Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3139302e3231312e302e302f31382d3234203d3e203134313137.roa
File:                     3139302e3231312e302e302f31382d3234203d3e203134313137.roa (raw, json)
Hash identifier:          83YjyoPWp6c9KQn8zM6UtGlMYiTNH54papcxVPi0rb4=
Subject key identifier:   5B:69:71:92:F7:01:E6:B4:83:0D:9B:93:73:F9:43:20:1E:BE:2C:58
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       427C371FAAF447390939D28F447B626416E76635
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3139302e3231312e302e302f31382d3234203d3e203134313137.roa
Signing time:             Tue 02 Jun 2026 19:46:13 +0000
ROA not before:           Tue 02 Jun 2026 19:41:13 +0000
ROA not after:            Tue 01 Jun 2027 19:46:13 +0000
asID:                     14117
IP address blocks:        190.211.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 07:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7c:37:1f:aa:f4:47:39:09:39:d2:8f:44:7b:62:64:16:e7:66:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jun  2 19:41:13 2026 GMT
            Not After : Jun  1 19:46:13 2027 GMT
        Subject: CN=5B697192F701E6B4830D9B9373F943201EBE2C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:b9:8c:4b:8b:60:c6:65:4e:d5:49:96:63:
                    3c:4f:08:30:a5:dc:2a:db:a5:9c:fd:67:be:21:8c:
                    b8:ae:a6:5a:c8:4a:e0:85:5c:ac:99:32:1e:91:24:
                    04:9c:2c:63:7b:18:56:83:f5:22:44:04:b4:10:20:
                    a3:65:e4:2e:8f:f4:4d:db:b2:fd:bf:0d:e4:bd:d2:
                    59:5f:7e:5e:96:ff:cb:6e:0d:6f:59:b0:be:02:41:
                    f4:9d:56:95:77:3a:db:3c:06:c1:7f:2d:80:4f:27:
                    80:8e:39:2e:ac:c5:66:b2:4c:4d:ef:4f:8a:95:5e:
                    63:68:36:33:14:7c:1d:92:54:99:82:17:2a:f1:b7:
                    bb:f3:37:36:87:2b:1e:c1:1a:38:92:66:2f:d7:45:
                    22:b8:d0:97:fd:b8:c7:02:f6:4f:ba:52:32:d2:51:
                    3e:64:ec:20:1d:6d:25:9b:87:66:62:d4:17:38:31:
                    d8:f8:e9:8b:99:22:d1:d6:4e:b0:8a:55:1f:97:67:
                    1f:36:a5:e0:ab:69:4a:1f:fe:a1:56:05:f8:39:09:
                    a0:99:51:7e:77:16:76:4d:6d:5b:bb:51:4d:ca:6a:
                    e9:68:1f:25:45:29:1d:22:7d:7f:9c:80:a6:f4:f9:
                    8b:fe:0d:8e:65:ff:f8:92:43:da:2a:30:a5:0a:90:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:69:71:92:F7:01:E6:B4:83:0D:9B:93:73:F9:43:20:1E:BE:2C:58
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3139302e3231312e302e302f31382d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:db:c7:83:70:28:08:98:cb:84:e4:c2:c2:ed:10:77:7f:7e:
         f1:21:c5:86:6a:b5:32:fe:2c:0e:87:e5:42:8e:ed:d0:cf:a8:
         5b:20:1c:2f:9c:a9:a8:f3:2f:93:23:26:75:6e:38:36:20:a3:
         db:c0:41:d7:78:8b:2e:f9:29:8a:52:66:46:35:8d:76:01:4d:
         fd:13:26:c1:da:27:89:2d:25:1b:0a:d7:fe:ab:da:87:0a:f5:
         4d:7d:44:83:3d:c2:40:cc:54:7f:53:e7:c5:c4:f0:3d:82:33:
         77:8e:fd:70:a6:49:11:c0:c3:9f:29:b9:20:d3:39:56:a3:33:
         62:b5:07:40:43:f9:ad:53:d2:a1:79:fc:20:de:41:7d:43:78:
         90:31:52:69:d1:71:08:9b:75:5b:60:41:06:75:3a:6c:96:ff:
         89:7d:f1:f3:21:6f:5e:4c:b8:81:54:57:93:06:bc:3e:0d:e1:
         c9:f7:03:d6:23:89:7e:d4:36:25:15:90:dc:54:2a:69:9b:72:
         79:31:2a:9c:65:c0:3c:6e:65:99:4c:cd:d1:17:72:8f:50:09:
         44:f9:e0:aa:89:27:58:8b:22:99:99:97:17:b6:99:76:9a:62:
         c1:ef:d2:c5:10:d6:38:fb:20:75:1b:29:60:99:9b:a1:e6:8a:
         e6:67:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:09 2026 by rpki-client