Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32322d3234203d3e203235363230.roa
File:                     3139322e3232332e39362e302f32322d3234203d3e203235363230.roa (raw, json)
Hash identifier:          PB960pUaWbUwafDVXGY9SlQiowmKgId7CJBZVLsA07M=
Subject key identifier:   AB:90:A4:37:D0:71:8D:79:1C:40:A6:96:82:A3:EA:5B:1F:BC:6F:52
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       4495AAEB18B9029FADC504A8C2CA37F094BA1878
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32322d3234203d3e203235363230.roa
Signing time:             Wed 16 Jul 2025 17:35:00 +0000
ROA not before:           Wed 16 Jul 2025 17:30:00 +0000
ROA not after:            Wed 15 Jul 2026 17:35:00 +0000
asID:                     25620
IP address blocks:        192.223.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:95:aa:eb:18:b9:02:9f:ad:c5:04:a8:c2:ca:37:f0:94:ba:18:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jul 16 17:30:00 2025 GMT
            Not After : Jul 15 17:35:00 2026 GMT
        Subject: CN=AB90A437D0718D791C40A69682A3EA5B1FBC6F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:73:c4:0d:73:c6:ca:d0:6a:be:4d:40:62:
                    03:84:b4:cd:6e:02:80:21:78:26:4d:8b:ae:bd:ae:
                    56:78:75:af:2b:49:26:9d:16:aa:63:06:ab:80:76:
                    00:e3:9c:4c:16:9b:d6:69:8c:dc:d3:43:e2:97:06:
                    c6:67:84:dd:b9:2b:81:67:f0:b3:1f:1e:1f:bf:3d:
                    21:ae:2a:46:36:86:4b:34:99:82:59:d5:fb:de:d9:
                    f0:eb:b5:0e:c6:2e:8d:93:61:83:03:e5:82:95:7c:
                    7d:79:44:a6:48:ac:38:fc:1f:db:55:5d:d2:62:94:
                    ac:5d:d3:f5:03:66:d3:f1:0d:a5:2f:f0:51:4e:79:
                    8a:4e:1c:e3:f8:38:b3:da:18:7f:dc:27:da:89:6b:
                    0e:cb:b0:a3:e2:4c:5d:1c:f9:32:28:9f:ca:f8:96:
                    e8:c8:d5:0a:f6:11:cb:73:f8:8e:c9:36:76:c4:32:
                    b9:f2:8d:45:c8:21:a6:38:74:f5:b7:94:8d:07:7a:
                    d6:37:39:18:09:2c:8e:58:19:7e:3c:61:1c:e6:9a:
                    cb:6c:28:99:90:8f:2c:90:fa:3f:38:95:60:58:5d:
                    a7:3f:69:ea:d1:c7:18:ea:3a:4f:8a:d7:51:a4:8d:
                    dc:ab:fe:72:2d:91:e4:58:b3:6b:d3:52:40:63:28:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:A4:37:D0:71:8D:79:1C:40:A6:96:82:A3:EA:5B:1F:BC:6F:52
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32322d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:70:b6:34:16:98:50:b4:83:84:d0:20:ca:c0:04:77:c1:53:
         c8:93:9e:3a:0f:7f:e3:29:9f:48:fb:e0:84:ba:98:5e:a6:2c:
         6c:04:bf:c4:b5:ec:bd:93:0a:5a:d6:dc:59:71:9c:24:97:e4:
         f2:87:30:87:38:4e:4e:d2:1a:4f:ab:8a:ec:79:0e:a5:61:5e:
         8b:d1:cd:03:e1:15:c7:20:e1:02:3b:22:07:90:0b:2c:47:96:
         00:cf:1c:42:79:81:c3:8e:f9:4c:51:9c:5a:4a:56:e1:ed:9e:
         91:c2:99:d8:0b:ca:72:33:00:5f:3e:95:d8:17:92:aa:f0:e9:
         52:7c:bc:74:89:7d:3a:41:49:d1:d7:02:4c:e9:7b:58:9a:75:
         b5:9f:f2:42:1f:37:43:75:c8:51:ec:aa:03:fd:30:42:c5:c1:
         28:ac:94:61:93:0c:94:a8:0d:a0:6e:59:ab:e8:c2:e1:1c:04:
         69:75:ba:17:a3:92:24:04:c9:04:82:dc:1e:5f:55:14:6c:25:
         21:34:ae:ab:90:2a:c7:cf:0b:b8:ad:8b:7e:82:74:dc:3c:f2:
         92:54:c3:6d:ca:d9:38:20:89:1e:e0:ef:fb:df:15:ea:06:b9:
         28:77:da:90:16:7a:90:fe:4b:41:90:da:ca:7d:71:d6:9f:10:
         bd:7f:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:52:13 2025 by rpki-client