Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3131322e302f32312d3234203d3e203237383832.roa
File:                     3139322e3232332e3131322e302f32312d3234203d3e203237383832.roa (raw, json)
Hash identifier:          +dBasjD0jGGC8qWRv2a5n3WciLwFuU60VxptMY+6JQs=
Subject key identifier:   50:FA:17:7B:4B:89:57:9D:24:A1:3A:13:FE:DC:8C:82:15:23:61:63
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       2088A66AB6773DA3764DBEA5843ED44FF89480E5
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3131322e302f32312d3234203d3e203237383832.roa
Signing time:             Wed 24 Jun 2026 21:49:38 +0000
ROA not before:           Wed 24 Jun 2026 21:44:38 +0000
ROA not after:            Wed 23 Jun 2027 21:49:38 +0000
asID:                     27882
IP address blocks:        192.223.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:88:a6:6a:b6:77:3d:a3:76:4d:be:a5:84:3e:d4:4f:f8:94:80:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jun 24 21:44:38 2026 GMT
            Not After : Jun 23 21:49:38 2027 GMT
        Subject: CN=50FA177B4B89579D24A13A13FEDC8C8215236163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:8d:86:39:cf:e4:1f:a9:1a:50:68:53:fb:
                    c4:84:0c:0a:12:2d:b0:99:28:d8:d3:79:41:3c:b5:
                    51:34:2d:c9:f7:e2:76:11:2f:fb:95:9c:ef:d6:07:
                    f7:f3:22:d4:bd:c6:6d:c2:e3:51:f8:54:67:2f:5d:
                    3f:11:e3:41:ce:50:c4:99:5b:3f:69:48:a8:19:64:
                    5c:45:ad:f4:36:e3:01:bc:f6:d3:68:4d:ab:f8:cc:
                    55:51:7d:5b:ae:3b:03:b0:6a:35:46:fe:3d:f8:66:
                    f1:fc:c1:c7:f1:15:fe:38:b1:63:3b:5d:65:eb:04:
                    ad:78:0d:5d:03:f6:d4:4f:a9:16:04:43:5d:86:32:
                    eb:b5:55:4d:fc:58:76:6b:f7:9c:56:28:0a:b9:39:
                    e7:ac:b8:16:64:e4:00:4b:90:5f:3d:0a:d9:f4:3a:
                    80:6c:47:0c:63:09:e7:d9:da:5d:ef:14:d4:30:70:
                    a9:46:12:37:cb:e3:ca:9d:52:c7:d7:32:59:ca:6c:
                    a9:4e:b3:a4:2a:4c:9e:cf:46:2b:9d:47:08:9d:ae:
                    fd:f8:18:cf:b1:bb:e5:ba:62:7e:01:88:00:a2:67:
                    86:60:ed:06:da:28:66:e7:ef:d8:03:77:a7:ec:6f:
                    e3:83:65:d7:4b:2b:54:dd:cd:50:01:5d:6d:4f:f8:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:17:7B:4B:89:57:9D:24:A1:3A:13:FE:DC:8C:82:15:23:61:63
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3131322e302f32312d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:f1:43:ce:16:bf:06:36:b0:23:9c:af:a7:0b:36:80:8a:
         6b:bf:7a:dc:31:f5:d0:b8:b0:4c:dd:4c:63:f8:a0:e4:56:27:
         e5:5a:dc:10:0b:e5:20:cc:b9:b6:21:06:b0:b5:48:85:24:9d:
         99:39:5f:fb:7a:88:9d:78:77:17:64:15:87:b7:2f:28:e8:d5:
         a5:02:75:4a:82:16:ca:e2:45:08:ed:17:16:ce:b1:4d:de:1e:
         80:15:65:8d:fd:c4:af:61:90:61:16:ba:ae:de:88:90:91:2a:
         99:80:8c:a1:3e:a9:6e:d0:97:f1:af:71:f7:1b:bd:70:1a:88:
         26:17:93:fa:30:3a:82:06:6e:76:a9:ca:60:0e:46:25:fb:55:
         f8:93:b6:39:12:da:f8:b9:2a:43:da:9f:64:e2:33:37:14:7d:
         53:47:31:69:8b:08:ed:56:52:d2:2a:57:21:b3:f4:5c:5b:8e:
         c9:95:cf:97:2d:b6:ad:f7:b1:9e:63:ca:d6:2b:54:42:79:26:
         a2:78:ab:8f:29:b3:c0:55:6e:15:56:9d:c8:8b:68:86:bb:ab:
         6f:c0:81:c1:29:4f:66:13:89:b9:05:7f:9c:c2:49:69:e0:4e:
         20:70:2b:e2:4e:c2:13:b8:de:1f:c3:9a:cb:a1:be:1e:f2:b7:
         34:19:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:04:37 2026 by rpki-client