Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132342e302f32342d3234203d3e20323639383232.roa
File:                     3139302e3130322e3132342e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          RLiaBvO9Z6uJZQvtO37DJ5x5t8SzFbEd4dvqGUprPDo=
Subject key identifier:   C1:A4:61:AD:DE:7C:CF:25:0B:12:E9:ED:F8:D1:EE:29:7F:A2:89:E6
Certificate issuer:       /CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
Certificate serial:       5563F64D9FC20A8670E11D2C8E0FE74C55C647E1
Authority key identifier: EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132342e302f32342d3234203d3e20323639383232.roa
Signing time:             Mon 02 Mar 2026 23:15:00 +0000
ROA not before:           Mon 02 Mar 2026 23:10:00 +0000
ROA not after:            Mon 01 Mar 2027 23:15:00 +0000
asID:                     269822
IP address blocks:        190.102.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:f6:4d:9f:c2:0a:86:70:e1:1d:2c:8e:0f:e7:4c:55:c6:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
        Validity
            Not Before: Mar  2 23:10:00 2026 GMT
            Not After : Mar  1 23:15:00 2027 GMT
        Subject: CN=C1A461ADDE7CCF250B12E9EDF8D1EE297FA289E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:97:a7:94:ec:a0:c6:1d:05:1c:bf:04:2a:
                    45:87:a2:61:c2:a5:96:c8:c3:4b:63:94:e9:93:9b:
                    3b:f0:41:99:13:ae:41:2a:92:af:56:db:4d:d2:ef:
                    34:2f:9e:eb:af:78:e0:cb:dd:49:37:93:fa:31:ff:
                    96:64:99:d6:d7:45:e8:b2:a8:34:e1:bd:58:4a:54:
                    da:ae:8a:36:27:5a:9a:33:fe:37:07:4c:2f:d0:a4:
                    3a:f8:f2:71:57:fa:ec:3c:e4:de:2c:8c:70:12:6f:
                    cc:73:8e:7c:9b:5c:6f:d4:00:1e:89:49:e7:20:06:
                    97:48:fb:d9:27:79:f3:a2:ce:b6:7c:d2:95:a6:d8:
                    f9:aa:63:4d:9c:b0:99:28:49:8a:c1:a1:1c:3f:bb:
                    6f:32:e1:99:a2:29:8a:01:b4:ac:ab:ee:57:56:cc:
                    68:d7:a7:41:1c:cf:43:71:45:04:7b:04:24:14:6e:
                    b0:ed:26:3b:65:53:d7:06:83:df:75:dc:55:b9:21:
                    48:fa:6f:6e:b9:c3:de:06:09:70:9b:d1:0c:e1:db:
                    90:3d:bf:30:07:b2:89:c4:03:05:92:f3:72:14:6a:
                    f4:77:f4:8d:a5:2f:e8:fb:59:89:8e:8f:3c:12:b5:
                    9f:2d:41:1a:42:6e:83:66:1a:d3:46:9c:ef:f3:c4:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A4:61:AD:DE:7C:CF:25:0B:12:E9:ED:F8:D1:EE:29:7F:A2:89:E6
            X509v3 Authority Key Identifier:
                keyid:EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132342e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:64:df:9c:54:bc:3c:c6:db:0f:36:6d:a2:57:a0:81:91:31:
         bf:12:19:bf:c5:98:9b:eb:fc:61:ae:64:4e:87:0b:ce:91:6e:
         d5:1f:17:1f:d6:3d:b9:58:72:3a:33:51:a9:a3:7d:e6:b0:80:
         92:35:01:7d:24:7b:6c:d9:52:8e:3d:2c:6c:40:bc:38:6c:12:
         fa:72:eb:5a:29:0c:5f:b4:e5:66:eb:c3:6b:6f:be:1a:7c:37:
         19:44:c7:38:02:e0:67:f7:96:c6:e8:1d:60:7c:e6:1a:2f:be:
         7d:ac:75:29:a7:32:b9:43:30:51:d2:3d:6c:53:77:19:f6:48:
         c9:0c:b5:38:8f:7d:12:3a:e4:9a:8f:5a:61:1a:c5:10:3e:f8:
         5c:94:be:a2:3c:de:2d:1a:19:56:7e:ce:4f:aa:12:cd:c8:87:
         d0:c8:db:d2:ee:48:bd:32:f6:3d:b6:88:c6:ec:9c:37:6b:e9:
         27:44:e6:1d:29:75:a5:3d:8a:30:ed:94:1e:ca:bf:a1:eb:f2:
         42:8e:e0:05:02:d6:7e:37:ea:c0:0d:82:da:75:93:e3:87:e1:
         97:05:fc:98:25:64:fb:f7:48:58:a8:d1:a1:ff:f0:04:6e:f1:
         67:5a:1e:89:61:76:a2:1a:f2:d1:7e:1d:20:5f:1b:bf:4b:dc:
         72:08:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:01:31 2026 by rpki-client