Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132352e302f32342d3234203d3e20323639383232.roa
File:                     3139302e3130322e3132352e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          tXU16O5dJ+JIJ5/dBu/op703cy/i4FC8m7VeqL6BssM=
Subject key identifier:   35:AA:C1:7A:97:B2:7C:5F:89:A8:E7:58:44:B9:04:01:48:BA:B2:3F
Certificate issuer:       /CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
Certificate serial:       329CC146D9C54CFE731F3C269389C33BDDDF7664
Authority key identifier: EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132352e302f32342d3234203d3e20323639383232.roa
Signing time:             Mon 02 Mar 2026 23:15:00 +0000
ROA not before:           Mon 02 Mar 2026 23:10:00 +0000
ROA not after:            Mon 01 Mar 2027 23:15:00 +0000
asID:                     269822
IP address blocks:        190.102.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9c:c1:46:d9:c5:4c:fe:73:1f:3c:26:93:89:c3:3b:dd:df:76:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
        Validity
            Not Before: Mar  2 23:10:00 2026 GMT
            Not After : Mar  1 23:15:00 2027 GMT
        Subject: CN=35AAC17A97B27C5F89A8E75844B9040148BAB23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:68:a8:2e:07:3b:9b:c1:1f:1b:58:f0:58:
                    14:26:e1:b6:0b:fb:91:11:08:a1:45:dc:91:72:3f:
                    f1:b2:53:c3:28:5a:b1:56:17:59:b0:e1:0e:58:dc:
                    5a:d5:53:c5:b3:ac:57:d6:71:03:58:e3:0c:9c:46:
                    7e:fe:98:c6:36:83:2a:e8:e8:35:4c:64:18:f0:c5:
                    db:9f:d1:c8:7b:c0:62:35:fe:9d:4b:42:f1:bd:a6:
                    a4:d3:22:e7:6b:9b:e0:de:70:d7:b6:7f:7e:9d:fb:
                    f1:53:df:d6:a1:2a:66:5a:10:a0:f2:31:e5:65:54:
                    42:39:67:e5:cc:fe:4a:f1:2e:dc:41:e0:3e:64:b0:
                    1e:70:ff:da:c3:15:22:5c:fc:12:e9:de:40:01:74:
                    a2:ec:e1:5a:ea:e2:f0:5e:23:e2:04:1e:98:84:3c:
                    42:64:13:df:df:f2:c4:4e:e1:b3:f0:d6:25:63:de:
                    13:63:f9:c2:dc:e1:b2:f1:8d:47:4b:48:db:99:cb:
                    24:64:88:f2:5e:2d:38:e0:a9:a3:00:cd:02:5a:40:
                    29:38:e5:c7:af:04:d3:72:bf:83:b7:0a:75:15:41:
                    2f:6b:95:59:e6:a6:1d:3b:ff:10:b7:db:ee:85:b9:
                    e6:ab:8f:a9:fa:b1:fc:4a:14:89:3a:32:45:c5:8e:
                    c4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:C1:7A:97:B2:7C:5F:89:A8:E7:58:44:B9:04:01:48:BA:B2:3F
            X509v3 Authority Key Identifier:
                keyid:EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132352e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:83:b7:ba:a0:90:59:90:69:8b:23:01:30:49:c7:d7:e4:93:
