Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233342e302f32332d3233203d3e203532333939.roa
File:                     3139302e3131302e3233342e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier:          efGMohVG4nIFJUNRrsMekcb3cRCt+XjQ0m0WmbBIYAc=
Subject key identifier:   CE:1B:7A:E1:4D:AC:06:08:5F:FD:4E:C4:41:6E:06:4A:A2:C2:D8:7D
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       13F613DEA7C9188A53A437B3594B3D90E8757B8D
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233342e302f32332d3233203d3e203532333939.roa
Signing time:             Mon 30 Mar 2026 18:00:01 +0000
ROA not before:           Mon 30 Mar 2026 17:55:01 +0000
ROA not after:            Mon 29 Mar 2027 18:00:01 +0000
asID:                     52399
IP address blocks:        190.110.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 20:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f6:13:de:a7:c9:18:8a:53:a4:37:b3:59:4b:3d:90:e8:75:7b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar 30 17:55:01 2026 GMT
            Not After : Mar 29 18:00:01 2027 GMT
        Subject: CN=CE1B7AE14DAC06085FFD4EC4416E064AA2C2D87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:46:a4:e2:f7:b3:3f:93:bf:8c:87:b0:4a:
                    d5:eb:b8:b9:3b:b5:d0:b6:7b:e2:4b:11:6f:ec:0b:
                    03:fa:7e:78:69:5a:ab:cb:0b:2c:b3:d8:3d:41:c9:
                    c9:17:b9:20:35:5b:bb:43:9e:81:ce:c8:2e:02:63:
                    f6:cf:63:a2:a5:ee:bf:cc:23:f7:ee:ce:8e:26:20:
                    85:f6:7f:31:1b:78:80:07:3c:96:aa:e5:0e:da:c9:
                    ff:5b:dd:ec:13:c9:e4:86:41:d2:cc:7b:6f:c3:c6:
                    79:43:b6:c3:bb:20:7e:77:92:35:bc:8f:5c:49:77:
                    b5:a5:47:8a:e9:37:56:8c:df:b9:6e:f0:cb:3d:f3:
                    7f:70:2e:75:7d:45:7b:6e:af:98:11:fa:35:ad:a0:
                    13:fc:b7:93:1b:cd:ae:bf:3c:2c:6a:4b:50:f0:60:
                    19:7b:e3:5b:42:08:bd:d6:24:84:44:42:f1:84:97:
                    ee:90:6d:aa:2f:d8:55:2f:38:ef:ed:22:5c:36:35:
                    26:87:fd:55:78:4a:cf:09:88:ac:a3:6e:45:04:12:
                    6b:96:71:6f:16:05:41:19:44:32:17:3a:ff:f2:71:
                    b7:3a:38:25:0f:7c:69:b2:3f:dd:80:70:29:eb:db:
                    07:8e:81:10:cc:85:81:34:83:b2:ea:ae:fd:b5:0d:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1B:7A:E1:4D:AC:06:08:5F:FD:4E:C4:41:6E:06:4A:A2:C2:D8:7D
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233342e302f32332d3233203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:91:21:86:f9:da:cd:e7:9c:c4:7d:0f:ae:af:36:fc:34:f0:
         c8:34:02:ab:09:c0:ca:d0:ce:00:d3:a4:d0:b8:f7:4f:43:f0:
         a3:3b:72:1e:95:3e:a7:41:fb:1c:88:e9:c5:e2:03:b9:f5:3e:
         ff:d3:39:1a:f1:f6:d4:57:30:65:d2:c8:8f:5b:1a:f4:69:3d:
         78:d1:cb:16:aa:b1:73:de:ec:f8:5c:85:55:b6:47:2c:ea:99:
         ef:ec:4d:f0:11:3d:67:f7:27:c0:a9:0f:21:87:84:96:a0:c9:
         17:e7:3a:26:3a:1f:41:af:14:03:ae:f4:28:e1:7d:a9:c4:c2:
         f0:5f:90:fb:71:cb:8f:a4:2b:76:54:58:8e:80:43:e1:d4:25:
         e5:c3:c6:64:57:e8:e5:a0:73:33:ad:31:48:f8:c5:54:74:f9:
         4d:3f:5e:f2:19:88:5a:ea:cc:e8:d2:d1:db:60:83:cc:e0:c0:
         2f:76:32:6f:b4:71:93:81:7b:94:20:9c:54:a5:52:07:43:59:
         ad:8b:dc:0b:b1:d6:f5:e4:ca:46:9a:6a:2a:a3:04:5c:f0:0c:
         34:40:52:23:7e:81:10:40:52:9a:29:d2:8e:d5:39:de:26:ac:
         90:a4:3d:9d:9b:37:5e:7f:57:16:30:b9:43:d1:78:36:5f:eb:
         0b:3c:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:29:20 2026 by rpki-client