Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139322e3138382e35372e33322f32392d3239203d3e203631343638.roa
File:                     3139322e3138382e35372e33322f32392d3239203d3e203631343638.roa (raw, json)
Hash identifier:          biFYeUeuLdkVPHAAc+Hd4IQeNIsLihC9T7r7W8erNy0=
Subject key identifier:   B7:A3:29:E4:39:0A:90:14:16:C8:22:CC:44:4F:66:CA:F8:78:D6:F2
Certificate issuer:       /CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
Certificate serial:       5AC0924F38B414C995145BF0CBABCCD7997C7980
Authority key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139322e3138382e35372e33322f32392d3239203d3e203631343638.roa
Signing time:             Mon 14 Jul 2025 16:20:00 +0000
ROA not before:           Mon 14 Jul 2025 16:15:00 +0000
ROA not after:            Mon 13 Jul 2026 16:20:00 +0000
asID:                     61468
IP address blocks:        192.188.57.32/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 13:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c0:92:4f:38:b4:14:c9:95:14:5b:f0:cb:ab:cc:d7:99:7c:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
        Validity
            Not Before: Jul 14 16:15:00 2025 GMT
            Not After : Jul 13 16:20:00 2026 GMT
        Subject: CN=B7A329E4390A901416C822CC444F66CAF878D6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:00:77:a3:44:48:34:b9:b8:ea:fa:4e:89:
                    cb:94:0d:00:32:39:48:a5:af:cd:4f:2c:ee:36:0b:
                    a7:d3:2d:42:ed:be:1a:f7:7d:66:69:35:17:28:97:
                    96:5e:78:f2:68:2c:35:a9:58:9d:01:08:8a:9c:d4:
                    df:af:87:61:91:a5:96:a7:b8:86:37:fa:d6:48:2e:
                    a3:ef:a6:54:45:c0:7c:32:dd:32:31:84:0c:31:aa:
                    de:f3:15:e0:e1:4b:15:ac:86:d4:e6:d4:08:61:0d:
                    aa:16:23:ec:b3:5e:a6:68:a9:1b:23:29:de:53:8b:
                    e5:21:94:02:e4:83:a4:b5:95:8e:7a:f4:d2:2c:8e:
                    7f:57:4e:71:6e:3b:c4:e6:4e:07:8c:5d:b3:a7:da:
                    93:ff:7a:0c:df:db:e6:77:4e:01:db:cb:cf:c9:96:
                    08:79:6c:5d:03:d8:20:28:95:c7:e5:ff:76:9f:fa:
                    81:20:ef:75:03:79:2d:c6:f5:fc:35:fa:c9:b2:f3:
                    99:e6:49:de:41:72:28:06:88:02:04:74:a6:b9:ca:
                    f1:f4:d9:fa:9a:af:69:0d:ef:47:ea:82:90:32:e6:
                    7a:d0:c9:31:38:fb:cf:8a:b2:e6:20:e0:fa:2e:76:
                    98:06:94:d7:ed:20:d5:54:ef:a4:05:12:d6:58:ac:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A3:29:E4:39:0A:90:14:16:C8:22:CC:44:4F:66:CA:F8:78:D6:F2
            X509v3 Authority Key Identifier:
                keyid:C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139322e3138382e35372e33322f32392d3239203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.57.32/29

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:48:f1:73:b0:7c:29:81:45:7e:c6:1d:96:b0:3e:c0:5e:
         42:11:37:51:04:6c:f7:a5:56:bf:1f:27:59:5c:1a:34:95:4e:
         e9:ed:87:95:31:ae:df:46:6f:30:68:b7:04:6a:91:3e:a6:c9:
         d5:b2:67:58:e8:8e:74:77:08:6a:b3:6d:ea:3e:c9:d3:de:24:
         38:63:d7:fb:fb:e5:0d:30:c2:a2:f9:68:1b:f4:4c:be:25:1e:
         af:4f:c5:c0:1c:97:c2:3c:da:e8:14:9c:38:38:45:79:2d:06:
         29:e4:26:84:db:2a:67:72:46:55:b5:0a:59:9f:02:1f:80:4b:
         04:a5:67:ca:ae:19:7a:9c:1e:d8:2a:e0:b4:04:ee:69:a1:1f:
         79:8f:f7:c8:71:4f:6b:56:81:62:46:0e:e5:da:54:6b:62:e0:
         1f:b1:84:a1:b7:63:a4:07:81:1f:d8:4f:78:c8:cc:4d:5b:e2:
         fb:6e:9c:90:72:b7:e3:10:97:44:f0:b3:b7:b3:a7:7d:6c:b2:
         38:56:5a:1f:2b:2c:8d:34:6a:b5:02:b5:bd:23:37:c3:7d:08:
         a6:c7:22:0b:93:2a:a6:c7:c8:c3:69:b3:eb:a9:3d:8a:ca:db:
         f1:3c:7d:90:85:1e:26:ee:86:03:da:7a:66:89:3d:ee:25:ab:
         e6:13:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:41:20 2025 by rpki-client