Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132372e302f32342d3234203d3e2037313935.roa
File:                     3139302e3130322e3132372e302f32342d3234203d3e2037313935.roa (raw, json)
Hash identifier:          ZEl18qk+mMMprFNeZKBj7jqwRqtltHZq+tD+igRiJMQ=
Subject key identifier:   3D:56:3C:25:6D:C6:4A:56:68:DB:E9:43:5B:58:5F:61:86:CC:EF:CF
Certificate issuer:       /CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
Certificate serial:       23E01E8E182469B33892A3F9266028350578DBB3
Authority key identifier: EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132372e302f32342d3234203d3e2037313935.roa
Signing time:             Fri 28 Aug 2026 13:45:00 +0000
ROA not before:           Fri 28 Aug 2026 13:40:00 +0000
ROA not after:            Fri 27 Aug 2027 13:45:00 +0000
asID:                     7195
IP address blocks:        190.102.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e0:1e:8e:18:24:69:b3:38:92:a3:f9:26:60:28:35:05:78:db:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
        Validity
            Not Before: Aug 28 13:40:00 2026 GMT
            Not After : Aug 27 13:45:00 2027 GMT
        Subject: CN=3D563C256DC64A5668DBE9435B585F6186CCEFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:f5:48:8d:a2:b3:6c:98:f0:36:85:a1:7e:
                    c4:4c:43:0c:8f:a1:db:27:aa:4a:af:65:e5:b8:46:
                    63:9f:54:b1:70:82:5a:da:58:21:27:79:c3:07:10:
                    d3:9f:44:55:c3:19:83:50:38:1f:65:88:44:21:8c:
                    ee:fa:83:7c:3a:1a:9d:6c:44:aa:aa:52:27:b3:88:
                    c7:ed:7a:0f:86:8b:32:01:95:f6:df:ed:b8:c5:0f:
                    6d:c8:be:dc:20:9c:aa:a1:3b:7e:5d:26:fe:da:cb:
                    93:9c:ff:65:1b:62:ce:76:da:ea:e0:e8:d5:7e:30:
                    92:c9:22:1c:ee:58:d1:5b:97:5b:a1:ac:05:13:ce:
                    fa:00:1f:91:13:8c:ee:f7:d1:83:ba:f7:bd:97:1f:
                    e1:3e:8d:d7:e1:c9:f0:53:61:88:af:8d:12:76:0a:
                    90:02:7a:11:39:8b:cc:e3:49:62:ff:e3:e3:74:82:
                    cc:4c:10:bf:9c:91:df:08:7e:6a:e8:ad:b4:d6:4f:
                    f8:ed:c3:c3:4e:78:a4:a9:7e:63:f8:27:74:61:67:
                    62:9a:14:2c:2f:8d:9f:dd:47:e5:cd:03:68:c9:1f:
                    bc:d2:9f:86:1a:94:37:df:34:38:35:52:2b:43:be:
                    b9:03:7b:73:1d:4a:cb:ae:4c:c7:27:61:7f:a5:3e:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:3C:25:6D:C6:4A:56:68:DB:E9:43:5B:58:5F:61:86:CC:EF:CF
            X509v3 Authority Key Identifier:
                keyid:EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/3139302e3130322e3132372e302f32342d3234203d3e2037313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:fd:04:97:ac:3c:af:15:98:51:b0:35:55:60:6d:25:63:
         e0:e1:43:10:75:c0:a5:ba:0b:6e:ae:37:6d:a5:6c:ce:53:72:
         e9:54:79:42:bd:85:76:71:7e:05:9e:ea:f6:4d:5d:83:8a:e7:
         10:73:9a:3b:87:c3:42:9f:6b:25:c0:c7:36:08:0c:d7:89:9a:
         29:31:bc:5b:d6:d6:24:84:88:a3:d7:40:95:e3:4b:3d:c7:6e:
         41:ab:3b:cc:49:87:d9:af:db:67:6f:ca:36:50:ec:c4:68:5e:
         9c:29:18:8e:d1:4f:af:f1:be:d8:c7:9c:70:c4:c1:e9:6e:db:
         32:83:7f:43:e2:89:85:fe:16:37:73:4f:bb:29:65:b4:b2:07:
         42:0e:61:41:fc:39:b7:d0:fc:02:56:07:e2:7d:3c:39:74:c8:
         82:61:8e:7e:99:c9:bc:95:ef:c7:6d:7b:4a:a3:3d:b0:c9:6f:
         dd:1b:3d:63:26:06:14:00:25:da:0c:19:36:de:0d:24:52:ed:
         8a:60:2e:73:c2:b0:61:bb:7a:87:ee:ef:4b:24:47:ee:a0:ae:
         5a:db:a1:07:e4:2f:f0:55:df:8c:f9:89:df:0f:c6:59:de:5e:
         5c:a9:c8:70:a2:73:17:32:9c:20:82:aa:9f:53:86:a7:6f:f1:
         f4:80:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:36 2026 by rpki-client