Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32332d3233203d3e203532323633.roa
File:                     3139302e36312e3130382e302f32332d3233203d3e203532323633.roa (raw, json)
Hash identifier:          4pZwXZIHnw1QdZ5WVRCA2J0eH8A/NjqmvKsiw4GVGFc=
Subject key identifier:   C6:67:B2:49:7B:51:FC:52:68:57:0C:69:84:8E:2A:08:BB:6F:36:CF
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       12CFF1FC0ABB9C279EA84E775FBDB7F109A8E4CD
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32332d3233203d3e203532323633.roa
Signing time:             Wed 22 Apr 2026 22:05:00 +0000
ROA not before:           Wed 22 Apr 2026 22:00:00 +0000
ROA not after:            Wed 21 Apr 2027 22:05:00 +0000
asID:                     52263
IP address blocks:        190.61.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 May 2026 01:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cf:f1:fc:0a:bb:9c:27:9e:a8:4e:77:5f:bd:b7:f1:09:a8:e4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Apr 22 22:00:00 2026 GMT
            Not After : Apr 21 22:05:00 2027 GMT
        Subject: CN=C667B2497B51FC5268570C69848E2A08BB6F36CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:95:33:56:e7:6c:e7:a6:e3:16:e7:7d:e2:
                    7b:7a:53:94:67:9a:67:aa:b8:16:5b:0d:b6:81:47:
                    60:ee:61:d9:33:89:59:0d:d4:0f:1f:aa:0b:40:ab:
                    71:28:fd:04:79:3d:0b:eb:b5:4d:4e:3c:74:bf:e8:
                    29:83:a4:e4:25:a9:c7:75:f6:ca:66:36:9b:56:d9:
                    b8:ef:0a:7c:81:43:f6:d9:09:5f:05:cf:70:71:e9:
                    bd:ee:52:e0:78:65:df:ea:b3:2e:50:bc:d8:e6:93:
                    e1:77:07:ef:7c:6b:89:ab:00:34:f5:0f:4d:1b:65:
                    57:1a:b1:64:0f:7c:c8:3a:fa:d8:60:a0:31:29:a7:
                    84:e0:38:d6:dc:8c:f7:f3:2b:83:72:99:c6:fb:6e:
                    77:07:15:26:0f:ae:06:e0:fa:5b:ad:88:95:61:ba:
                    5f:3a:d5:a8:6c:53:27:24:24:f6:ef:03:4c:c8:41:
                    00:d0:73:9d:1d:38:8a:98:6f:c4:e9:f1:dc:55:ac:
                    57:d3:8c:33:67:ed:69:1b:66:7c:57:4b:04:f2:a7:
                    1f:79:8b:f5:a2:9a:46:97:13:3d:91:59:78:31:17:
                    22:a6:a5:ca:b7:73:0c:26:22:32:31:e0:39:8d:d1:
                    16:35:2c:1f:62:88:22:e5:cb:f9:39:57:2f:c9:06:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:B2:49:7B:51:FC:52:68:57:0C:69:84:8E:2A:08:BB:6F:36:CF
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32332d3233203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:67:de:32:be:c1:35:47:55:a6:39:d9:d8:15:49:cb:33:
         4a:06:f4:c8:00:68:10:1d:a7:d9:5b:5b:3c:55:c9:79:99:d4:
         5d:d2:04:6a:34:04:22:e4:6d:6c:67:e7:9d:fb:0d:e2:8d:d0:
         54:65:20:0c:58:8e:55:9d:cc:9d:d4:ea:0e:ec:22:9b:a3:f4:
         96:f9:59:e9:9a:e6:62:1a:e1:c9:15:36:81:a5:15:34:ea:fc:
         3f:48:83:cd:d8:50:d0:b0:1f:81:2a:31:ac:99:96:95:d3:30:
         03:a5:72:ce:4d:27:15:e8:60:a2:d7:19:fd:4e:6b:f7:e4:5c:
         6a:d2:d6:13:ef:55:43:59:69:d1:5e:35:20:4a:d5:45:f1:13:
         3f:f5:b9:29:b7:c3:7d:95:cc:b6:25:72:3c:17:24:89:87:4a:
         85:ec:43:28:55:eb:c7:6c:08:25:6f:a7:5f:ab:26:4a:19:4f:
         81:68:64:ca:88:26:36:36:12:d0:74:1a:b7:5e:67:cc:b4:d8:
         96:d3:ec:1b:c5:b1:83:18:cc:63:bc:60:bf:11:80:5c:3e:64:
         f2:fc:b6:79:bf:9d:3b:0c:c0:3e:42:46:74:51:bd:43:3b:e6:
         9e:4b:ad:3b:ca:d7:5c:f3:d0:d6:7b:b1:00:41:0a:5a:4b:65:
         61:14:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:19:39 2026 by rpki-client