Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233322e302f32342d3234203d3e203532333939.roa
File:                     3139302e3131302e3233322e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          eqwooLBWpUNc3iT3fcFLMBnXzeexwk9LZ58JjKpAtAw=
Subject key identifier:   32:20:75:08:50:53:AD:D7:08:8D:F2:4D:CA:6C:63:7F:F2:68:90:BC
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       712264AEC52975DA0E13CD7E99A5F7F1A20B64EC
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233322e302f32342d3234203d3e203532333939.roa
Signing time:             Mon 30 Mar 2026 18:00:02 +0000
ROA not before:           Mon 30 Mar 2026 17:55:02 +0000
ROA not after:            Mon 29 Mar 2027 18:00:02 +0000
asID:                     52399
IP address blocks:        190.110.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 20:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:22:64:ae:c5:29:75:da:0e:13:cd:7e:99:a5:f7:f1:a2:0b:64:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar 30 17:55:02 2026 GMT
            Not After : Mar 29 18:00:02 2027 GMT
        Subject: CN=322075085053ADD7088DF24DCA6C637FF26890BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:93:4f:ee:56:41:a3:d0:15:27:bb:09:0e:
                    e4:a8:b3:13:e6:66:7a:06:63:ad:3f:f1:95:2c:eb:
                    d0:30:98:a2:b6:f5:1b:a9:0d:f7:7f:16:e8:43:5a:
                    ea:f7:b1:05:a2:5a:6b:39:05:a0:1d:b5:cb:cb:f6:
                    e6:5c:f9:7c:a3:76:c9:5f:85:c2:db:01:d6:eb:4a:
                    9a:60:21:e2:02:d0:b9:57:46:21:ca:6d:af:a1:fb:
                    f9:76:3b:e1:4f:9c:09:af:b1:a8:d1:db:0a:78:1b:
                    bb:57:14:20:e3:24:5b:bb:a9:5c:03:fd:ca:5e:94:
                    cf:14:17:97:0e:bd:4e:90:f3:b9:6f:09:f9:17:0a:
                    a0:ed:21:86:2a:03:2a:89:36:1f:9d:c9:ed:ff:96:
                    87:cb:5f:70:71:ac:b8:11:c5:4f:1c:ff:3d:ee:5c:
                    08:4f:e8:be:3f:19:ac:93:12:38:50:70:f8:59:7a:
                    db:4e:ca:c7:2c:ca:a9:a2:89:fd:5f:52:89:a9:c4:
                    94:c0:ea:62:45:78:0a:04:b2:7b:b4:28:85:dd:dc:
                    f8:fb:12:ea:b1:49:40:d1:d3:78:ed:a6:ec:cd:e5:
                    fa:31:64:89:4e:8f:a0:e2:bc:12:5d:03:65:0f:05:
                    a2:8d:4a:fc:77:37:ed:59:77:5b:c4:35:78:1c:90:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:20:75:08:50:53:AD:D7:08:8D:F2:4D:CA:6C:63:7F:F2:68:90:BC
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233322e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:9d:6d:e7:89:03:47:23:47:61:37:a4:a8:46:79:7e:0b:
         e5:7a:a7:2a:d0:18:29:69:cd:b9:1c:17:1e:de:41:b7:ad:47:
