Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa
File:                     3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          n/X+djnBAVeygIJbEuviZGiuYMVhxKtB38liMPbK+Tg=
Subject key identifier:   56:A3:9F:48:AC:0F:E9:12:94:6B:5A:A2:87:0A:AE:CC:4D:87:E4:61
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       46F018757555983B4B12DDD2C466AFDEBD5D965F
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 01 Jul 2025 23:24:25 +0000
ROA not before:           Tue 01 Jul 2025 23:19:25 +0000
ROA not after:            Tue 30 Jun 2026 23:24:25 +0000
asID:                     13579
IP address blocks:        207.248.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:18:75:75:55:98:3b:4b:12:dd:d2:c4:66:af:de:bd:5d:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jul  1 23:19:25 2025 GMT
            Not After : Jun 30 23:24:25 2026 GMT
        Subject: CN=56A39F48AC0FE912946B5AA2870AAECC4D87E461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:67:a3:46:80:e3:00:70:9b:99:d4:62:51:
                    73:c5:1b:03:3e:db:a2:7c:4d:a1:3e:a7:66:94:76:
                    d3:ce:fc:37:59:ae:03:55:62:36:f9:44:fc:44:e6:
                    6b:5f:4b:42:f6:96:04:52:9e:7a:e6:b6:93:4c:1a:
                    1c:0f:f0:bc:da:30:00:f0:61:36:45:6a:57:6f:6b:
                    ea:aa:d1:7d:df:89:8f:12:b0:69:06:3e:81:c8:cd:
                    03:c6:c6:83:90:97:39:f7:00:31:3e:53:04:5a:d6:
                    ba:48:2c:da:3b:c9:a1:b8:80:69:6c:15:b6:ad:6c:
                    96:78:f5:3a:05:1f:c5:cd:42:2e:da:0a:1b:70:83:
                    21:dd:91:27:73:de:bd:da:5a:05:24:d4:00:02:2a:
                    ee:41:10:c9:42:2d:04:f8:d5:6e:74:8b:fe:a0:34:
                    d3:5d:b2:34:b2:a7:ac:01:9f:3b:6e:b3:51:f8:9d:
                    5f:64:be:2f:20:a3:b2:0c:01:75:f4:22:05:38:c9:
                    6a:e4:b9:57:e4:67:b5:2d:ba:f2:ba:95:8d:2f:00:
                    44:65:27:f8:89:57:97:41:70:c8:95:e5:1f:0e:5f:
                    5a:2d:95:09:49:31:f9:4c:c8:c2:a6:43:fc:62:db:
                    60:c8:d4:6f:8a:3f:4d:10:d3:60:09:6c:ec:8c:f0:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A3:9F:48:AC:0F:E9:12:94:6B:5A:A2:87:0A:AE:CC:4D:87:E4:61
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:d6:e5:76:fd:7e:0a:1d:d6:81:ba:06:42:fd:c2:ad:8f:dc:
         6b:16:84:29:41:42:d2:37:77:e4:63:c9:d3:0a:b9:9b:9c:c3:
         44:e9:a2:81:9b:a5:46:aa:ec:67:83:1b:4b:3d:30:7c:f7:10:
         9f:33:c9:ce:d7:7e:a2:93:9c:66:db:59:69:8a:4b:7b:7f:11:
         92:d5:4b:91:53:4f:59:82:fa:5f:98:ee:40:c7:2d:9c:a5:10:
         9b:39:10:e1:b1:6e:1c:49:98:87:35:4a:84:08:c6:cf:32:47:
         c8:f0:51:95:28:27:e6:0c:dc:fe:5e:cd:5f:06:95:be:95:cd:
         67:ab:77:25:3c:a8:89:22:70:ee:c5:a0:c5:39:dc:c7:b3:cc:
         53:2a:57:e6:4d:db:2b:56:f4:26:7c:b5:28:8c:51:9a:a2:2a:
         86:dd:51:ff:c3:91:54:a9:78:c8:48:2f:67:89:e7:8a:3d:9f:
         3e:1f:2f:9a:16:51:3f:73:10:3e:c3:7c:dc:10:44:61:df:cf:
         49:1a:82:48:8a:e8:4e:c3:de:4c:ca:ea:b5:31:b7:6d:6f:97:
         75:24:73:63:73:93:8a:fa:52:4f:01:1e:f9:9c:cd:4a:cf:5a:
         11:c8:c1:ed:62:a0:39:a1:02:60:6b:98:b8:8c:53:66:99:52:
         38:55:28:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:43:04 2025 by rpki-client