:ec:ae:67:40:
                    60:31:65:d5:cb:32:75:8e:8d:c2:9d:8d:38:10:5b:
                    ea:c2:71:e3:4e:b4:d9:11:9f:07:c3:e3:6c:30:50:
                    9f:6f:17:4d:62:45:93:db:52:dc:60:22:17:fb:ec:
                    9d:06:ef:10:58:73:81:35:e7:3d:3f:f5:f1:b0:7d:
                    1b:d1:46:15:aa:c8:32:8d:a3:ab:2b:1b:1e:90:80:
                    9d:2c:58:eb:4c:1d:a6:ac:a3:01:1d:6f:36:2d:c2:
                    2a:76:2e:21:7a:3b:60:15:c5:23:51:8c:a8:40:59:
                    e8:55:b2:e7:25:68:22:fd:23:98:c0:c7:a8:59:95:
                    92:01:71:18:e0:b4:2d:07:86:58:a9:e8:c2:9a:43:
                    39:8c:b1:27:62:b0:73:d7:eb:45:a8:3e:fe:d1:04:
                    37:a6:17:c3:d3:37:c8:4b:61:6a:de:14:93:48:01:
                    29:9a:28:3c:a3:68:c5:c5:1e:90:7e:fe:cb:55:a2:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:13:20:B6:6C:92:CE:7B:B9:E5:32:4D:CD:97:46:A8:23:BC:5C:48
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233322e302f32332d3233203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:59:7f:50:de:6e:34:1b:78:7b:0a:c6:83:91:cf:8d:db:01:
         6c:09:0a:32:a7:73:6a:7b:8b:4d:3e:38:83:ac:58:ae:a2:0d:
         fd:79:15:ed:75:f3:1e:ea:2c:e8:92:54:3b:b1:fe:ea:e1:8f:
         90:f1:bb:52:34:bf:68:a4:ab:43:ab:8e:a5:2d:f0:31:63:1c:
         29:ae:dd:dd:47:f6:7e:18:cd:5f:99:ba:ca:09:48:13:dc:f1:
         22:8b:a0:ed:ce:81:13:ce:be:06:98:f7:5f:b7:ca:95:9b:2d:
         e8:5c:bd:12:f6:b6:22:ef:b1:df:7f:66:9f:d4:a5:fe:72:4a:
         b0:c5:bb:78:0d:31:25:10:14:aa:5b:d9:ac:fd:6f:4e:09:72:
         63:f7:e7:b7:0b:34:8b:b5:2d:3f:35:07:36:77:b2:11:2f:9a:
         74:58:fc:39:4f:91:04:e4:36:d5:a3:8c:0b:a2:54:de:93:b2:
         7e:ce:06:1e:ee:d3:08:33:71:68:c4:51:4c:5b:fb:c4:7d:8a:
         db:d2:d5:74:88:90:88:20:72:0a:a3:61:a8:9a:91:74:a0:41:
         40:6d:4d:ea:f8:d2:36:4f:db:f4:c5:0d:54:40:73:ef:13:91:
         2a:9c:2e:7b:48:02:68:53:8f:73:eb:d8:f4:87:55:bd:3e:a5:
         85:96:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:23:57 2026 by rpki-client