         9b:80:31:d2:b2:ba:3b:07:61:43:a6:70:d3:a2:a8:5d:67:3a:
         83:e4:6e:4e:91:af:c1:eb:4e:d0:0f:d8:8f:cc:cd:92:9c:2c:
         10:c2:0a:be:12:6f:5c:8c:46:4e:af:a1:df:ff:5b:78:dc:a9:
         2f:51:36:e2:dc:10:87:49:a8:cf:3c:89:c9:ab:b7:44:91:11:
         b7:09:4e:28:8c:db:4c:ce:d7:d0:df:40:f4:40:ed:9d:e6:75:
         a2:54:76:65:94:a9:3d:f9:63:23:8c:e4:bb:b9:85:4e:38:55:
         4f:e4:29:30:a3:69:d7:91:f7:55:52:2b:7c:b5:5a:8f:10:99:
         c5:fb:79:05:b6:37:21:72:39:99:31:b0:8e:2e:ef:53:44:eb:
         f5:64:15:de:87:fe:24:e7:71:b4:b5:e8:c1:53:ef:4e:a8:11:
         62:e1:9d:2d:7a:99:f5:5c:e8:6b:2b:f6:60:1c:82:5e:02:68:
         eb:e0:c2:97:32:fa:ef:94:e9:c2:bd:7d:32:d3:54:85:ba:06:
         c7:16:dc:27:3d:a4:90:6b:17:e3:50:13:0e:af:68:cd:2f:47:
         60:e0:47:9a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcSJkrsUpddoOE81+maX38aILZOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4RjlFNkY2NDJCNjQ4NUYyNUE5QjIzMzE4OTc1NzNE
RUVEMjZGNjAeFw0yNjAzMzAxNzU1MDJaFw0yNzAzMjkxODAwMDJaMDMxMTAvBgNV
BAMTKDMyMjA3NTA4NTA1M0FERDcwODhERjI0RENBNkM2MzdGRjI2ODkwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoJNP7lZBo9AVJ7sJDuSosxPm
ZnoGY60/8ZUs69AwmKK29RupDfd/FuhDWur3sQWiWms5BaAdtcvL9uZc+Xyjdslf
hcLbAdbrSppgIeIC0LlXRiHKba+h+/l2O+FPnAmvsajR2wp4G7tXFCDjJFu7qVwD
/cpelM8UF5cOvU6Q87lvCfkXCqDtIYYqAyqJNh+dye3/lofLX3BxrLgRxU8c/z3u
XAhP6L4/GayTEjhQcPhZettOyscsyqmiif1fUompxJTA6mJFeAoEsnu0KIXd3Pj7
EuqxSUDR03jtpuzN5foxZIlOj6DivBJdA2UPBaKNSvx3N+1Zd1vENXgckOszAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMiB1CFBTrdcIjfJNymxjf/JokLwwHwYDVR0j
BBgwFoAU94+eb2QrZIXyWpsjMYl1c97tJvYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REU5MUIzNURBOUFDNzA5QzM0QzJCRDFBMTNBNjg4RTlB
MTY5QUU4ODhCOTJCNEU0QkJCODZGMjVCNzdDNDU4LzAvRjc4RjlFNkY2NDJCNjQ4
NUYyNUE5QjIzMzE4OTc1NzNERUVEMjZGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNzhGOUU2RjY0MkI2NDg1RjI1
QTlCMjMzMTg5NzU3M0RFRUQyNkY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRFOTFCMzVEQTlBQzcwOUMzNEMyQkQxQTEzQTY4OEU5QTE2OUFFODg4
QjkyQjRFNEJCQjg2RjI1Qjc3QzQ1OC8wLzMxMzkzMDJlMzEzMTMwMmUzMjMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm7o
MA0GCSqGSIb3DQEBCwUAA4IBAQAU+p1t54kDRyNHYTekqEZ5fgvleqcq0Bgpac25
HBce3kG3rUebgDHSsro7B2FDpnDToqhdZzqD5G5Oka/B607QD9iPzM2SnCwQwgq+
Em9cjEZOr6Hf/1t43KkvUTbi3BCHSajPPInJq7dEkRG3CU4ojNtMztfQ30D0QO2d
5nWiVHZllKk9+WMjjOS7uYVOOFVP5Ckwo2nXkfdVUit8tVqPEJnF+3kFtjchcjmZ
MbCOLu9TROv1ZBXeh/4k53G0tejBU+9OqBFi4Z0tepn1XOhrK/ZgHIJeAmjr4MKX
MvrvlOnCvX0y01SFugbHFtwnPaSQaxfjUBMOr2jNL0dg4Eea
-----END CERTIFICATE-----
Generated at Tue Mar 31 09:23:56 2026 by rpki-client