Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
File:                     3139312e35322e3230382e302f32322d3234203d3e203232393237.roa (raw, json)
Hash identifier:          gRdH3H8RjxElpm/RvFwW6CMjZhwjI+QOwZxdFOH6rBg=
Subject key identifier:   57:13:B9:81:CC:1E:46:45:38:C9:2C:81:51:C0:16:4D:6C:FB:5F:83
Certificate issuer:       /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial:       62DF338B5EE46C7B02A33B69205458DBD6F8A530
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
Signing time:             Wed 09 Jul 2025 17:24:53 +0000
ROA not before:           Wed 09 Jul 2025 17:19:53 +0000
ROA not after:            Wed 08 Jul 2026 17:24:53 +0000
asID:                     22927
IP address blocks:        191.52.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 21:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:df:33:8b:5e:e4:6c:7b:02:a3:3b:69:20:54:58:db:d6:f8:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
        Validity
            Not Before: Jul  9 17:19:53 2025 GMT
            Not After : Jul  8 17:24:53 2026 GMT
        Subject: CN=5713B981CC1E464538C92C8151C0164D6CFB5F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:2e:f9:61:45:df:2b:1e:40:9b:67:e5:54:
                    27:29:64:72:26:dd:92:34:97:d7:0a:fd:32:cd:49:
                    3a:17:7c:13:18:61:cf:bc:d1:8f:c1:21:48:1e:f3:
                    a1:0f:23:a5:58:00:f6:d3:df:cc:3e:df:47:5c:b2:
                    1e:1b:a2:10:c9:02:a6:9d:cb:62:c4:d0:41:e9:9f:
                    39:6a:b6:56:92:b1:d2:49:9f:3a:4d:e5:cd:86:46:
                    83:c7:4f:c7:a9:c7:d0:f4:64:81:1a:8f:e9:38:a9:
                    3f:2d:c0:f6:f9:38:66:da:cb:f9:34:82:30:86:4c:
                    45:52:c3:bc:60:13:c4:88:0e:5c:b5:ed:7d:3c:ca:
                    2b:e1:42:85:f4:4e:44:50:ce:6c:ba:3e:0a:43:67:
                    2d:05:94:d0:f9:d6:b1:fd:1d:26:cb:32:11:8d:48:
                    cf:76:eb:fd:27:e7:cb:21:39:78:17:a7:39:f2:a1:
                    e7:78:1f:c2:4c:06:59:ec:aa:9c:a4:e0:c1:0d:5f:
                    ac:7c:77:f0:e3:37:39:63:e8:45:eb:d6:31:b9:36:
                    87:e0:e5:cb:ba:c8:aa:7c:91:d2:3f:d6:57:6a:c9:
                    44:90:a6:f8:5f:91:39:45:e2:35:07:14:07:29:c9:
                    76:eb:13:db:2e:59:24:27:5e:ac:9b:86:80:90:75:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:13:B9:81:CC:1E:46:45:38:C9:2C:81:51:C0:16:4D:6C:FB:5F:83
            X509v3 Authority Key Identifier:
                keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:2a:80:eb:e8:f2:ea:fe:50:69:7b:a4:de:6c:19:e0:e7:
         35:21:5c:a4:c6:9a:37:e7:e3:1f:5c:7e:5e:bc:30:5c:82:c5:
         c1:b4:8a:ce:fd:d8:97:dd:90:ec:84:22:0a:6d:0f:67:e5:eb:
         e1:b5:d1:0f:d5:84:93:d1:90:77:1f:c3:ce:b3:b6:fc:1b:02:
         68:7e:e7:97:f9:6d:41:dc:77:53:1c:51:25:27:6c:af:17:07:
         bb:b2:ed:ea:fb:0a:36:03:dc:01:cd:3a:31:35:46:ef:f5:55:
         be:d7:7a:2f:bc:8d:a9:7b:66:8a:2b:1c:83:31:af:8a:5f:28:
         05:68:60:88:6d:c3:cb:04:93:91:21:db:67:5f:ec:63:82:d5:
         cb:34:83:33:1b:c5:86:a4:47:dd:ad:a2:6b:98:e2:83:5e:2b:
         16:e1:a2:d4:42:9d:6a:50:4b:1b:32:c7:64:ea:87:fd:90:4b:
         23:fa:9f:16:26:54:e7:39:8f:62:02:22:79:a7:e2:b2:6f:87:
         4a:b9:d4:2f:b4:9b:8e:4f:b9:aa:2d:e8:22:5d:e3:b1:ef:f5:
         d4:cd:36:bd:c6:a0:5e:98:d5:d6:fe:48:75:0a:cd:2c:ee:04:
         cf:45:18:a9:50:fa:be:c7:ca:07:9b:b8:70:9c:af:81:94:01:
         bc:c9:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 20:43:30 2025 by rpki-client