Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32342d3234203d3e203532323633.roa
File:                     3139302e36312e3130382e302f32342d3234203d3e203532323633.roa (raw, json)
Hash identifier:          knKCIIdqKuwrIZDQRC2KdrCb0JXW7A7EhOl/yUrUGBU=
Subject key identifier:   1D:93:69:1F:22:41:50:1F:EC:B9:B3:34:A6:D6:2A:10:36:F2:35:62
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       1FBF63023CD38C9193CA4105FA35A94E2257DBA0
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32342d3234203d3e203532323633.roa
Signing time:             Wed 22 Apr 2026 22:05:00 +0000
ROA not before:           Wed 22 Apr 2026 22:00:00 +0000
ROA not after:            Wed 21 Apr 2027 22:05:00 +0000
asID:                     52263
IP address blocks:        190.61.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 May 2026 01:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bf:63:02:3c:d3:8c:91:93:ca:41:05:fa:35:a9:4e:22:57:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Apr 22 22:00:00 2026 GMT
            Not After : Apr 21 22:05:00 2027 GMT
        Subject: CN=1D93691F2241501FECB9B334A6D62A1036F23562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:33:5d:12:17:7b:c9:f4:9d:83:7b:ef:a2:
                    74:71:f7:fd:00:54:2d:f8:87:b5:d4:dc:48:9b:34:
                    4d:2a:cc:7b:c0:4c:c9:a5:71:3e:ce:58:5d:d5:cf:
                    6f:d9:31:8e:00:ae:13:a6:2f:c1:c6:a9:5b:97:9c:
                    09:36:4f:ba:3a:92:82:ac:75:05:6b:8b:bb:02:c1:
                    7a:f1:d1:f7:35:eb:fb:4e:f4:c6:8b:f2:15:5e:bf:
                    44:0e:4f:0c:79:29:57:a6:31:14:ff:2c:52:0b:db:
                    77:b9:d9:6e:fc:f3:51:bf:83:5e:ce:20:d8:aa:df:
                    b6:32:54:db:e0:00:8a:8d:93:fe:02:3d:ae:d8:71:
                    40:ce:a5:33:30:2b:d3:01:fc:4a:c4:0a:b5:91:26:
                    34:79:fd:9c:8d:a5:96:13:10:3d:8f:0e:ae:d4:7b:
                    68:6e:30:a1:3f:1e:f2:b1:a5:77:3f:13:d3:b8:a1:
                    4e:cf:20:d3:48:93:39:48:47:76:21:31:e8:36:5e:
                    4b:10:a5:1a:e6:ed:6a:f5:10:00:46:61:f4:e2:50:
                    eb:08:5d:e8:f6:15:16:39:78:da:70:a8:39:b1:1c:
                    56:ef:01:2c:a0:fa:2a:45:c7:a9:c5:6f:4d:f1:35:
                    a3:79:96:4e:87:77:e2:57:20:1d:4c:bc:43:6c:26:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:93:69:1F:22:41:50:1F:EC:B9:B3:34:A6:D6:2A:10:36:F2:35:62
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32342d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:d1:80:d1:fd:83:71:1c:16:78:af:9b:6d:bf:a8:d9:34:
         6b:f9:60:42:7a:54:d8:1e:c4:2b:7c:4f:42:6a:77:bb:c7:5e:
         d8:26:ae:0b:c9:f8:18:80:51:9b:7e:62:66:c3:81:99:b4:07:
         3d:34:c2:30:dd:01:f8:b1:db:64:9f:da:bb:71:a2:ca:59:be:
         4b:8e:21:66:0e:0d:11:46:75:e4:c0:fa:4b:e7:ff:86:85:b5:
         4d:cf:83:06:d0:26:72:7b:b5:e4:a7:7d:2d:8e:56:8b:dd:5e:
         2a:a1:20:06:07:d5:a6:e0:8b:60:60:0c:7e:31:6c:ce:a0:61:
         2a:1f:7e:84:5e:33:81:c3:f3:65:cd:e8:1c:46:0c:ac:bb:b7:
         98:a1:80:88:02:8b:d0:a9:2d:45:fb:4e:fa:53:18:fd:d8:87:
         17:0f:46:1f:ae:1c:76:53:71:15:f1:34:9f:2d:ac:7a:d2:8e:
         a7:2e:ad:8d:52:87:21:e7:4b:59:9d:a7:04:a0:49:6f:dc:3f:
         2e:07:20:52:d1:2d:26:eb:86:ac:e8:8c:f7:b7:e3:34:2f:a9:
         f0:72:d2:81:f8:6d:90:77:38:d7:49:8c:e1:8b:81:27:41:25:
         eb:c1:be:f1:c3:fb:7e:9e:a0:8e:36:7a:56:b6:53:f2:07:e9:
         f3:f3:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:22:07 2026 by rpki-client