Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36352e302f32342d3234203d3e20323632313931.roa
File:                     3139302e352e36352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          RAy8jdk+OOeIhTUaX23cvUMCxrCVW3s65cMHqh04XyA=
Subject key identifier:   7E:81:35:41:2E:95:5C:28:FB:F9:5D:C6:D7:EF:DD:9B:A6:66:60:DB
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       2E7B8ABD0F144FD4B4DABD83E4B0B5A8ECAAFF33
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36352e302f32342d3234203d3e20323632313931.roa
Signing time:             Sat 07 Mar 2026 11:33:15 +0000
ROA not before:           Sat 07 Mar 2026 11:28:15 +0000
ROA not after:            Sat 06 Mar 2027 11:33:15 +0000
asID:                     262191
IP address blocks:        190.5.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Mar 2026 21:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7b:8a:bd:0f:14:4f:d4:b4:da:bd:83:e4:b0:b5:a8:ec:aa:ff:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Mar  7 11:28:15 2026 GMT
            Not After : Mar  6 11:33:15 2027 GMT
        Subject: CN=7E8135412E955C28FBF95DC6D7EFDD9BA66660DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:b1:e9:05:0d:7f:4a:46:d3:02:40:1b:97:
                    61:7c:a8:a9:c5:d6:a4:1d:6c:11:d1:c4:37:cf:69:
                    89:5a:e4:cd:fd:a0:44:c1:4e:74:d9:67:b9:5f:99:
                    a9:63:7e:6d:c5:42:99:43:0e:14:f5:c2:a8:8c:cc:
                    ad:b4:f1:9c:3b:7e:f9:7b:44:06:b6:2c:6d:de:4b:
                    b7:3a:79:06:3c:3a:a8:af:6c:c9:47:c3:42:ec:d0:
                    92:85:c8:38:b7:18:9e:c4:61:4c:a1:dc:e3:11:f5:
                    6f:18:ec:ef:94:0e:87:9b:3e:2e:79:3a:e3:fe:76:
                    ce:3b:37:6b:0c:79:c9:40:7c:3e:10:a5:19:e2:3d:
                    59:cb:92:c4:3d:cc:23:7d:72:7d:d7:81:ba:cd:93:
                    49:27:76:47:f6:4f:fe:b1:ba:1e:1f:2e:67:76:f7:
                    ee:1b:3e:30:91:71:23:1c:8a:80:64:41:cd:84:e5:
                    b0:85:a1:17:f4:35:11:dd:ef:e8:f0:b6:ba:83:77:
                    33:69:cf:d2:de:47:69:46:df:bc:ee:9c:f5:99:09:
                    d5:3c:6d:bd:92:fc:9e:ea:10:85:57:83:f0:68:e8:
                    8f:9c:02:77:0b:dc:1d:e7:dd:e2:6c:f5:30:35:a4:
                    b0:fe:84:ab:d9:ee:63:bc:89:cc:25:6f:02:94:fc:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:35:41:2E:95:5C:28:FB:F9:5D:C6:D7:EF:DD:9B:A6:66:60:DB
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e4:57:8c:cf:94:ae:0d:6c:a4:ed:c1:8a:bb:68:f5:df:31:
         73:6d:c7:b2:72:a2:a0:6d:8f:45:02:58:d8:20:78:54:27:9a:
         9c:df:c1:5c:74:8a:6c:d1:83:5e:8a:90:79:f9:1e:81:a5:70:
         b6:f3:c6:29:e4:fc:ac:3c:e8:03:b1:e1:0e:d7:24:c6:df:79:
         44:00:ab:88:aa:e5:39:f6:1d:a0:9e:69:70:37:64:a6:1d:ab:
         f6:0b:5f:34:a3:21:b9:07:37:10:1b:ce:51:4d:c6:96:30:c7:
         98:bb:fb:ad:41:36:ea:65:ca:e5:fe:be:66:a1:6c:f4:a9:cf:
         4c:23:b6:0c:0f:96:85:36:44:ed:76:bc:72:a6:ff:e3:fd:bc:
         83:f5:11:37:7d:d2:4c:28:8c:6a:c7:4e:73:76:d6:4c:be:d0:
         e2:37:7a:1a:8d:67:8d:a4:50:ac:d9:cf:48:a1:aa:eb:d2:a9:
         62:8f:e8:d6:9e:65:50:ad:15:36:89:a6:5c:b3:30:ef:6c:59:
         13:2e:26:9b:9e:2e:af:5a:e3:f0:f6:bc:d9:d4:d8:cd:26:a6:
         cd:6a:02:a9:7f:83:45:a9:81:80:81:41:13:c5:34:0b:6b:ea:
         76:75:a4:f8:d8:77:f0:d0:28:a3:84:67:9e:0f:33:a7:be:08:
         7e:4a:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:39:49 2026 by rpki-client