Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          EYWi1tj1OZHRyHY3W/FQJxvq9wdxcVOTP/UPyQJphu0=
Subject key identifier:   21:85:D1:46:E7:08:D2:A0:17:F1:B9:17:A6:6F:4D:92:DF:18:40:EB
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       053ED0823D8FEF7413D5A7116F9070BB3CA928C0
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 20 Oct 2025 23:50:41 +0000
ROA not before:           Mon 20 Oct 2025 23:45:41 +0000
ROA not after:            Mon 19 Oct 2026 23:50:41 +0000
asID:                     23243
IP address blocks:        190.106.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Oct 2025 17:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3e:d0:82:3d:8f:ef:74:13:d5:a7:11:6f:90:70:bb:3c:a9:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Oct 20 23:45:41 2025 GMT
            Not After : Oct 19 23:50:41 2026 GMT
        Subject: CN=2185D146E708D2A017F1B917A66F4D92DF1840EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:7e:e6:7d:da:87:02:b1:9a:5a:66:59:c0:
                    d0:69:92:9d:8c:d2:b7:49:f3:9b:68:82:3a:e8:22:
                    4e:5a:08:8f:6e:d4:81:fb:f6:b7:83:17:42:52:fd:
                    03:88:26:17:a6:0c:16:4c:85:e5:0c:d6:67:1f:61:
                    ea:c6:b3:e8:a2:c5:30:10:ec:10:f8:2b:74:20:37:
                    e4:e5:26:c9:4f:d5:62:52:a5:f6:b6:f2:41:8e:29:
                    19:9c:bb:43:6d:87:a1:37:ea:2e:e1:60:ed:71:87:
                    a5:2d:95:46:56:80:a7:3a:54:36:cf:8b:f7:72:a2:
                    9f:c4:cd:97:dc:97:68:40:3d:54:57:8a:cd:fe:f0:
                    18:4c:24:fa:47:01:8a:16:57:95:5f:a6:be:c4:9a:
                    ee:c6:e2:8f:f4:a8:42:b9:2e:d9:94:76:aa:ae:05:
                    d6:d6:9d:42:98:29:ea:01:67:de:29:d4:85:d3:0f:
                    b9:d4:fe:fd:da:32:5d:8e:43:ae:0e:4b:7b:f3:ee:
                    0c:2e:1b:34:3b:89:3d:05:28:64:cd:81:4e:62:36:
                    d5:95:68:8b:b0:77:c7:0f:cb:25:b3:a8:e1:13:10:
                    69:31:f7:1e:b2:40:5c:2d:2f:f7:7e:16:69:b0:44:
                    6b:55:19:de:35:5f:ec:e3:5e:9d:24:57:6f:4c:dc:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:85:D1:46:E7:08:D2:A0:17:F1:B9:17:A6:6F:4D:92:DF:18:40:EB
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:58:53:72:0c:1b:77:33:db:85:46:21:cd:f2:eb:9b:a2:55:
         53:de:41:de:a4:bd:57:2e:d7:be:4f:6d:43:98:4f:c1:14:22:
         7d:19:6d:32:ef:07:50:e0:8a:50:65:10:6d:48:4c:50:e7:5e:
         2f:98:85:31:bc:57:85:69:08:22:cf:1d:22:f5:00:4d:11:bf:
         f8:bb:a7:78:96:ef:4e:a9:08:dc:39:91:18:9c:b1:08:dd:1b:
         b2:b5:b6:c8:15:ab:a6:eb:60:13:e2:13:70:f4:64:7a:fb:ff:
         96:91:ca:7e:fe:60:00:73:89:e6:03:d7:63:23:27:b1:29:9d:
         2e:41:be:e1:c1:ec:16:41:15:06:e2:0b:ca:98:6d:e7:39:32:
         26:09:8f:a7:b3:fb:b8:77:d3:23:2f:67:33:b9:04:3d:d5:14:
         46:7e:cd:51:7b:a7:f9:c4:7d:96:0e:ef:3b:45:0b:ed:5c:0a:
         3d:a6:14:f8:a3:88:85:13:da:26:4f:39:7d:f8:25:37:88:32:
         e4:d1:97:10:fc:c1:5d:05:47:fd:41:7d:cf:7d:d2:2a:7a:2f:
         3a:dc:11:1d:92:fb:96:7a:d5:60:f4:df:89:72:dd:f2:46:79:
         0b:c5:ce:52:f0:e8:49:1b:8a:c7:ff:5b:a1:15:3f:05:6d:93:
         59:9f:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:42:16 2025 by rpki-client