Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/3139302e392e36382e302f32332d3234203d3e20323732393832.roa
File:                     3139302e392e36382e302f32332d3234203d3e20323732393832.roa (raw, json)
Hash identifier:          c+1TsB7NbQNHsH562OuPIlMNRPzKm/a2vRF8jqyRqlY=
Subject key identifier:   75:FA:71:7C:2B:90:0A:78:8F:68:32:4D:FE:B7:11:BF:5B:92:39:C0
Certificate issuer:       /CN=E99B22CCF68622142CA1F92E8A488B9DC2B16E33
Certificate serial:       0CD68809513960D993C5B8EE924251280B420E3C
Authority key identifier: E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/3139302e392e36382e302f32332d3234203d3e20323732393832.roa
Signing time:             Thu 23 Oct 2025 10:50:00 +0000
ROA not before:           Thu 23 Oct 2025 10:45:00 +0000
ROA not after:            Thu 22 Oct 2026 10:50:00 +0000
asID:                     272982
IP address blocks:        190.9.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d6:88:09:51:39:60:d9:93:c5:b8:ee:92:42:51:28:0b:42:0e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99B22CCF68622142CA1F92E8A488B9DC2B16E33
        Validity
            Not Before: Oct 23 10:45:00 2025 GMT
            Not After : Oct 22 10:50:00 2026 GMT
        Subject: CN=75FA717C2B900A788F68324DFEB711BF5B9239C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:72:d2:c2:71:2c:82:29:9c:34:2f:5f:1e:
                    f3:91:09:b0:43:ef:22:d1:70:b2:f1:37:4d:23:ab:
                    b1:76:d3:6c:6c:86:3d:e1:ee:c0:65:5f:d4:f0:2a:
                    65:f1:ae:8f:98:46:17:92:c9:6f:f7:72:19:a0:df:
                    a5:6c:00:ae:52:01:fb:76:85:2a:49:d8:3b:f1:fc:
                    3b:9c:06:97:ab:f5:e8:97:7f:95:75:bc:0a:7c:d4:
                    0d:8b:cb:21:80:71:8c:6a:3e:a9:6a:ac:5f:ce:12:
                    b1:2c:97:30:ca:e4:7e:8a:51:7b:e3:3d:2b:b6:28:
                    5f:70:74:57:bc:36:c7:3f:2c:aa:f3:2b:8d:26:be:
                    8e:e0:23:c4:79:91:c2:d2:78:cb:ea:f2:eb:de:47:
                    19:f8:82:14:0d:2c:db:c6:58:f7:b0:bc:6c:c8:3e:
                    f7:cc:cb:00:76:7c:a5:22:a5:2a:e8:44:16:98:46:
                    2e:f3:bb:52:c3:1c:0f:75:de:75:74:46:4b:43:86:
                    a4:72:b1:28:95:38:40:0b:3a:4c:86:b7:fa:af:72:
                    3f:5b:d8:ac:93:87:bc:ad:9f:8a:f2:5d:c4:c1:20:
                    c6:17:13:fd:bc:a8:2d:52:60:bd:01:46:a5:5a:f0:
                    a9:1f:13:cb:b0:80:fa:8f:1a:09:ed:79:37:59:45:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:71:7C:2B:90:0A:78:8F:68:32:4D:FE:B7:11:BF:5B:92:39:C0
            X509v3 Authority Key Identifier:
                keyid:E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/3139302e392e36382e302f32332d3234203d3e20323732393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:93:e1:95:8f:b2:25:b6:77:9b:71:35:e9:7a:18:c3:01:a2:
         62:e8:3c:1e:13:a3:cc:a0:5d:a6:ad:92:37:8a:b4:ac:5c:e8:
         f5:dd:e6:f1:5a:83:e0:5f:79:0a:73:54:6d:95:e3:03:e5:fd:
         de:07:13:df:10:21:b2:f5:73:dc:c5:7b:f0:87:37:0a:df:7d:
         1e:f5:80:97:d8:ba:df:89:f1:c2:77:e1:df:d3:df:60:42:49:
         a0:7e:9f:18:87:0b:2d:3d:e9:8c:2b:c3:e1:47:cb:6e:9d:2a:
         11:d6:c8:c2:66:85:72:e4:df:91:1d:91:d2:3d:96:ae:47:81:
         01:c2:cb:88:c8:ea:e3:fe:59:81:38:69:d7:9c:f5:0d:ec:fb:
         bc:2c:ad:f0:4e:a0:54:98:e2:f3:33:b6:5f:dc:5a:4a:01:1b:
         0b:a6:f6:f1:ac:48:f3:f6:fe:3b:79:8d:7d:80:3e:81:da:a9:
         4e:3a:54:07:c5:9a:7a:29:68:ed:cf:ab:74:0a:21:23:cc:4f:
         db:41:be:8b:7e:44:2a:08:fb:9d:5a:2d:98:db:77:61:97:a9:
         01:07:e2:c0:b5:3b:66:86:13:27:50:31:5a:93:a8:43:76:05:
         e3:9e:6e:65:67:3c:6e:22:30:b4:17:e5:a6:4a:a1:13:04:96:
         b9:91:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:23 2025 by rpki-client