Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e32312e302f32342d3234203d3e20323735303835.roa
File:                     3139302e36312e32312e302f32342d3234203d3e20323735303835.roa (raw, json)
Hash identifier:          NLkMgaUIrXrrPmywiHBJ5yjCT70OzfEj5G9lumhPtXM=
Subject key identifier:   E7:86:3A:FF:3E:26:FA:94:19:D5:E8:C2:FE:26:D2:7F:A0:D9:3C:92
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6072D1C77A9A1FDC1D5AB4741F40897381FAF377
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e32312e302f32342d3234203d3e20323735303835.roa
Signing time:             Wed 28 Oct 2026 21:15:00 +0000
ROA not before:           Wed 28 Oct 2026 21:10:00 +0000
ROA not after:            Wed 27 Oct 2027 21:15:00 +0000
asID:                     275085
IP address blocks:        190.61.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 06:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:72:d1:c7:7a:9a:1f:dc:1d:5a:b4:74:1f:40:89:73:81:fa:f3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Oct 28 21:10:00 2026 GMT
            Not After : Oct 27 21:15:00 2027 GMT
        Subject: CN=E7863AFF3E26FA9419D5E8C2FE26D27FA0D93C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:ca:05:62:b6:01:ef:05:a7:45:27:08:1b:
                    a3:b4:76:92:7f:60:4c:b8:6b:4a:8e:d1:3a:2e:12:
                    0f:bb:c0:bb:c0:af:79:29:e9:de:6d:23:cc:99:01:
                    6d:66:3c:2a:cd:ab:e6:6b:94:be:28:84:02:d8:be:
                    e4:4e:55:78:0d:e1:b7:5e:bb:d3:31:8a:de:3a:f0:
                    97:67:1c:70:1c:08:f4:b6:8e:98:31:1d:fc:c5:72:
                    a3:81:01:00:31:42:fa:07:50:c2:ac:83:18:1e:4a:
                    5d:41:15:93:00:e0:52:43:91:4e:bc:ee:5d:d0:a5:
                    f6:e5:cd:3d:50:0d:9b:9d:b0:92:7f:7f:47:c4:41:
                    64:ac:04:a7:b9:67:d9:f8:07:7a:d4:66:e0:7c:05:
                    0e:19:33:2f:e5:76:b0:15:84:96:54:88:68:b1:6a:
                    81:d0:9a:c6:e1:0f:7f:a8:a7:e7:74:3c:92:33:96:
                    61:70:27:d7:d4:51:ce:4c:43:05:ac:c4:89:50:7d:
                    d3:08:99:eb:11:62:27:49:2a:6c:ad:27:c4:c8:69:
                    03:39:b2:5f:6a:b0:c7:b4:45:ac:98:34:07:f4:1c:
                    a9:83:f6:b2:c2:5a:5b:7c:c3:10:8a:06:3c:db:b7:
                    1a:c5:7e:be:04:3e:aa:f8:3a:86:55:72:46:b4:1b:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:3A:FF:3E:26:FA:94:19:D5:E8:C2:FE:26:D2:7F:A0:D9:3C:92
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e32312e302f32342d3234203d3e20323735303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:7c:68:63:8a:17:f7:c8:9e:fd:67:fe:26:18:7b:c9:b2:
         37:0d:2d:81:26:19:13:14:ed:22:a1:31:c0:5b:1a:7b:f9:08:
         4f:3c:a1:c8:f6:46:60:f7:11:d1:cf:3e:41:77:4a:9e:46:6e:
         18:73:ed:24:ec:b5:bd:0b:c9:f9:54:ff:37:b4:e0:d8:4f:bd:
         b0:39:dc:75:81:47:83:f1:ec:ac:dd:5d:02:e7:13:7c:a3:1e:
         20:72:56:ff:8f:01:3d:15:5b:86:b6:70:16:3d:d6:b8:4d:10:
         60:22:f2:b4:84:c4:0b:b3:04:27:60:c9:ed:84:96:03:4e:0d:
         66:3a:ec:7b:98:7a:4b:c4:0b:46:da:43:aa:66:21:cc:a9:90:
         40:ed:2c:a3:1a:32:16:d6:e7:ca:31:f2:68:2a:31:90:25:bd:
         fd:ca:c9:f3:fa:83:31:4b:cb:8d:5c:7b:de:77:cd:dc:cf:dd:
         f7:59:35:e6:39:50:c0:9e:96:e6:80:ba:06:c6:e9:13:3f:ee:
         a0:20:4d:3d:49:d7:02:11:95:94:27:15:6f:f1:c9:25:4b:91:
         cb:d4:3b:2d:68:6f:f7:e5:07:c7:30:0c:cd:74:c7:d1:5c:1b:
         75:fd:ea:7b:e3:1b:0f:5e:4e:1d:dc:be:68:e6:5d:c7:32:e8:
         39:29:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:08:11 2026 by rpki-client