Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e39362e302f32302d3232203d3e203237383737.roa
File:                     3139302e3132332e39362e302f32302d3232203d3e203237383737.roa (raw, json)
Hash identifier:          J/pt4D/6l8rdn2oWmEKZkLCOccb5YQg4M/z2ET4F+F4=
Subject key identifier:   BB:04:37:0B:95:B1:E6:65:5D:CC:70:89:C3:6A:89:AB:41:34:17:D7
Certificate issuer:       /CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
Certificate serial:       071F9EA29103008EDF5E1E950C9478814681FEA2
Authority key identifier: 1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e39362e302f32302d3232203d3e203237383737.roa
Signing time:             Thu 17 Jul 2025 13:25:00 +0000
ROA not before:           Thu 17 Jul 2025 13:20:00 +0000
ROA not after:            Thu 16 Jul 2026 13:25:00 +0000
asID:                     27877
IP address blocks:        190.123.96.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 19:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1f:9e:a2:91:03:00:8e:df:5e:1e:95:0c:94:78:81:46:81:fe:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
        Validity
            Not Before: Jul 17 13:20:00 2025 GMT
            Not After : Jul 16 13:25:00 2026 GMT
        Subject: CN=BB04370B95B1E6655DCC7089C36A89AB413417D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:af:26:65:e8:a6:9c:b0:47:94:37:24:d3:
                    0d:28:3d:0e:b9:27:2b:33:18:0f:46:e6:0b:45:e2:
                    82:f7:56:cf:f6:02:84:f0:f7:d6:be:d6:a9:d0:3f:
                    be:8b:d7:ca:3d:85:52:f2:4f:5a:91:e5:e0:84:3b:
                    53:38:5f:61:05:9c:1a:df:4e:f5:52:7e:da:3e:9c:
                    61:eb:6f:ef:e4:e0:7f:95:d7:1f:40:72:8f:f1:f8:
                    94:9e:1b:5c:22:36:71:01:97:3f:c2:95:d2:c4:5d:
                    de:06:26:31:9f:75:c8:0a:3e:bf:7b:77:71:8a:3b:
                    03:df:85:35:e8:c6:8e:fc:b8:c3:20:79:72:48:8b:
                    a4:bf:7e:42:fc:3b:57:54:01:ca:d0:d5:ca:cd:12:
                    06:f8:7f:06:e6:45:90:9c:e5:a5:1e:da:3f:8f:32:
                    24:95:77:1a:89:43:06:71:b4:0a:67:97:72:a9:91:
                    c2:3b:9b:3a:81:5a:0c:c2:a4:3f:7e:2f:1e:96:dd:
                    e0:ba:bd:7a:a0:54:e8:4a:63:87:2e:5d:34:83:d5:
                    8d:ba:88:8a:a2:28:be:3d:24:d6:75:c2:5f:9e:ec:
                    8a:6d:c1:c1:6b:57:7a:9b:ac:eb:0f:a4:e3:96:a4:
                    64:a1:d0:87:8f:49:6f:5e:20:9e:cc:eb:63:57:62:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:37:0B:95:B1:E6:65:5D:CC:70:89:C3:6A:89:AB:41:34:17:D7
            X509v3 Authority Key Identifier:
                keyid:1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e39362e302f32302d3232203d3e203237383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:8e:72:88:8c:5b:f5:a5:bd:00:0b:d9:a0:75:7f:be:db:
         5f:f8:2a:10:16:18:ff:55:53:10:a2:9d:83:84:07:23:26:9b:
         f9:21:cf:8f:c0:68:b0:2e:7f:ac:74:9c:bc:f2:27:99:73:ad:
         2c:62:75:b3:34:f5:18:8e:39:fc:51:be:32:98:20:1b:ca:cf:
         43:78:c7:ff:37:f4:09:97:3d:20:0c:ea:6c:62:02:10:3b:5f:
         cb:dc:1d:33:47:7a:e2:34:5f:2e:aa:5c:29:83:1c:db:09:26:
         bb:e6:03:b8:b2:ce:cd:8e:06:6f:12:45:92:74:7c:9b:94:39:
         ad:37:9f:f4:c0:9a:69:26:4a:6f:2a:ff:80:ae:ca:7e:44:fd:
         9e:66:9d:de:5f:97:48:28:0e:37:cb:f5:7a:59:25:d5:56:40:
         ba:71:4c:23:b8:40:ff:60:4a:22:0d:25:d6:53:b6:3a:0a:d6:
         e4:50:dd:f3:37:8d:b6:fd:6b:2f:7f:a4:8e:77:a2:4b:ce:57:
         fc:66:f1:6b:b6:17:33:0f:eb:68:81:32:53:86:89:f2:c7:e4:
         2c:37:f1:f1:30:b6:19:09:25:bd:aa:2f:ef:41:75:3c:33:36:
         8f:bb:53:b3:44:a0:cc:53:00:8c:0d:90:73:65:93:59:a7:41:
         22:22:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:51:59 2025 by rpki-client