Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130362e302f32342d3234203d3e20323731393036.roa
File:                     3139302e31342e3130362e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          lGis73FeSDMCr8woY4WXDPGS99J5N1Gnp7GPz7YI7Tk=
Subject key identifier:   D1:55:1D:A4:3C:D4:47:04:60:A9:2C:13:0F:D0:F0:E2:24:6C:A4:BA
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       4986EE39F93EF5051A41158C77E68C288D297BF4
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130362e302f32342d3234203d3e20323731393036.roa
Signing time:             Thu 20 Aug 2026 19:45:00 +0000
ROA not before:           Thu 20 Aug 2026 19:40:00 +0000
ROA not after:            Thu 19 Aug 2027 19:45:00 +0000
asID:                     271906
IP address blocks:        190.14.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 05:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:ee:39:f9:3e:f5:05:1a:41:15:8c:77:e6:8c:28:8d:29:7b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Aug 20 19:40:00 2026 GMT
            Not After : Aug 19 19:45:00 2027 GMT
        Subject: CN=D1551DA43CD4470460A92C130FD0F0E2246CA4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:9c:da:ab:93:0b:3e:19:7e:f3:72:81:f3:
                    69:be:29:71:06:58:f4:e0:b1:b3:c1:b5:2a:4d:7d:
                    74:52:6e:cc:1f:a1:2c:0e:98:c4:d9:d0:ad:bc:4e:
                    df:03:b2:39:ee:3d:42:0a:9b:02:92:f0:44:d6:91:
                    1f:98:17:bf:ae:a8:26:0b:35:e9:b2:e4:80:aa:3e:
                    ae:37:be:cf:d8:08:6c:60:56:9f:85:db:37:43:21:
                    f6:79:53:f6:94:81:d3:60:b3:c7:be:c1:ec:af:82:
                    95:fa:a0:cf:91:e4:30:80:8f:71:d4:17:86:a9:7f:
                    5e:cc:58:a2:96:4c:ca:00:6a:1f:3b:f1:7f:2f:37:
                    46:ae:f3:1d:46:27:65:0a:ce:9f:ff:ca:ab:0f:d8:
                    53:39:44:31:e1:3c:68:d6:a7:6b:f0:d6:66:06:0b:
                    2b:0e:05:7e:0e:42:c5:e3:32:0a:fe:98:27:41:2d:
                    d3:41:5a:74:08:6b:ed:9d:05:3f:54:38:3e:8e:ec:
                    1e:81:dd:46:85:21:c6:e3:17:4f:4e:08:9f:9f:f2:
                    5b:db:4e:4c:fe:ad:6f:24:98:b5:b8:82:cc:2a:fb:
                    20:41:b3:ba:48:d6:20:06:77:2a:21:eb:6e:43:c8:
                    bb:bd:12:12:c1:f3:17:e7:87:5b:d7:b0:fb:98:fd:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:1D:A4:3C:D4:47:04:60:A9:2C:13:0F:D0:F0:E2:24:6C:A4:BA
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130362e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:41:f9:dc:4a:d7:22:52:81:e8:df:71:db:90:56:1b:6b:4f:
         77:77:98:8e:db:33:9d:80:f4:51:e5:9f:cf:31:37:c8:90:b7:
         8b:96:0c:bf:2a:e0:e4:04:33:6c:06:44:9e:71:78:2b:02:c0:
         f3:80:a6:95:90:fd:5a:73:6a:61:6f:23:83:31:2f:26:f0:30:
         05:9d:8f:17:81:fb:0f:a2:5b:bb:41:10:88:12:8d:b0:6c:1a:
         45:c1:3e:ef:f6:9d:7d:bf:92:1a:5f:d8:3a:d9:70:4c:26:e9:
         f3:ae:8d:5e:c5:3a:fe:b5:62:73:40:38:47:fc:16:cf:58:aa:
         65:7f:59:20:cc:b7:00:e0:74:e7:de:5d:98:c7:eb:fd:03:07:
         6a:b2:56:b3:27:11:b6:27:e0:b7:3d:09:36:d1:0c:08:66:30:
         9e:2f:c9:3d:cc:7e:30:3f:ca:ea:42:74:bc:51:83:b9:4e:78:
         5c:d4:19:6a:38:c8:eb:b2:eb:36:d8:15:85:0d:5e:bd:54:f0:
         21:92:e6:b1:93:8b:49:a9:4c:fb:02:4e:ad:ab:53:00:07:5a:
         c3:fc:ee:57:1c:0e:81:3a:0d:55:03:e9:72:9c:e3:07:0e:24:
         5d:38:ee:70:29:7b:d7:02:00:7f:da:f9:ba:86:9e:fe:84:62:
         56:87:48:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:11:53 2026 by rpki-client