Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139362e302f32342d3234203d3e20323635363939.roa
File:                     3136322e31322e3139362e302f32342d3234203d3e20323635363939.roa (raw, json)
Hash identifier:          aMkGmkOFBy7z8BOdRDzW/+Hs9GxXX3qUjbRB/o7idak=
Subject key identifier:   1A:AE:7A:FD:48:92:DB:FE:DA:DB:79:8B:D4:B4:D5:37:BF:00:BA:BE
Certificate issuer:       /CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
Certificate serial:       4E9602EBB971F08B53D3CFB26FD14F32BB7E38E4
Authority key identifier: 16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139362e302f32342d3234203d3e20323635363939.roa
Signing time:             Tue 29 Jul 2025 19:20:00 +0000
ROA not before:           Tue 29 Jul 2025 19:15:00 +0000
ROA not after:            Tue 28 Jul 2026 19:20:00 +0000
asID:                     265699
IP address blocks:        162.12.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Aug 2025 18:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:96:02:eb:b9:71:f0:8b:53:d3:cf:b2:6f:d1:4f:32:bb:7e:38:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
        Validity
            Not Before: Jul 29 19:15:00 2025 GMT
            Not After : Jul 28 19:20:00 2026 GMT
        Subject: CN=1AAE7AFD4892DBFEDADB798BD4B4D537BF00BABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:35:9c:f2:46:fa:c7:6f:b0:33:59:70:70:
                    d0:ca:ce:f1:a3:4a:5f:31:2f:c2:80:6a:88:d5:0d:
                    25:8b:17:bc:ca:eb:4d:3b:51:ea:c9:2b:1e:70:fe:
                    24:e9:b2:c1:cf:fa:3d:b9:6d:f9:13:09:45:9e:18:
                    6f:1a:a1:9d:01:a2:51:af:f6:6a:19:1b:c3:3d:e2:
                    6c:76:a4:36:8a:2d:80:80:1a:54:74:2a:0e:44:49:
                    c0:f8:79:d2:12:c6:e1:79:ef:1d:d0:bc:36:37:ad:
                    5d:c7:0c:40:ff:c9:c5:c9:66:a8:0a:b9:4f:2e:93:
                    a6:b9:46:ed:62:bb:31:e9:7c:c0:00:07:d9:5a:e3:
                    65:78:6a:3e:61:7c:ac:d2:0b:66:29:e6:51:1f:b8:
                    18:fc:f4:98:13:78:64:56:6a:3c:57:69:60:8a:fb:
                    43:f1:57:b5:ba:3d:6f:2e:5b:df:a1:5b:9a:64:b3:
                    b0:45:49:b8:8c:5b:56:92:30:19:4b:ed:1e:df:38:
                    89:a9:58:10:91:36:60:c0:f5:53:25:fc:8f:d2:8d:
                    0d:b7:ec:85:a6:ea:49:e2:61:6c:72:90:bb:09:6f:
                    6d:85:67:42:15:23:bf:e0:81:78:86:a6:37:ea:7e:
                    84:ee:39:c7:ad:89:b6:4f:83:b7:6c:43:b7:4f:1d:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:7A:FD:48:92:DB:FE:DA:DB:79:8B:D4:B4:D5:37:BF:00:BA:BE
            X509v3 Authority Key Identifier:
                keyid:16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139362e302f32342d3234203d3e20323635363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ad:44:68:09:a9:12:1f:56:0b:f7:96:c0:17:b3:96:14:98:
         eb:02:2e:b0:22:85:6f:0f:da:03:59:f9:5e:0e:cf:6a:79:9c:
         a2:d5:39:21:3f:2c:2e:c8:a5:86:24:cd:d5:3e:11:7e:eb:3f:
         7f:7e:35:85:61:86:bf:75:6a:5e:39:c3:3f:c3:70:c5:4c:21:
         38:24:74:ea:de:cf:fb:74:ef:41:57:1a:fc:6d:ab:fb:35:0b:
         d1:68:ec:a5:f1:85:c7:bf:d9:d0:c1:11:29:5e:26:6f:e5:03:
         b8:dd:9f:0f:6f:59:ac:59:99:84:f9:58:b4:06:6b:b4:3a:c9:
         02:70:59:d9:ab:2f:22:ab:6a:9b:8a:59:a2:14:7f:8f:88:f9:
         ae:04:80:9f:0d:bd:d2:f9:cf:34:66:61:1c:31:19:7f:35:93:
         e9:07:32:3a:f0:81:2d:c7:6d:27:22:cb:cb:34:23:a7:89:b0:
         93:99:9f:86:4c:53:25:84:5a:bc:74:c6:47:43:87:2d:09:bc:
         cb:21:47:d4:92:25:4f:ba:10:e0:6c:62:7c:38:34:26:5f:16:
         29:c9:f3:43:95:70:d4:8c:5a:8b:f5:85:9e:13:a6:a0:8f:7b:
         46:8a:7e:3c:2b:ea:21:be:07:7e:84:bd:8e:67:61:cc:1d:81:
         52:b2:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:35:01 2025 by rpki-client