Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3234203d3e203133353739.roa
File:                     3230372e3234392e39362e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          DWHcIQ3tSZBZXINGcIYR3k5kgE3Fo69s6tXq2dNow2Q=
Subject key identifier:   8B:6F:34:4B:75:D6:64:95:5E:63:D8:A0:CD:31:8D:8E:84:CE:E9:3F
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       0D282533B937A96E13621E7CD675CD587174C886
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 01 Jul 2025 23:24:23 +0000
ROA not before:           Tue 01 Jul 2025 23:19:23 +0000
ROA not after:            Tue 30 Jun 2026 23:24:23 +0000
asID:                     13579
IP address blocks:        207.249.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 02:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:28:25:33:b9:37:a9:6e:13:62:1e:7c:d6:75:cd:58:71:74:c8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jul  1 23:19:23 2025 GMT
            Not After : Jun 30 23:24:23 2026 GMT
        Subject: CN=8B6F344B75D664955E63D8A0CD318D8E84CEE93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:4b:10:2b:7f:20:a4:62:1e:76:5c:99:58:
                    0e:54:13:56:0c:84:1f:4f:13:ee:c9:98:1d:70:bc:
                    11:9a:cd:d4:7f:fa:59:9a:c8:5b:ae:cc:e3:cc:17:
                    cc:41:55:39:16:55:9f:13:89:49:6f:b2:78:2d:ff:
                    06:5d:19:3c:36:25:41:5d:15:3f:e4:e3:19:f1:e1:
                    89:19:45:7d:7d:2e:54:2f:5b:76:2a:3b:74:00:03:
                    84:d1:b7:6e:32:b3:3f:b0:cf:de:86:af:8f:78:77:
                    15:b2:79:79:55:4b:e4:23:f8:06:f5:f5:08:2d:90:
                    84:61:f8:27:34:79:8e:34:ed:9c:88:cd:c2:27:4f:
                    4b:ca:f7:75:29:01:c4:59:58:08:c8:f7:bd:01:33:
                    66:6d:35:f9:0b:f7:1d:3d:4f:33:20:4e:0f:f3:29:
                    ca:c0:2f:13:89:5a:0b:8b:d8:8e:e5:80:6c:b8:cb:
                    b2:65:51:93:48:ba:1d:d7:9b:6f:71:6c:66:33:4b:
                    15:e3:75:e4:1c:7a:49:91:0d:25:6a:06:7e:f6:af:
                    8b:59:a9:01:4b:2c:0b:a1:f0:7e:82:8e:70:8d:f8:
                    f2:52:cf:ca:0e:19:7b:3e:94:8c:14:19:44:1a:c6:
                    0b:b2:73:a1:05:85:ef:d3:c1:5b:ae:6c:66:72:f2:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6F:34:4B:75:D6:64:95:5E:63:D8:A0:CD:31:8D:8E:84:CE:E9:3F
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:75:70:68:bc:d3:86:cb:d8:5f:e1:e8:49:c6:63:7a:4c:67:
         fe:fe:d7:e1:7a:7f:0e:19:ae:24:ac:c5:e2:9a:0b:b9:3a:5c:
         a6:2a:be:53:b9:3b:82:18:5e:11:44:56:3a:bb:7f:8e:3e:06:
         2b:d1:01:e1:ca:8f:d4:7b:d8:f6:e9:30:b3:10:0a:96:93:1c:
         cb:21:30:32:f2:7b:56:3d:d3:72:7b:26:a1:41:57:bb:b9:50:
         da:3c:d1:0a:cf:da:47:1c:70:e7:2c:58:c4:21:e9:17:ed:94:
         ee:d5:16:40:66:47:09:85:53:95:cd:ed:3f:2f:76:9d:11:5a:
         1c:86:97:46:56:cf:f9:9c:52:23:34:9b:18:03:7d:ca:f7:77:
         8b:1e:10:f8:09:db:96:54:6d:02:7b:a3:8a:9c:52:a1:69:ad:
         ef:e3:87:21:46:db:ac:cf:a9:07:19:0e:91:c9:ad:bb:3f:be:
         41:c2:6f:2a:bc:4f:e3:e0:87:44:d7:5c:19:38:78:59:de:bd:
         d8:58:76:be:08:94:58:5f:bc:7d:dd:7e:9c:c0:04:80:ff:95:
         f8:83:2d:5d:9a:52:89:7b:d2:a8:ec:6c:9e:ae:26:9d:93:63:
         0e:f3:81:38:a8:90:08:c4:25:26:c8:b1:de:88:e5:db:c3:c0:
         c4:46:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:02:16 2025 by rpki-client