Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
File:                     3139312e35322e3230382e302f32322d3234203d3e203130343831.roa (raw, json)
Hash identifier:          tlR0U46iQ7hn3pFpyows6v81sMDpVjnKzW9/OOcTQ30=
Subject key identifier:   52:E3:CD:76:0B:E5:53:D4:11:C9:39:51:41:0D:6D:A7:F8:37:7A:BA
Certificate issuer:       /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial:       1893CD19D58A21C162ECBCE6102D29E9C6316E5A
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
Signing time:             Wed 09 Jul 2025 17:24:52 +0000
ROA not before:           Wed 09 Jul 2025 17:19:52 +0000
ROA not after:            Wed 08 Jul 2026 17:24:52 +0000
asID:                     10481
IP address blocks:        191.52.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:cd:19:d5:8a:21:c1:62:ec:bc:e6:10:2d:29:e9:c6:31:6e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
        Validity
            Not Before: Jul  9 17:19:52 2025 GMT
            Not After : Jul  8 17:24:52 2026 GMT
        Subject: CN=52E3CD760BE553D411C93951410D6DA7F8377ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:ba:1b:77:d5:9a:2f:24:2c:69:31:69:88:
                    19:cb:67:63:fb:80:6e:a8:29:01:e3:a0:ac:f6:dc:
                    06:bb:eb:c8:96:89:1f:cf:48:d1:f4:2e:89:a9:4e:
                    89:49:36:79:a4:e0:f6:09:8f:c7:de:12:04:8e:35:
                    00:02:2c:d3:40:6c:1e:e0:a5:90:eb:d9:bb:47:c1:
                    91:d9:ed:8d:ad:ed:b3:00:db:dc:80:06:dd:d9:4a:
                    bf:62:3c:d6:76:b1:d9:f7:10:ea:67:66:cf:7f:27:
                    cf:66:89:5d:e9:77:8e:0c:54:25:be:1a:e0:d8:66:
                    fa:57:2a:11:2a:6e:8a:9f:e0:38:21:22:43:cb:07:
                    b0:5b:b2:11:c4:ab:f8:c4:a5:75:a8:0a:4d:2b:0a:
                    6a:50:1d:27:75:e0:d3:6f:07:dd:60:c3:a7:3a:c4:
                    f6:58:89:fa:0f:60:d3:e3:6e:6e:47:b2:ec:90:18:
                    74:77:42:9b:e6:18:98:80:d7:e0:01:0e:23:d5:d3:
                    b9:85:42:35:6e:c6:18:8e:f5:c6:3f:eb:7d:db:19:
                    8a:36:58:a5:62:72:d0:11:b1:90:ad:dd:dc:a4:8b:
                    15:de:02:31:17:51:c9:02:7f:fd:11:21:d7:0f:41:
                    c5:88:f0:b5:89:e1:22:5a:eb:e3:b2:f4:d0:a3:73:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:CD:76:0B:E5:53:D4:11:C9:39:51:41:0D:6D:A7:F8:37:7A:BA
            X509v3 Authority Key Identifier:
                keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:b9:d3:53:33:8c:77:7b:29:63:61:50:99:fa:dd:60:48:
         2c:42:6b:ca:20:8d:bd:45:ae:53:e3:41:cf:f5:aa:79:aa:48:
         5a:f1:e5:50:f0:83:0f:94:59:30:75:53:5b:94:9b:1f:51:1f:
         86:aa:05:a8:aa:73:15:36:20:2e:f3:cd:10:50:b0:fe:e4:d0:
         e2:9b:ec:f2:e9:3a:17:94:da:c5:2f:41:4c:9f:d9:9b:15:92:
         3f:2c:b1:d8:2a:83:54:a6:18:3b:0c:be:11:3d:9f:32:96:c3:
         c7:da:f6:7e:c8:17:8f:a3:7f:5b:63:85:c4:c5:46:8c:df:0c:
         38:91:60:7d:3b:82:8c:5d:8b:f1:42:19:ae:e0:8b:44:1c:fe:
         41:c6:a7:2c:cf:81:cc:24:67:98:96:e0:d4:39:c0:1c:1e:a6:
         89:2e:98:5d:8f:dc:d4:20:fa:30:fa:53:33:5b:93:8e:ec:a6:
         e1:a1:bf:e9:0e:31:25:7f:73:6a:a2:3c:be:7c:70:61:5b:3f:
         4c:01:e1:42:64:02:71:c0:bf:ab:e8:8d:c0:ed:42:61:e0:24:
         86:f4:53:5a:62:5d:b9:33:f4:d3:13:7b:ce:f5:56:4b:1b:be:
         28:5b:cc:c8:2d:bd:c7:21:c2:fa:6a:ee:50:93:bb:83:ce:57:
         6e:ca:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:47:06 2025 by rpki-client