Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233352e302f32342d3234203d3e203532333939.roa
File:                     3139302e3131302e3233352e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          65yhZtmktC9wvCKpuBv9W3qFmnuPa0uggYBmT8XQnR4=
Subject key identifier:   32:7D:8A:1C:0E:93:1B:52:D4:76:FE:65:58:0E:76:FB:48:18:15:85
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       7045CEFD2641E8F23565DD6DA9ABC5DB818D59CB
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233352e302f32342d3234203d3e203532333939.roa
Signing time:             Mon 30 Mar 2026 18:00:02 +0000
ROA not before:           Mon 30 Mar 2026 17:55:02 +0000
ROA not after:            Mon 29 Mar 2027 18:00:02 +0000
asID:                     52399
IP address blocks:        190.110.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 20:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:ce:fd:26:41:e8:f2:35:65:dd:6d:a9:ab:c5:db:81:8d:59:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar 30 17:55:02 2026 GMT
            Not After : Mar 29 18:00:02 2027 GMT
        Subject: CN=327D8A1C0E931B52D476FE65580E76FB48181585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:0d:bf:68:f9:65:82:f1:12:3c:a8:c7:d0:
                    12:0c:d8:7a:00:29:c7:aa:52:2a:73:19:52:cf:35:
                    59:71:4e:2e:1a:5a:1c:af:78:c8:27:7f:67:0f:7e:
                    dc:99:0f:cf:fe:4d:1c:65:a4:d1:31:e5:f9:19:8a:
                    24:7e:f9:d7:01:4d:a6:ac:c5:e9:19:67:83:fa:05:
                    8f:3f:85:e4:8b:0b:de:a6:10:41:e2:05:b5:2d:ad:
                    e6:ab:dd:30:6c:ee:00:60:bb:42:39:90:f3:ca:4d:
                    a3:91:58:39:ea:43:d4:c0:3c:81:52:a3:d5:25:f7:
                    a5:7b:1a:70:5a:f1:4c:86:ca:ea:5e:62:4c:ff:eb:
                    30:ec:bd:bb:c5:14:bf:27:f9:3b:fe:c3:b0:a7:ab:
                    f3:3b:85:e0:85:a6:91:fd:b1:cf:21:a6:7b:7b:5a:
                    58:7f:04:77:3c:c4:2e:df:62:a0:c7:34:65:f5:92:
                    63:5d:fa:86:a2:2b:ac:2c:3e:f4:57:ae:d9:6e:fe:
                    63:bd:48:6b:63:b9:5d:ea:ac:9b:09:e7:db:b9:a5:
                    a1:95:8c:af:5e:8f:bc:cf:ff:2f:c9:10:bc:dd:b9:
                    36:ba:60:62:56:2d:56:00:64:d4:3f:aa:7f:73:7d:
                    16:c8:cd:32:25:69:f5:f6:0c:f2:62:b8:31:a8:44:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7D:8A:1C:0E:93:1B:52:D4:76:FE:65:58:0E:76:FB:48:18:15:85
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3139302e3131302e3233352e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:36:d0:54:ca:37:6f:da:56:81:a8:3b:1f:7f:3f:bc:db:1c:
         db:ee:f6:7e:73:5f:5f:4f:ea:d9:62:5d:a5:e4:d9:ee:a3:c4:
         6e:5c:61:7e:4b:c7:50:ca:63:7e:86:e1:4f:13:d3:2b:ec:86:
         d8:61:21:6f:0e:30:a6:46:bc:49:bd:a9:ef:05:41:77:63:15:
         e1:3d:23:1c:01:b0:80:50:e4:1a:76:8d:1b:77:7f:94:a9:b7:
         3a:39:65:fd:b4:fc:34:44:04:60:ef:d4:24:36:38:bf:a6:c5:
         0e:ca:ea:c3:33:29:5d:d9:ad:89:b0:e5:37:d0:36:18:cc:04:
         97:b7:e7:5b:5f:eb:3d:7e:58:fd:ef:a2:f5:dd:b0:22:8f:6e:
         ea:3d:c1:b1:ca:7b:6c:09:12:f3:47:4f:da:2c:13:7a:be:de:
         73:d8:90:56:04:a8:27:46:ea:0f:00:76:42:93:e8:dc:17:f7:
         67:87:d4:04:b4:1e:bf:d0:4c:3b:c8:f0:22:fe:64:c2:8b:b0:
         b3:b6:c6:56:77:61:61:14:7e:9c:ad:b7:9f:c3:19:2e:bf:72:
         5e:e6:da:85:e0:46:da:83:b7:ba:33:4f:99:d8:0f:37:b3:bb:
         04:32:21:8d:18:61:45:99:28:b0:16:bd:a8:c2:ab:07:bd:09:
         31:04:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:23:56 2026 by rpki-client