         58:cd:01:c7:f5:df:76:c7:91:81:78:79:50:2c:50:6a:7c:3c:
         75:a5:fe:ac:42:65:ce:73:cb:6a:d6:35:2b:3c:4a:79:cb:6f:
         c7:dc:fc:7a:f3:75:da:f3:35:9c:06:56:1b:91:53:65:05:86:
         41:a7:d6:f7:cb:62:c1:13:c4:c7:65:2f:52:4e:5c:1a:97:94:
         e7:6d:d8:12:94:21:69:30:9f:00:f9:44:ff:19:76:cb:db:94:
         8e:20:6c:0b:2e:4d:1a:a5:0c:bd:7b:5c:46:20:78:35:cf:1f:
         3b:1a:18:87:52:9a:30:56:92:14:3d:a7:a1:64:b6:87:fb:af:
         f4:4f:fd:6d:5e:1c:02:a3:1a:8c:a1:80:37:df:bb:23:e2:cf:
         d1:51:74:a5:ab:c6:c1:3c:4b:d6:55:d3:04:b5:a7:60:1c:6a:
         32:f6:8c:09:75:c8:0b:87:56:56:10:99:f6:21:77:96:83:c8:
         6b:e8:8c:05:9c:eb:89:ce:12:e6:ed:cb:4b:f7:34:f6:5e:f3:
         00:c4:59:82:0e:c9:e3:90:14:bf:6c:de:8d:96:84:49:ae:f9:
         92:ff:17:fa:52:14:27:22:7f:da:e4:80:0b:0d:fc:11:c6:85:
         63:40:cc:ab
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMpzBRtnFTP5zHzwmk4nDO93fdmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxNjNCQkZFMjk3RDYzQjc5QUVDQjdCQ0VDN0FCQzY5
Rjc5MTFDNzAeFw0yNjAzMDIyMzEwMDBaFw0yNzAzMDEyMzE1MDBaMDMxMTAvBgNV
BAMTKDM1QUFDMTdBOTdCMjdDNUY4OUE4RTc1ODQ0QjkwNDAxNDhCQUIyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1X2ioLgc7m8EfG1jwWBQm4bYL
+5ERCKFF3JFyP/GyU8MoWrFWF1mw4Q5Y3FrVU8WzrFfWcQNY4wycRn7+mMY2gyro
6DVMZBjwxduf0ch7wGI1/p1LQvG9pqTTIudrm+DecNe2f36d+/FT39ahKmZaEKDy
MeVlVEI5Z+XM/krxLtxB4D5ksB5w/9rDFSJc/BLp3kABdKLs4Vrq4vBeI+IEHpiE
PEJkE9/f8sRO4bPw1iVj3hNj+cLc4bLxjUdLSNuZyyRkiPJeLTjgqaMAzQJaQCk4
5cevBNNyv4O3CnUVQS9rlVnmph07/xC32+6Fuearj6n6sfxKFIk6MkXFjsTnAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUNarBepeyfF+JqOdYRLkEAUi6sj8wHwYDVR0j
BBgwFoAU7hY7v+KX1jt5rst7zserxp95EccwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOUExRjE1MTVBQkZFNUMwQzFEODI5QjBFNDU2REVEQ0M5
MEVBN0NFMjQyMzhGN0NFMkMyOTBFQUVBM0M4QjNBLzAvRUUxNjNCQkZFMjk3RDYz
Qjc5QUVDQjdCQ0VDN0FCQzY5Rjc5MTFDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTE2M0JCRkUyOTdENjNCNzlB
RUNCN0JDRUM3QUJDNjlGNzkxMUM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTlBMUYxNTE1QUJGRTVDMEMxRDgyOUIwRTQ1NkRFRENDOTBFQTdDRTI0
MjM4RjdDRTJDMjkwRUFFQTNDOEIzQS8wLzMxMzkzMDJlMzEzMDMyMmUzMTMyMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzODMyMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
Zn0wDQYJKoZIhvcNAQELBQADggEBAJWDt7qgkFmQaYsjATBJx9fkk1jNAcf133bH
kYF4eVAsUGp8PHWl/qxCZc5zy2rWNSs8SnnLb8fc/HrzddrzNZwGVhuRU2UFhkGn
1vfLYsETxMdlL1JOXBqXlOdt2BKUIWkwnwD5RP8ZdsvblI4gbAsuTRqlDL17XEYg
eDXPHzsaGIdSmjBWkhQ9p6Fktof7r/RP/W1eHAKjGoyhgDffuyPiz9FRdKWrxsE8
S9ZV0wS1p2AcajL2jAl1yAuHVlYQmfYhd5aDyGvojAWc64nOEubty0v3NPZe8wDE
WYIOyeOQFL9s3o2WhEmu+ZL/F/pSFCcif9rkgAsN/BHGhWNAzKs=
-----END CERTIFICATE-----
Generated at Mon Mar 16 05:01:51 2026 by rpki-client