Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233342e302f32342d3234203d3e203532333939.roa
File:                     3139302e3131302e3233342e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          plOULmEZwcQbnZhP7k1rkK3ZScLKngEORpuJgDskNp4=
Subject key identifier:   9C:EB:52:8E:5D:21:58:26:74:B9:97:03:43:A0:12:36:CD:F8:A3:09
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       567008FA88E60950EDE2C2DE8588D5B64712D1A9
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233342e302f32342d3234203d3e203532333939.roa
Signing time:             Mon 30 Mar 2026 18:00:00 +0000
ROA not before:           Mon 30 Mar 2026 17:55:00 +0000
ROA not after:            Mon 29 Mar 2027 18:00:00 +0000
asID:                     52399
IP address blocks:        190.110.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 20:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:70:08:fa:88:e6:09:50:ed:e2:c2:de:85:88:d5:b6:47:12:d1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar 30 17:55:00 2026 GMT
            Not After : Mar 29 18:00:00 2027 GMT
        Subject: CN=9CEB528E5D21582674B9970343A01236CDF8A309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:d2:ed:10:d3:92:fe:5e:07:0a:de:63:17:
                    4c:ba:3c:da:f1:1a:1a:d7:22:92:b9:af:bb:8b:2f:
                    0a:d6:61:2f:4b:d6:6e:95:4c:63:d0:56:b5:91:7e:
                    83:cc:33:e3:22:c1:f4:b6:9c:66:36:bc:d6:db:26:
                    d1:37:9f:5b:d7:d6:e5:64:30:eb:4f:a7:2a:fb:fe:
                    70:29:57:5a:4f:df:db:1f:40:ad:d8:c0:3e:20:81:
                    f7:e4:b5:b8:a8:cd:b5:52:a1:4e:5e:ce:fb:78:e2:
                    70:2a:90:a1:df:91:53:11:bb:6b:97:2c:e6:ea:f8:
                    6d:72:76:4e:04:01:55:a5:3d:a7:90:92:a7:f6:de:
                    0f:e9:0a:91:f6:f3:ce:0f:18:85:00:bd:8b:5d:7b:
                    a8:a4:3f:9f:e2:4b:a9:67:c3:94:21:5b:ef:52:2a:
                    28:39:4f:4f:61:e7:19:3b:70:2d:08:b5:fd:a0:d3:
                    c2:f7:c1:d7:4b:dd:3f:7b:06:c0:f8:a8:76:b2:c8:
                    28:ff:7b:4f:15:f3:55:61:a1:3d:9f:ee:fc:6a:c2:
                    d5:1a:c5:69:3f:f1:54:6a:f9:38:fd:6b:18:e1:b6:
                    ce:f4:d2:83:75:3b:10:8b:f8:c3:ab:6a:12:fd:c0:
                    db:49:74:4c:12:e0:1d:db:b4:ee:68:09:04:31:d2:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:52:8E:5D:21:58:26:74:B9:97:03:43:A0:12:36:CD:F8:A3:09
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233342e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:19:e6:3d:8b:85:20:e3:cb:f3:b7:dd:66:32:73:91:60:2c:
         62:7b:04:db:9e:7d:76:40:50:a5:ba:9b:3b:99:59:0d:35:ae:
         ed:ab:39:80:44:f3:c9:53:50:38:a5:8b:1c:4f:57:07:2e:ab:
         dd:e1:d4:90:f8:53:c2:df:8f:0d:99:56:29:d4:d8:2c:1b:1e:
         3a:81:f5:b7:27:15:b5:4f:8e:75:c8:69:51:05:af:b2:b5:6f:
         dd:6f:4e:2c:90:0f:52:9a:86:d8:d0:d5:f1:6f:13:d7:76:2b:
         a3:c9:48:7b:66:82:e9:88:a1:a4:0c:86:30:a5:ec:34:50:f9:
         15:1b:4d:50:d2:83:75:5d:73:fc:04:74:59:26:e2:b3:02:84:
         31:4d:88:44:8f:72:11:57:e7:a0:b1:da:c7:7d:23:d3:e2:23:
         24:0c:2d:28:79:86:5e:d0:cc:6b:da:bd:a1:d8:5c:9b:df:ba:
         d1:cf:03:11:d4:f7:da:a7:a0:f4:69:47:91:e4:0f:1b:a6:39:
         c1:c1:34:13:fe:12:b3:60:19:0f:d7:e9:55:9f:85:eb:95:d5:
         a0:23:72:50:6c:55:33:db:0c:f5:80:a5:ef:bf:73:2f:7e:5d:
         0d:cf:19:9c:c4:65:f7:26:f5:5a:b9:45:c3:2d:24:f7:df:a6:
         a3:25:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:23:58 2026 by rpki-client