Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32322d3234203d3e203235363230.roa
File:                     3139322e3232332e39362e302f32322d3234203d3e203235363230.roa (raw, json)
Hash identifier:          p3ped52w3QYHltxn5ccO5WqGthXv2ev7z3i+kjGtnL8=
Subject key identifier:   D9:DC:5D:34:94:4F:69:7A:A2:7C:C2:EB:B3:0D:0F:59:67:25:9C:DE
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       333862678F7B03D74C3D6838B2D5B1A191F3A82E
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32322d3234203d3e203235363230.roa
Signing time:             Wed 17 Jun 2026 17:48:16 +0000
ROA not before:           Wed 17 Jun 2026 17:43:16 +0000
ROA not after:            Wed 16 Jun 2027 17:48:16 +0000
asID:                     25620
IP address blocks:        192.223.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:38:62:67:8f:7b:03:d7:4c:3d:68:38:b2:d5:b1:a1:91:f3:a8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jun 17 17:43:16 2026 GMT
            Not After : Jun 16 17:48:16 2027 GMT
        Subject: CN=D9DC5D34944F697AA27CC2EBB30D0F5967259CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:0d:46:27:f0:50:09:3e:32:57:1d:dc:37:
                    1b:fd:a3:bb:20:82:da:97:57:e0:7a:e7:87:90:1f:
                    37:08:95:5a:81:34:8b:46:e4:e6:52:0d:5c:aa:bf:
                    44:6d:2d:f3:80:ed:91:4a:a6:db:7d:00:a9:11:4c:
                    70:d7:6b:ce:62:b3:41:79:24:d4:67:fb:20:78:40:
                    c6:ad:2e:b7:9c:4c:79:03:f0:a7:e1:6a:84:84:c0:
                    d9:54:42:6a:a1:a4:01:c7:bd:9d:9a:50:18:9e:ac:
                    aa:90:92:33:2f:91:0f:23:33:eb:f8:a6:7f:e4:86:
                    f3:8a:d8:bd:d5:87:63:2b:39:b4:bc:65:4b:a3:b3:
                    ec:6d:a7:14:05:36:a6:de:2d:06:ca:71:a0:28:bb:
                    0b:f6:a2:91:93:7d:a8:61:d1:28:37:cb:01:f8:cd:
                    92:7c:d6:78:18:5e:75:71:ed:6f:f2:26:32:41:c1:
                    fd:72:aa:9e:07:03:4f:a7:40:46:99:a7:bd:d4:2e:
                    4b:08:3d:e0:ce:35:80:e8:36:ac:91:af:34:79:08:
                    8a:1f:df:6d:39:30:2b:d2:94:05:69:1f:da:6b:a4:
                    11:56:9b:60:66:af:0a:1f:31:10:63:ac:53:52:46:
                    96:2e:54:42:81:94:25:94:8b:d2:a7:2d:61:1b:85:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:5D:34:94:4F:69:7A:A2:7C:C2:EB:B3:0D:0F:59:67:25:9C:DE
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32322d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:19:21:72:3c:d9:5a:b5:f0:f6:81:4b:6a:9a:05:7f:ce:
         71:3d:a4:84:15:e0:0a:d2:4f:b7:0d:fd:23:b5:c9:49:33:62:
         fe:49:77:c1:60:8a:36:28:a6:c1:1f:b7:90:3f:05:06:28:e4:
         37:86:f0:7d:15:c6:57:a8:72:e7:93:4c:09:a5:fb:9c:b0:32:
         67:6d:4c:ec:2b:81:ad:e6:c0:5d:44:a7:d4:dc:d6:b8:d9:18:
         96:c4:19:7d:ec:0a:79:95:bc:79:21:af:37:62:42:cd:29:4f:
         59:4a:ab:3e:c7:bc:a8:a4:6b:65:72:41:37:34:32:f6:38:00:
         59:b9:86:98:5e:44:28:5e:47:be:e8:50:ba:b7:b1:03:e2:66:
         28:53:bf:ff:b9:72:6a:8b:b5:01:10:ec:82:59:fb:ce:ac:9b:
         37:c9:bf:c3:a0:99:6b:fd:e7:c2:b6:24:79:65:ff:01:66:59:
         39:e2:d0:5f:2a:79:48:4e:df:a3:3e:74:7d:44:65:e6:65:e0:
         8e:14:af:ab:c9:82:44:ab:a6:91:20:22:ba:51:11:c6:7e:3e:
         05:84:6b:51:d5:26:d8:7c:ff:4c:53:d1:e6:9b:13:77:a3:95:
         94:41:5c:19:db:14:56:76:9b:55:72:2a:a7:84:99:5f:8b:a3:
         5e:c6:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:30:49 2026 by rpki-client