Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3139322e3130302e3230312e302f32342d3234203d3e203133363739.roa
File:                     3139322e3130302e3230312e302f32342d3234203d3e203133363739.roa (raw, json)
Hash identifier:          hkn8owrnxI5PjhRU3o3su2lGlX4vrxAxLUEeK0wJFzM=
Subject key identifier:   AD:F2:61:A7:04:A9:1F:19:8C:62:62:20:E4:BF:52:07:CC:8B:C3:0E
Certificate issuer:       /CN=699C6BD3B24786A710F797596FEEF22BA6C952DB
Certificate serial:       49FED6895CFF4D14D93A06828B3E0454BCA9CC58
Authority key identifier: 69:9C:6B:D3:B2:47:86:A7:10:F7:97:59:6F:EE:F2:2B:A6:C9:52:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3139322e3130302e3230312e302f32342d3234203d3e203133363739.roa
Signing time:             Fri 20 Jun 2025 18:10:00 +0000
ROA not before:           Fri 20 Jun 2025 18:05:00 +0000
ROA not after:            Fri 19 Jun 2026 18:10:00 +0000
asID:                     13679
IP address blocks:        192.100.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fe:d6:89:5c:ff:4d:14:d9:3a:06:82:8b:3e:04:54:bc:a9:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699C6BD3B24786A710F797596FEEF22BA6C952DB
        Validity
            Not Before: Jun 20 18:05:00 2025 GMT
            Not After : Jun 19 18:10:00 2026 GMT
        Subject: CN=ADF261A704A91F198C626220E4BF5207CC8BC30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:1a:29:6c:da:16:e4:71:4a:e8:64:20:cb:
                    5a:1e:f0:2a:22:f0:21:5d:e4:6c:d0:5d:6d:0c:07:
                    8f:45:fb:5c:e5:57:ba:f1:5a:40:4e:9f:c3:d0:24:
                    2d:48:8c:9c:8e:c2:4e:4c:ad:da:6a:ce:10:1b:d6:
                    a4:13:29:61:37:8b:c7:7a:00:1e:16:51:7e:fb:25:
                    33:9d:f9:cf:68:29:75:d8:b9:af:cd:62:0f:1b:34:
                    ef:37:77:78:fd:33:9a:46:ad:14:59:40:07:a8:1a:
                    5e:5b:f3:5e:93:03:f0:27:ea:5b:ae:95:f5:7f:48:
                    f1:e9:3a:4e:a7:b0:a5:85:d7:d4:d3:10:12:df:75:
                    dd:b6:ef:d4:2c:24:19:f6:1e:90:8b:73:c4:4a:d2:
                    d1:90:53:9e:3c:56:5d:00:78:04:9d:28:78:3b:f2:
                    28:95:bd:f8:41:fd:9c:d8:bb:2b:47:5d:cf:64:55:
                    82:2c:00:f9:90:2e:b0:b1:69:1f:4c:2b:f5:46:55:
                    13:26:0a:3c:78:6d:59:68:8b:ad:86:5f:ba:7a:91:
                    37:b3:13:10:e9:56:5b:95:21:a6:bb:2d:c7:20:82:
                    15:05:c1:22:bd:fb:21:6b:27:9a:03:af:76:ce:52:
                    65:10:76:86:64:e0:bc:20:5e:53:74:8e:11:fe:77:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F2:61:A7:04:A9:1F:19:8C:62:62:20:E4:BF:52:07:CC:8B:C3:0E
            X509v3 Authority Key Identifier:
                keyid:69:9C:6B:D3:B2:47:86:A7:10:F7:97:59:6F:EE:F2:2B:A6:C9:52:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3139322e3130302e3230312e302f32342d3234203d3e203133363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:7d:19:36:18:8a:15:22:f7:fd:49:2c:cb:fd:d4:11:56:
         7b:ac:fc:f5:46:4d:1a:62:18:1a:82:27:6e:14:15:f5:24:f3:
         7b:5e:b4:e0:ff:8d:19:16:0d:4f:0b:06:2a:aa:e8:26:0e:34:
         19:13:1c:32:c7:09:09:d5:d3:4f:33:53:52:15:83:40:11:dc:
         47:39:e6:b1:36:80:16:f3:68:63:d9:b6:2c:d5:63:d2:0d:6b:
         bb:ee:c2:03:b8:31:da:ca:83:37:53:e8:84:a1:ec:ed:46:21:
         cc:d7:2c:df:01:86:dc:80:f9:c3:66:6a:85:51:7c:ec:6a:5a:
         79:79:7b:61:1b:eb:03:4b:b4:96:df:18:e2:96:0c:d0:00:29:
         30:f4:26:8e:b3:a0:6d:c3:cb:d1:c4:a8:79:7f:35:41:f7:26:
         d3:dc:35:a9:85:b1:6a:e4:1d:60:7c:3a:ec:85:74:7c:c8:8b:
         ae:71:de:5d:3f:3c:a6:37:6a:8c:72:4f:57:b7:04:23:cd:07:
         59:5b:fa:6c:83:8b:81:3e:35:54:58:c4:fd:58:7f:84:77:c8:
         80:2d:a8:34:96:a4:21:0e:ea:2e:f1:40:de:2a:82:ba:60:5d:
         4f:95:f1:c4:46:58:34:77:cb:c2:15:f8:d7:04:e7:44:60:17:
         59:7e:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:08:53 2025 by rpki-client