Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa
File:                     3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa (raw, json)
Hash identifier:          nCXTEoMdxiEOaPlFrIuLdigxFz0nxUQDKADC5ou4Ssk=
Subject key identifier:   03:89:73:21:7C:C6:F4:50:B3:A4:E5:EE:18:4E:DC:ED:2F:62:EA:00
Certificate issuer:       /CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
Certificate serial:       28A379273F0CE462A26FB1D616D99CA78ADFFFA2
Authority key identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa
Signing time:             Tue 06 Jan 2026 19:11:22 +0000
ROA not before:           Tue 06 Jan 2026 19:06:22 +0000
ROA not after:            Tue 05 Jan 2027 19:11:22 +0000
asID:                     267853
IP address blocks:        190.211.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a3:79:27:3f:0c:e4:62:a2:6f:b1:d6:16:d9:9c:a7:8a:df:ff:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
        Validity
            Not Before: Jan  6 19:06:22 2026 GMT
            Not After : Jan  5 19:11:22 2027 GMT
        Subject: CN=038973217CC6F450B3A4E5EE184EDCED2F62EA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:81:c6:5e:db:65:93:33:53:f7:d2:a3:d2:
                    03:af:6e:b2:5a:74:95:32:c3:6f:db:ca:19:dd:a3:
                    90:8b:53:1a:23:ac:5b:4b:c1:2d:f9:f8:40:e7:09:
                    8e:97:5d:cf:8b:50:58:53:dd:90:27:a7:d3:e0:6c:
                    6a:a0:39:a6:cc:29:42:dc:fc:09:17:5b:19:8b:5a:
                    3d:ee:bf:c3:af:b2:bf:4a:bf:e7:37:8e:1f:a5:d3:
                    ad:6c:3d:e6:eb:b2:13:a2:6b:3b:39:43:5d:17:44:
                    95:f0:ad:05:f8:65:07:91:4f:3c:dd:71:46:36:9e:
                    04:2c:f3:e8:3c:d9:0d:bc:cf:28:0b:ee:c1:7b:77:
                    90:56:9a:b4:db:7c:b2:60:84:ff:97:f5:e6:3a:26:
                    12:3d:ac:cf:aa:f9:3b:20:7e:02:0e:8b:a4:55:3c:
                    d2:80:56:eb:fe:17:55:9d:2a:0d:dd:c0:8a:0b:71:
                    27:a9:24:fe:65:a2:df:fc:68:d8:18:01:9a:aa:2a:
                    65:72:b2:bb:1f:d9:cc:a6:ad:c4:0b:de:9e:b8:94:
                    a2:55:44:13:64:39:ab:9a:09:9d:ca:0f:8d:68:5b:
                    f4:0d:52:5f:be:00:40:0c:bd:1b:9f:08:62:63:24:
                    26:41:55:61:93:c6:c7:3b:c5:3c:15:28:17:57:bf:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:73:21:7C:C6:F4:50:B3:A4:E5:EE:18:4E:DC:ED:2F:62:EA:00
            X509v3 Authority Key Identifier:
                keyid:2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:f9:04:a4:d1:f0:d4:df:37:f5:7a:3c:4b:76:1f:99:b2:ba:
         f4:d9:41:63:77:98:c5:e5:c9:38:f2:40:6d:a9:31:89:47:bd:
         7e:20:cf:e3:81:0f:9e:47:44:79:17:7b:60:e9:e1:26:dd:d8:
         36:b0:7f:94:ea:08:4b:97:01:dd:bb:b8:b9:62:40:08:12:49:
         07:f4:26:b5:28:3d:c3:b9:b2:61:2f:1b:05:6b:1f:45:8c:7a:
         be:4f:26:72:96:38:c1:4a:94:49:f1:a6:8e:28:a3:e7:22:c2:
         5d:43:d2:6e:dc:70:b6:8c:d3:31:5a:05:0f:f5:33:f1:28:74:
         a3:5d:13:82:30:8e:73:27:58:a0:7f:ab:c6:0b:db:90:a7:bb:
         de:52:97:67:b0:5e:12:46:5f:23:3b:36:8f:0d:fe:45:4e:93:
         bc:d9:84:f3:dc:7b:70:f0:87:db:42:bf:75:ce:09:a7:de:ba:
         e7:95:69:1c:27:f6:82:a2:0c:99:a1:f9:c7:25:7d:e0:22:5f:
         95:f7:06:fe:68:7f:35:72:7b:24:5a:18:33:c6:a9:f2:9e:95:
         dc:1f:28:a8:cd:9e:2c:a7:87:38:01:c8:17:38:a9:6b:a8:8b:
         d4:77:d4:bc:49:45:d4:8b:24:48:a8:9c:20:ce:a3:a2:ca:05:
         98:42:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 20:19:46 2026 by rpki-client