Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/3139322e3134312e36342e302f32322d3234203d3e203231373635.roa
File:                     3139322e3134312e36342e302f32322d3234203d3e203231373635.roa (raw, json)
Hash identifier:          Dv8YB3m+qg67mwPG17HOhnW29frNf8vUruAyQaWzfIU=
Subject key identifier:   F2:86:5B:AE:E2:DF:7F:25:A6:7E:6A:B8:8E:3C:EC:95:B7:03:D7:E1
Certificate issuer:       /CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
Certificate serial:       6C149B34237C0336500268A0A74E258C1D819240
Authority key identifier: F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/3139322e3134312e36342e302f32322d3234203d3e203231373635.roa
Signing time:             Tue 04 Feb 2025 18:02:08 +0000
ROA not before:           Tue 04 Feb 2025 17:57:08 +0000
ROA not after:            Tue 03 Feb 2026 18:02:08 +0000
asID:                     21765
IP address blocks:        192.141.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:14:9b:34:23:7c:03:36:50:02:68:a0:a7:4e:25:8c:1d:81:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
        Validity
            Not Before: Feb  4 17:57:08 2025 GMT
            Not After : Feb  3 18:02:08 2026 GMT
        Subject: CN=F2865BAEE2DF7F25A67E6AB88E3CEC95B703D7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:57:65:ca:ee:9e:fc:b6:8e:8d:fc:ee:30:4e:
                    68:c7:bd:3e:2b:4e:c4:ac:5a:bf:fc:70:52:ea:c5:
                    b2:3f:f5:46:b5:2c:c1:34:97:de:20:a9:82:88:23:
                    41:02:b7:99:34:87:5e:ff:f5:73:81:a6:d5:fa:c1:
                    31:61:1d:39:fb:ca:fd:f5:ad:c7:08:43:fb:d6:94:
                    10:c9:03:08:0a:05:60:b0:86:62:95:4f:51:00:09:
                    b4:d4:8e:4a:4e:43:de:d7:c3:ad:8b:9b:7a:a2:ac:
                    b1:27:2a:16:86:8c:4b:27:8c:75:dc:56:07:02:60:
                    26:3f:a2:5f:0e:25:2f:09:21:2b:af:c5:6f:d1:e6:
                    40:79:e1:0b:b8:a4:ff:0d:02:93:e8:f8:c6:c8:75:
                    1b:d1:32:25:18:7b:35:96:85:b6:21:c5:4d:3b:b5:
                    a6:80:76:7d:67:53:6e:cd:21:1b:0a:33:f2:95:65:
                    46:58:89:62:b8:7e:f7:c3:a0:0b:94:42:87:8f:dc:
                    14:b8:0b:6e:38:fc:9c:51:2b:08:96:9f:fc:f4:5b:
                    12:64:f2:3c:b3:97:d9:70:b8:69:db:82:48:a6:fe:
                    5a:96:97:63:09:bc:d7:38:b8:37:9e:4f:bd:c2:a4:
                    fb:73:07:5d:70:c9:54:77:93:85:8a:47:e6:df:d0:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:86:5B:AE:E2:DF:7F:25:A6:7E:6A:B8:8E:3C:EC:95:B7:03:D7:E1
            X509v3 Authority Key Identifier:
                keyid:F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/3139322e3134312e36342e302f32322d3234203d3e203231373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:69:b9:86:27:e9:ed:20:7c:04:bc:fe:c7:ac:dc:95:5d:
         2a:e1:5e:db:36:79:b5:4e:ed:cf:e5:22:0a:da:7d:86:2e:6d:
         ab:a9:f7:f5:20:f1:ad:0c:7e:10:cf:1f:e3:2b:4a:3c:f2:2f:
         9c:63:50:26:e9:0c:d9:e3:d8:bd:1a:27:24:b1:23:df:e7:8e:
         3c:27:86:f8:95:cc:f4:d8:d0:4a:e9:fc:c2:c5:8a:25:f8:23:
         46:e6:55:dc:b6:ea:ed:bc:58:f9:5c:ef:b7:68:82:0f:4d:d6:
         07:53:27:cf:a3:50:72:81:2d:d5:23:3f:0c:b6:87:32:1a:71:
         ef:1e:1b:bb:00:44:e0:a7:2d:e3:b4:34:e6:f1:ac:f3:7a:af:
         cb:f2:b8:db:b9:58:7e:c4:86:20:3d:9f:33:4c:e7:fc:74:80:
         b5:57:df:9c:ce:fd:d2:4a:79:87:00:36:9d:76:69:1f:4c:42:
         a0:3e:c6:bf:ec:05:e5:e2:b5:94:19:85:e6:8d:27:22:d6:03:
         92:34:de:12:0f:1f:06:c0:d9:ad:3f:ad:ab:d9:fe:e2:6b:1a:
         65:5d:69:7e:2f:c5:8f:f2:28:2e:ef:bf:ad:ed:ce:1b:4b:81:
         13:a0:91:7a:a3:c4:bf:55:15:c9:79:fa:c5:a7:b7:9f:b3:2a:
         ad:84:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:36:49 2025 by rpki-client