Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/955CBD754F01D5DF6E2E76F14624FDAC72BACD493A43F437D4BBC5E63EC26CAD/0/3139322e3138382e35312e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35312e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          kv6SzS+OK3btgiDgchD4v2QzYKjwI2FL+sU544m2kKQ=
Subject key identifier:   73:FF:D7:62:50:58:B3:4B:1D:22:CE:29:E1:8F:C0:19:F6:68:8D:A7
Certificate issuer:       /CN=0C73CD255F544CACBB58AFD1A29438B601CFFB06
Certificate serial:       2C51432A46C3302F5E384F1E56F0826A648A2C5D
Authority key identifier: 0C:73:CD:25:5F:54:4C:AC:BB:58:AF:D1:A2:94:38:B6:01:CF:FB:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C73CD255F544CACBB58AFD1A29438B601CFFB06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/955CBD754F01D5DF6E2E76F14624FDAC72BACD493A43F437D4BBC5E63EC26CAD/0/3139322e3138382e35312e302f32342d3234203d3e203631343638.roa
Signing time:             Wed 16 Jul 2025 20:20:00 +0000
ROA not before:           Wed 16 Jul 2025 20:15:00 +0000
ROA not after:            Wed 15 Jul 2026 20:20:00 +0000
asID:                     61468
IP address blocks:        192.188.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/955CBD754F01D5DF6E2E76F14624FDAC72BACD493A43F437D4BBC5E63EC26CAD/0/0C73CD255F544CACBB58AFD1A29438B601CFFB06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/955CBD754F01D5DF6E2E76F14624FDAC72BACD493A43F437D4BBC5E63EC26CAD/0/0C73CD255F544CACBB58AFD1A29438B601CFFB06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C73CD255F544CACBB58AFD1A29438B601CFFB06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 19:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:51:43:2a:46:c3:30:2f:5e:38:4f:1e:56:f0:82:6a:64:8a:2c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C73CD255F544CACBB58AFD1A29438B601CFFB06
        Validity
            Not Before: Jul 16 20:15:00 2025 GMT
            Not After : Jul 15 20:20:00 2026 GMT
        Subject: CN=73FFD7625058B34B1D22CE29E18FC019F6688DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0f:bc:6b:69:e6:65:0c:d2:30:3c:7a:52:af:
                    25:88:14:e4:21:57:af:bd:1d:89:a6:b7:16:c6:19:
                    ab:a8:55:79:5a:2d:9c:6f:16:1c:36:34:b4:13:eb:
                    f1:e8:8d:10:f9:46:57:61:be:ea:8e:60:91:17:fa:
                    21:80:4e:25:02:28:51:b0:e3:6e:2a:18:d4:4a:0e:
                    87:7c:cc:ce:cd:67:cf:dd:9a:53:3f:4e:e3:17:98:
                    8f:fd:33:68:6d:55:59:02:bb:7e:02:c1:42:e9:e2:
                    76:c6:0c:19:f4:56:62:55:46:2b:8c:99:1e:60:9a:
                    e3:da:8a:7b:9b:05:6a:7d:a1:a6:fd:ee:d4:7d:5f:
                    76:23:e7:24:51:a2:19:66:ae:1a:c5:62:57:cb:19:
                    2b:a7:90:09:ee:b0:59:ce:03:5d:af:ee:b8:17:24:
                    bf:ae:86:76:43:fa:47:40:0f:38:d2:52:1a:5c:86:
                    d7:00:7b:6b:e4:9f:7f:e0:4e:96:f7:4f:3e:9e:92:
                    1e:b3:29:db:51:e7:39:26:3c:51:b2:3e:23:b9:a9:
                    ae:f5:2d:5e:49:f7:36:3c:c5:a9:aa:1b:a1:ba:4f:
                    e3:a7:8a:88:9d:ac:ae:57:87:27:6e:66:50:5e:01:
                    f6:36:74:ce:d4:e7:e3:86:e1:83:0a:02:a4:50:8e:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:D7:62:50:58:B3:4B:1D:22:CE:29:E1:8F:C0:19:F6:68:8D:A7
            X509v3 Authority Key Identifier:
                keyid:0C:73:CD:25:5F:54:4C:AC:BB:58:AF:D1:A2:94:38:B6:01:CF:FB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/955CBD754F01D5DF6E2E76F14624FDAC72BACD493A43F437D4BBC5E63EC26CAD/0/0C73CD255F544CACBB58AFD1A29438B601CFFB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C73CD255F544CACBB58AFD1A29438B601CFFB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/955CBD754F01D5DF6E2E76F14624FDAC72BACD493A43F437D4BBC5E63EC26CAD/0/3139322e3138382e35312e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:f9:1d:8b:f4:03:9a:69:3b:0a:e0:82:b3:54:ef:c6:fa:09:
         6b:c9:5b:aa:90:47:ec:db:53:f0:19:2d:4d:31:78:dd:e0:92:
         c6:1b:cf:80:23:ba:5d:68:9b:0a:d2:3e:8b:6f:fd:b3:5d:38:
         e1:81:98:89:5a:1e:d6:45:7d:a7:bd:db:07:ca:b3:96:b1:a2:
         22:6d:c2:a1:45:e0:e4:c7:4e:77:29:57:3b:19:b7:08:56:56:
         0a:94:9c:69:4f:18:04:0a:3f:ad:88:12:80:56:e7:7d:8a:3a:
         89:09:27:a7:4f:5d:0a:5c:0f:48:64:47:38:23:d6:b2:35:e7:
         c0:ab:fb:9f:ad:48:bf:0f:a2:61:35:e2:e2:15:89:c6:be:f0:
         09:54:b2:01:6c:68:57:24:6b:b0:28:58:fd:15:a0:cc:18:51:
         2c:89:43:b4:c3:f7:76:59:2c:d0:e4:fb:e9:ed:51:e8:da:5d:
         73:e0:7d:f8:f6:10:bf:00:a8:85:51:5b:69:a0:e5:65:a8:c1:
         b0:51:5d:90:ed:30:3b:86:8d:44:ba:ea:f6:40:bf:ab:d0:94:
         25:5d:ba:3e:26:68:56:a8:c7:27:09:6e:c3:cf:97:83:da:76:
         68:1d:ae:91:c2:c6:7e:00:80:78:5b:e3:40:dd:f6:c2:2b:70:
         f8:30:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:51:59 2025 by rpki-client