Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132352e302f32342d3234203d3e2037313935.roa
File:                     3139302e3130322e3132352e302f32342d3234203d3e2037313935.roa (raw, json)
Hash identifier:          IBhjQ3ffntUIgblbWZm3dFAV1uXwC0T9uAfzjfrp4ik=
Subject key identifier:   84:07:CD:5B:9E:8F:B6:12:6D:26:B9:D2:3E:D9:40:CA:5B:B6:D8:28
Certificate issuer:       /CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
Certificate serial:       68DE4E651F87B56E8A642FC559B3B3C688108AFB
Authority key identifier: EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132352e302f32342d3234203d3e2037313935.roa
Signing time:             Fri 28 Aug 2026 13:45:00 +0000
ROA not before:           Fri 28 Aug 2026 13:40:00 +0000
ROA not after:            Fri 27 Aug 2027 13:45:00 +0000
asID:                     7195
IP address blocks:        190.102.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:de:4e:65:1f:87:b5:6e:8a:64:2f:c5:59:b3:b3:c6:88:10:8a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
        Validity
            Not Before: Aug 28 13:40:00 2026 GMT
            Not After : Aug 27 13:45:00 2027 GMT
        Subject: CN=8407CD5B9E8FB6126D26B9D23ED940CA5BB6D828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:8b:99:50:33:bd:51:f6:d4:c1:c4:25:13:
                    26:2b:75:d1:0a:8c:ff:eb:92:a1:c5:84:72:e2:2f:
                    49:2c:b9:a5:bc:d1:da:ac:9c:d2:cf:6a:4d:27:35:
                    a7:ef:04:7e:af:54:55:d4:46:17:22:36:42:26:d3:
                    47:de:0e:02:c2:8e:c8:a8:46:c8:e9:10:25:90:61:
                    d5:ee:4d:04:7b:56:23:bb:03:12:30:0b:2c:b3:b3:
                    91:16:b8:08:16:85:0b:a2:57:32:82:ad:b1:66:26:
                    71:02:d1:0e:2e:82:3c:a6:71:0c:fa:48:20:af:15:
                    c3:97:8c:62:62:b0:3a:73:dc:2a:4d:f9:cc:bb:e2:
                    b6:92:da:3c:a8:af:3b:a4:43:a2:9c:1d:3f:5b:d5:
                    f5:57:1a:98:92:ce:1e:ed:93:a0:fd:6c:27:02:ab:
                    74:96:ec:d7:0b:58:12:0c:a2:ca:25:79:fe:ac:55:
                    68:70:e6:70:45:cd:af:90:7e:d0:06:07:76:8c:4a:
                    ad:64:a1:a2:b6:2a:83:b9:aa:da:92:4c:d0:77:e1:
                    3e:1c:7a:83:dc:ed:b2:96:d0:ce:95:e6:be:a8:fe:
                    6f:aa:10:91:93:b4:05:cb:2f:d3:21:71:f5:9c:79:
                    a2:dc:c0:5b:bf:dc:32:fd:7f:9a:87:4f:9b:f7:f4:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:CD:5B:9E:8F:B6:12:6D:26:B9:D2:3E:D9:40:CA:5B:B6:D8:28
            X509v3 Authority Key Identifier:
                keyid:EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132352e302f32342d3234203d3e2037313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:a1:b3:70:ee:b6:f9:ac:4e:30:d3:df:8c:21:da:01:a0:
         4f:57:25:0f:3f:56:86:66:a7:ba:34:b7:60:03:0f:06:33:93:
         04:66:53:8f:be:e3:9f:9c:ea:42:5d:0d:a1:00:3c:4d:58:23:
         89:3a:13:f3:24:fe:ed:e1:58:9b:4a:fb:33:8b:e6:45:67:e3:
         7e:fb:9e:a0:7c:65:62:29:4d:2b:8b:a4:31:7d:01:47:be:17:
         1c:8a:18:f7:ce:b0:90:68:7e:72:76:87:e4:84:c4:80:16:b0:
         d2:49:fa:4d:be:ba:a3:2e:52:a4:7b:3a:f6:df:f9:ec:78:62:
         5c:37:a2:ac:30:77:a9:f8:4f:57:ad:ec:d7:50:ea:3c:4a:e2:
         18:65:3c:0d:4e:4c:7f:a6:1c:14:b2:ed:00:c3:de:c9:a9:7e:
         d2:01:1f:49:88:89:2a:1b:f7:27:b9:f0:84:14:a1:24:db:94:
         c4:6e:24:08:98:10:da:8a:0b:b4:31:2e:81:1f:dd:3c:40:c6:
         41:71:40:54:2c:db:a6:d9:2a:67:43:1d:38:9c:67:bc:b0:36:
         48:41:ca:fe:8b:f8:79:11:bd:1c:e0:b0:81:60:25:58:a9:16:
         f7:26:cf:1c:19:a0:75:43:61:e3:1f:a1:dc:78:5c:5f:09:82:
         af:b2:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:35 2026 by rpki-client