Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3232203d3e203532343638.roa
File:                     3139302e3130322e3132302e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          KbKc60tiSiIFZt8gDCXXBRF4OYp+wVzLc/hrzX+iJrY=
Subject key identifier:   6D:15:43:72:F5:74:3B:52:C3:0A:6F:66:6A:48:B2:DC:18:2F:00:C3
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       4EA76649FB735D61781AF6A7244C6AF8EE1D468F
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3232203d3e203532343638.roa
Signing time:             Sat 29 Aug 2026 03:00:08 +0000
ROA not before:           Sat 29 Aug 2026 02:55:08 +0000
ROA not after:            Sat 28 Aug 2027 03:00:08 +0000
asID:                     52468
IP address blocks:        190.102.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a7:66:49:fb:73:5d:61:78:1a:f6:a7:24:4c:6a:f8:ee:1d:46:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:08 2026 GMT
            Not After : Aug 28 03:00:08 2027 GMT
        Subject: CN=6D154372F5743B52C30A6F666A48B2DC182F00C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:29:36:45:c7:1b:78:e4:34:89:82:10:7e:
                    9f:89:67:d1:1b:5b:3e:04:be:fd:11:82:d8:88:ba:
                    52:1b:29:c2:77:e5:03:c2:1f:93:ed:cc:c1:e3:ea:
                    0e:89:88:65:fb:16:4f:48:1b:14:61:62:86:f2:b9:
                    1d:f9:22:40:e9:c9:64:91:33:01:e4:81:b8:33:af:
                    21:7d:61:0f:1f:12:8c:06:a7:41:e8:68:7d:c6:48:
                    09:8a:e5:c1:62:ab:a1:0a:57:c8:25:54:c8:e3:40:
                    7f:81:36:aa:ac:da:bf:95:b0:a9:a8:c2:de:3a:c1:
                    98:d2:6d:38:83:c1:4f:b9:f2:0e:3e:08:31:00:40:
                    3c:90:32:12:27:70:ec:4f:6c:ef:05:44:87:7f:19:
                    99:ae:45:fb:8a:78:ab:31:dc:cd:77:ee:4c:a5:ad:
                    4d:fe:24:8f:7c:3c:0b:60:fb:9f:a6:df:5f:1d:a6:
                    39:99:72:75:84:87:16:f9:0d:52:ef:00:e8:21:ef:
                    30:93:0c:1e:18:76:d5:8d:3d:61:9b:7c:d5:b1:c8:
                    26:21:15:d5:1f:3b:e7:66:69:a5:0a:d6:b4:4d:0a:
                    78:b8:ba:c0:94:57:73:bf:2d:a1:eb:a8:9b:19:b5:
                    22:3f:f9:b5:06:3d:e3:13:d8:cf:5b:52:c5:19:1c:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:43:72:F5:74:3B:52:C3:0A:6F:66:6A:48:B2:DC:18:2F:00:C3
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:36:d5:b5:f6:22:42:13:4d:a7:63:6d:00:52:4d:09:e9:9a:
         56:38:dd:d2:98:1d:3b:f1:52:78:03:d4:29:ba:4f:eb:f4:1c:
         23:e2:e6:3c:03:2e:bf:ad:a5:71:db:ff:71:71:93:72:32:8b:
         7d:7e:7a:10:5c:13:df:9f:53:ce:7e:eb:ca:12:56:ce:4f:15:
         35:8f:38:91:87:3e:b5:77:4c:c2:4a:97:51:03:d1:c9:fd:6b:
         b4:f3:5e:27:71:c4:df:ec:ce:ae:00:8b:38:25:ce:4b:82:5d:
         c4:c4:10:9e:9a:42:0b:1f:4a:a4:9e:2c:10:77:18:e2:12:ac:
         a5:8f:5a:a9:fd:aa:b8:44:55:e3:53:98:14:8e:70:9a:a0:91:
         61:ef:66:f1:3b:c7:5a:36:f4:73:24:4b:10:36:72:7e:82:78:
         b0:02:56:b7:80:47:2f:66:e2:3e:48:82:1a:6f:d4:48:f6:40:
         f0:7e:e9:a9:90:5f:6e:19:8b:7f:59:06:c7:db:7c:5a:29:77:
         2f:52:55:5c:56:33:5f:f0:32:10:2b:c0:ef:d8:e6:ae:8e:27:
         a6:26:da:8f:c6:3a:e8:51:7d:e6:c7:d4:e3:71:6a:dd:2b:e9:
         2f:e6:9c:15:e3:63:dc:a0:19:49:49:ff:ff:92:fe:31:d5:64:
         3c:98:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:50:51 2026 by rpki-client