Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139392e302f32342d3234203d3e20323635363939.roa
File:                     3136322e31322e3139392e302f32342d3234203d3e20323635363939.roa (raw, json)
Hash identifier:          ZxYoAql69l8e2hlDSkDLyCd1JryOmm6Zqdrk9gEcjeY=
Subject key identifier:   EC:68:71:F2:0B:BA:6D:81:69:78:0C:9A:D8:15:BC:1C:9F:A2:D9:67
Certificate issuer:       /CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
Certificate serial:       2A7DAD7F96608A9E9EBF661A175DF45F66F02BFC
Authority key identifier: 16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139392e302f32342d3234203d3e20323635363939.roa
Signing time:             Tue 29 Jul 2025 19:20:00 +0000
ROA not before:           Tue 29 Jul 2025 19:15:00 +0000
ROA not after:            Tue 28 Jul 2026 19:20:00 +0000
asID:                     265699
IP address blocks:        162.12.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Aug 2025 18:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7d:ad:7f:96:60:8a:9e:9e:bf:66:1a:17:5d:f4:5f:66:f0:2b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
        Validity
            Not Before: Jul 29 19:15:00 2025 GMT
            Not After : Jul 28 19:20:00 2026 GMT
        Subject: CN=EC6871F20BBA6D8169780C9AD815BC1C9FA2D967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:61:7b:67:55:15:52:1b:9c:29:f1:d1:04:
                    a9:3b:87:bd:07:af:02:05:72:db:6d:05:ab:a5:f7:
                    5e:23:2b:f8:1d:f2:1f:fb:92:d8:0c:6d:fd:1a:dd:
                    7e:81:71:16:8b:f2:1b:0a:ad:4d:39:f6:14:a9:c5:
                    db:72:6b:19:8e:75:e1:64:7a:3d:94:88:a9:92:ae:
                    d3:07:c1:4c:bd:52:3e:61:95:39:51:10:d1:82:a8:
                    38:38:10:94:82:94:5e:5c:38:d4:6d:17:d7:df:db:
                    b4:d4:fc:7f:af:8c:6b:73:50:63:5f:3c:03:f9:10:
                    4f:42:2e:07:4b:f5:b9:44:f4:d7:3e:8e:ae:16:44:
                    d6:8d:cf:64:94:38:ff:54:18:42:ac:7c:c6:a7:cd:
                    fa:85:ad:00:32:c8:37:33:77:17:7f:1f:4c:aa:d7:
                    8b:79:f2:34:bd:08:a4:d5:bb:bd:3f:8f:54:e1:e6:
                    ae:27:10:1c:d4:8e:48:2a:8b:18:5a:64:69:a4:6a:
                    75:f0:05:8a:82:ac:ef:9e:fe:01:5e:6e:97:85:06:
                    c3:7a:aa:70:2e:ad:6e:e7:40:9a:bd:b0:51:97:12:
                    b4:8f:07:54:97:81:52:b4:89:cf:01:e4:7b:7d:5c:
                    e2:e2:1f:20:f0:34:45:6b:bf:cb:85:10:ab:ed:95:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:68:71:F2:0B:BA:6D:81:69:78:0C:9A:D8:15:BC:1C:9F:A2:D9:67
            X509v3 Authority Key Identifier:
                keyid:16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139392e302f32342d3234203d3e20323635363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:70:be:03:b2:53:4a:7f:6c:a5:32:47:2a:6e:0b:1c:ea:
         67:ff:d8:ca:13:77:0b:7d:ee:c9:d6:19:a2:07:2c:79:73:64:
         11:b7:b9:40:d2:3f:32:2b:3d:f5:c9:73:12:43:b0:02:65:55:
         16:7a:08:e1:00:4c:06:78:9e:41:96:2e:70:b6:f1:07:80:bf:
         bc:b9:6c:18:70:4a:b7:a7:ea:69:07:39:51:0e:b7:a2:e5:05:
         30:2b:aa:37:d7:12:a1:a4:fd:7d:ec:b6:8a:b6:09:0a:f3:7d:
         d0:e1:09:be:9c:df:42:81:54:bf:d7:31:4a:f2:22:65:9e:30:
         e1:5a:d0:3a:5e:1c:7f:33:09:03:0d:6b:d5:7a:c4:d5:40:0c:
         10:f3:c8:e8:66:fc:43:28:08:5b:3b:f7:17:0d:8d:c3:e3:45:
         a2:a2:1b:d3:6c:ed:63:77:7a:88:74:7e:04:14:53:21:35:53:
         7f:ac:79:42:ff:19:47:07:dd:ee:68:c6:19:9d:27:99:d1:05:
         25:cd:96:2f:50:9f:cb:a9:6d:12:4a:4e:8c:3b:66:58:ac:5f:
         72:f5:c4:d1:f9:07:74:5e:a2:81:9d:3d:28:3d:f0:4c:77:ab:
         29:2b:3f:1e:15:ee:4a:3a:ce:bb:0e:31:48:8f:8c:5d:11:06:
         1f:34:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:34:44 2025 by rpki-client