Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3238203d3e203532323733.roa
File:                     3139302e3131322e33322e302f32312d3238203d3e203532323733.roa (raw, json)
Hash identifier:          YVxgEixkxRK+t/4+ymG7gbThf9daG/Eb970H5QueXc4=
Subject key identifier:   B1:83:5B:68:BA:5F:4D:D5:20:28:B5:86:9F:D9:15:F5:96:C0:AA:06
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       143FA6D076A014DC33CD00DFA7D12A6F128C1EA2
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3238203d3e203532323733.roa
Signing time:             Tue 31 Mar 2026 16:05:00 +0000
ROA not before:           Tue 31 Mar 2026 16:00:00 +0000
ROA not after:            Tue 30 Mar 2027 16:05:00 +0000
asID:                     52273
IP address blocks:        190.112.32.0/21 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 19:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3f:a6:d0:76:a0:14:dc:33:cd:00:df:a7:d1:2a:6f:12:8c:1e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Mar 31 16:00:00 2026 GMT
            Not After : Mar 30 16:05:00 2027 GMT
        Subject: CN=B1835B68BA5F4DD52028B5869FD915F596C0AA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:3d:a4:ca:82:a0:a6:c4:c4:70:bc:3a:1f:
                    96:26:6a:10:16:99:e0:ac:1d:41:d9:e8:67:38:3e:
                    5a:85:58:e9:92:cb:d1:1e:fe:02:be:54:09:26:8f:
                    23:08:18:a2:fb:61:32:c2:53:e5:53:8a:10:aa:0f:
                    d1:ab:82:a4:82:82:02:a5:a2:ff:f9:52:d5:92:aa:
                    c5:03:df:8a:03:0d:f2:b2:ce:6f:d9:9a:b5:82:d1:
                    7e:5b:7d:75:4e:90:55:68:d6:5a:1c:bd:88:d8:45:
                    9c:76:74:95:95:22:11:8b:c6:ca:d8:2a:4f:43:d1:
                    dc:96:04:0a:ec:70:68:c9:4e:a0:e6:f4:f7:7a:ed:
                    58:fa:ff:3d:54:16:be:ea:1c:89:93:f1:97:16:ff:
                    0a:98:29:af:69:1f:2f:db:19:be:d1:d8:67:73:76:
                    95:48:9d:27:46:31:27:82:c0:92:fe:17:1c:b3:b2:
                    99:60:2e:7e:f9:c8:6e:9a:a8:d1:cb:23:9e:e6:50:
                    17:5e:80:d2:69:a4:a0:75:f8:33:46:3c:e2:cf:33:
                    b3:05:b6:0f:2d:6a:69:39:f1:3e:b2:50:00:7f:05:
                    5c:0c:ca:ae:52:42:04:3b:5a:27:d5:50:1e:f3:e4:
                    d2:fc:19:8c:8e:52:c4:53:b1:8d:54:b3:8b:df:a8:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:5B:68:BA:5F:4D:D5:20:28:B5:86:9F:D9:15:F5:96:C0:AA:06
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3238203d3e203532323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:31:7e:5e:08:02:8b:e1:64:99:32:85:39:ee:56:6f:4a:e2:
         e8:69:6a:7c:39:f0:6d:47:c1:63:63:17:6c:4a:64:5f:cc:e8:
         9a:2f:96:63:47:f4:72:21:4e:3b:6e:ea:d6:f0:4f:4a:a9:e4:
         62:ef:f2:25:f1:af:f3:02:eb:55:b8:85:26:4e:00:51:a7:45:
         c0:b4:78:60:f1:4c:a2:85:1c:6e:06:00:ff:24:54:83:93:75:
         dd:c9:63:80:d1:09:20:9b:28:07:e3:5c:2f:8d:a7:d8:ad:7a:
         e3:3a:18:d5:11:60:24:2b:c4:d5:62:93:66:62:86:8b:05:04:
         ea:87:5f:95:39:e4:9e:65:2d:0e:15:5c:40:43:f2:ca:47:d7:
         71:ee:45:07:c8:95:1d:18:9b:b4:db:41:de:96:8a:e6:8e:97:
         61:ce:23:14:d2:03:9b:85:8a:2e:d7:6d:ab:23:bb:ca:cd:33:
         40:97:c4:70:e8:c3:3c:d5:54:7d:a8:38:36:12:7d:62:ec:86:
         82:78:36:bd:3f:f0:4c:af:01:1c:dc:98:35:d8:c5:98:a3:44:
         94:63:ae:c3:67:df:9e:5f:ca:a4:9e:07:ee:39:96:25:75:4b:
         b0:dd:26:d6:49:29:03:de:34:e2:e2:84:46:53:bd:87:4e:d7:
         cd:ee:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:32:42 2026 by rpki-client