Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39322e302f32332d3234203d3e203238333934.roa
File:                     3230302e302e39322e302f32332d3234203d3e203238333934.roa (raw, json)
Hash identifier:          KIAINCVXWi16ODipuPi8LpywZN07lABefP1ISKZluXE=
Subject key identifier:   F5:D1:93:41:90:B4:AA:EE:D9:7B:F1:3A:F3:2C:43:88:B8:86:01:AE
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       57E619712AA7DEAA11269CBDAC1136D5561BA597
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39322e302f32332d3234203d3e203238333934.roa
Signing time:             Mon 21 Jul 2025 19:25:58 +0000
ROA not before:           Mon 21 Jul 2025 19:20:58 +0000
ROA not after:            Mon 20 Jul 2026 19:25:58 +0000
asID:                     28394
IP address blocks:        200.0.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e6:19:71:2a:a7:de:aa:11:26:9c:bd:ac:11:36:d5:56:1b:a5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jul 21 19:20:58 2025 GMT
            Not After : Jul 20 19:25:58 2026 GMT
        Subject: CN=F5D1934190B4AAEED97BF13AF32C4388B88601AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:2e:63:4f:e1:62:15:77:80:8c:49:c8:52:
                    fc:68:aa:8a:b7:af:bf:9e:01:0d:f4:8f:31:2e:d5:
                    45:0c:18:22:7a:c3:7b:48:2a:63:25:90:ec:4d:5d:
                    d0:31:0b:b6:4a:e8:4a:fe:20:92:ca:23:36:8d:ab:
                    d0:ff:2c:c2:16:ad:3a:8f:b6:98:00:1a:6e:a0:14:
                    12:db:ab:71:45:45:54:88:87:31:10:60:ba:4a:4b:
                    05:19:d4:69:84:18:f5:4f:9c:26:95:f1:02:97:60:
                    8c:01:21:00:8b:38:48:b1:4d:d1:61:81:9c:ec:bd:
                    1b:a4:14:aa:ed:e3:43:8d:0e:80:21:40:f3:59:91:
                    8d:ac:41:4e:30:26:34:2c:fa:19:f0:50:f1:70:2f:
                    ca:3a:d3:2a:40:3f:c5:dc:ee:e1:78:24:51:39:d8:
                    9c:4e:15:aa:4e:53:eb:bf:3a:87:11:7a:50:0a:e5:
                    88:7d:8c:5e:85:38:55:a4:48:66:7d:a8:3c:e3:05:
                    b2:12:79:84:e2:a8:e6:de:85:3a:5c:40:cb:12:43:
                    83:44:04:4d:65:3f:60:60:5f:1d:fb:71:cd:a6:b5:
                    97:37:45:ed:f7:4e:e0:f1:cd:53:f2:39:f6:95:3f:
                    96:6a:f3:d0:d0:c7:3c:db:05:be:c3:08:93:ac:7b:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D1:93:41:90:B4:AA:EE:D9:7B:F1:3A:F3:2C:43:88:B8:86:01:AE
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39322e302f32332d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:aa:98:22:f2:b0:aa:e9:2b:ce:7c:3e:57:0d:17:07:37:b2:
         91:e8:41:ef:87:bb:fe:00:03:3b:d1:9d:e2:58:7d:a0:a2:3b:
         5c:c4:c9:f5:60:71:75:5f:29:b9:ae:61:4e:7e:a3:2f:1a:c1:
         c4:e2:f3:54:2d:91:36:32:03:a3:cf:38:b3:47:04:ca:3c:a2:
         67:fd:a1:6a:af:21:fc:54:0e:15:8c:f2:68:16:1c:9a:5b:d8:
         9f:e1:af:bb:f7:3f:af:78:b7:01:79:ed:b3:0f:51:ca:cb:fc:
         f9:f6:0c:62:42:d0:bd:73:78:77:b3:54:b1:0f:ac:e0:a5:3f:
         4a:40:ab:8e:b1:57:fa:55:72:69:b1:93:9f:16:20:a9:16:8b:
         d8:dc:ab:03:f7:ff:14:5e:0e:2b:9f:d9:ed:b3:5f:7e:ef:69:
         2a:e1:e2:7b:52:89:ea:37:ec:e8:bb:83:ee:f3:1c:fb:6d:6f:
         88:9e:46:af:9d:80:4e:53:48:15:28:87:cf:f8:6a:50:d5:b4:
         8b:22:3a:0c:84:ae:9b:78:8c:99:d4:8e:88:c9:67:a4:8f:e0:
         3b:c9:72:7a:5b:04:4f:56:7d:e6:e4:34:d9:ea:a8:52:9a:43:
         22:89:2e:77:f8:d5:06:dd:ee:28:d8:f8:5c:61:b0:23:99:a7:
         03:ba:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:24:08 2025 by rpki-client