Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e34342e3232352e302f32342d3234203d3e20323733303139.roa
File:                     3139302e34342e3232352e302f32342d3234203d3e20323733303139.roa (raw, json)
Hash identifier:          2QOjBGiuGgGNyb9K7uCBhLvUpIYMb7F4K+lgB9RG2qQ=
Subject key identifier:   F7:0F:81:23:2D:2C:FE:DB:6D:63:6C:DF:BC:BD:09:E8:E3:0F:5C:FD
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       163AF678FE6F25F4D5BE9A31EC03B5EB4B2A9D7D
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e34342e3232352e302f32342d3234203d3e20323733303139.roa
Signing time:             Mon 07 Sep 2026 12:35:00 +0000
ROA not before:           Mon 07 Sep 2026 12:30:00 +0000
ROA not after:            Mon 06 Sep 2027 12:35:00 +0000
asID:                     273019
IP address blocks:        190.44.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 03:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3a:f6:78:fe:6f:25:f4:d5:be:9a:31:ec:03:b5:eb:4b:2a:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Sep  7 12:30:00 2026 GMT
            Not After : Sep  6 12:35:00 2027 GMT
        Subject: CN=F70F81232D2CFEDB6D636CDFBCBD09E8E30F5CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:b7:79:e9:e2:78:5a:2d:52:bb:91:60:5b:
                    00:b1:cb:de:61:08:24:80:1f:f1:05:51:f8:e2:b0:
                    81:86:20:46:75:ac:ea:fa:54:dc:31:72:bf:3d:50:
                    32:8a:1e:61:ea:fb:c9:9b:2d:4c:c0:c8:8e:cd:e6:
                    f4:b8:b6:2b:c6:ca:db:aa:4f:b3:17:17:4c:e3:8c:
                    3e:3e:d4:8e:4f:24:62:e1:f5:c0:dd:40:2f:24:58:
                    c3:f0:6d:91:77:f6:22:73:7f:f7:8a:ff:3b:5f:f7:
                    1d:4b:54:7e:76:8e:3c:a1:cf:d0:45:7b:19:71:45:
                    b9:9d:dd:92:ff:04:82:4b:2c:dd:4b:d5:16:da:9e:
                    4b:2c:44:e0:11:10:a8:76:6b:57:4f:c1:73:06:08:
                    fa:15:c1:fe:25:f8:cc:9a:de:9e:6b:a9:b9:ac:6f:
                    af:21:4e:c2:50:96:eb:0a:b1:71:a6:78:46:d0:93:
                    98:15:dd:99:9f:6f:62:eb:1c:bf:b0:e9:e9:51:10:
                    57:df:05:f0:3a:39:f3:8f:91:b2:23:9d:35:b6:6c:
                    54:f1:19:ca:66:4a:b7:e3:4d:f0:40:8d:3f:0d:78:
                    c4:c7:54:75:17:87:96:7c:a8:1e:e1:b6:18:49:14:
                    44:b5:cd:e7:b1:37:b3:4d:eb:88:40:bc:86:db:e3:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0F:81:23:2D:2C:FE:DB:6D:63:6C:DF:BC:BD:09:E8:E3:0F:5C:FD
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e34342e3232352e302f32342d3234203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.44.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:9b:04:69:80:d1:62:8d:82:f0:3f:ba:68:5e:da:9f:c5:56:
         de:a4:99:c7:99:d3:85:04:e3:d3:33:89:96:b6:56:ec:f6:a2:
         90:fd:d3:41:15:06:d6:1a:82:ee:39:e0:38:67:cf:fa:7d:f3:
         73:43:81:54:22:ad:01:6f:47:20:d3:e9:58:6f:a6:77:cd:dd:
         d0:ea:79:fd:bf:dc:1f:11:81:f5:89:02:c7:c7:54:78:a0:42:
         53:02:49:5e:01:5c:a3:21:19:17:d3:36:64:61:c8:e9:b9:b6:
         8d:ff:4d:f8:8a:73:bf:39:9f:8b:58:ed:00:03:49:03:94:ef:
         d4:c0:10:f3:11:87:2c:de:5d:69:fc:b4:7a:6f:64:bd:ac:7d:
         23:b6:4f:26:d7:b3:d2:25:cd:63:ec:15:cc:ea:1f:64:7e:da:
         cc:30:41:cd:d6:4d:e9:ff:8a:5a:95:fa:7a:6b:1c:2b:72:c3:
         5d:90:b4:0f:39:3f:8d:85:2a:07:46:68:d6:01:97:99:9c:d3:
         55:ed:73:8a:92:84:26:f2:6f:53:3b:a5:de:0a:30:2c:28:bc:
         b8:cf:3a:46:0d:44:ef:9b:5d:55:dd:30:37:68:b5:f2:b7:b3:
         5c:7d:7a:84:05:cd:e8:5c:e4:5a:4e:22:ee:74:4a:66:ca:aa:
         ca:a5:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 21:32:51 2026 by rpki-client