Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e3132322e3234302e302f32322d3232203d3e20323632313931.roa
File:                     3138352e3132322e3234302e302f32322d3232203d3e20323632313931.roa (raw, json)
Hash identifier:          QSGTyh+oueb7nEjzC9LAKaVPFvoeJsazWiy8OcJHo84=
Subject key identifier:   F2:0C:38:82:4C:AD:43:2D:1E:78:01:EA:01:DA:D5:DD:81:AA:D8:9F
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       39F7A68E06B12F76C25E55763F00CE2E4CFAA219
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e3132322e3234302e302f32322d3232203d3e20323632313931.roa
Signing time:             Fri 10 Oct 2025 12:49:55 +0000
ROA not before:           Fri 10 Oct 2025 12:44:55 +0000
ROA not after:            Fri 09 Oct 2026 12:49:55 +0000
asID:                     262191
IP address blocks:        185.122.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 16:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f7:a6:8e:06:b1:2f:76:c2:5e:55:76:3f:00:ce:2e:4c:fa:a2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Oct 10 12:44:55 2025 GMT
            Not After : Oct  9 12:49:55 2026 GMT
        Subject: CN=F20C38824CAD432D1E7801EA01DAD5DD81AAD89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:0b:6d:dc:47:82:55:6a:7e:b5:d0:35:8f:
                    0f:24:e7:a7:48:b4:30:28:e4:c7:03:ec:fc:a0:9a:
                    fb:33:eb:25:7b:5b:dc:b0:69:b4:9f:5d:ca:fa:f8:
                    78:88:e9:c7:06:2a:db:2e:b6:9b:95:85:af:a6:73:
                    52:cf:66:f7:05:33:c4:7f:32:39:4c:7a:a1:d8:14:
                    10:74:43:4a:44:d2:0e:e2:67:22:c2:5e:27:39:a2:
                    dd:3e:7c:05:f2:0e:2c:08:d8:76:13:cb:a9:8b:5b:
                    9a:ad:2d:44:c4:a8:f3:47:b3:8a:5c:1d:44:eb:74:
                    c3:59:e1:2b:49:82:9c:26:5b:44:06:9f:25:35:3a:
                    e1:7c:65:ab:fd:55:68:54:34:e9:94:25:19:24:13:
                    10:77:66:3c:e6:69:97:38:2c:ec:38:d6:cd:74:80:
                    97:1f:46:82:2f:9b:56:b5:bd:48:ea:63:3e:5e:2a:
                    60:66:02:d7:82:09:93:8f:15:87:39:36:55:60:b1:
                    a4:54:34:59:d9:33:f6:d8:dd:d1:80:85:5e:a9:f9:
                    de:9a:37:88:4a:b2:ff:96:f0:ba:64:56:a2:07:6e:
                    32:f9:c3:96:a7:89:22:76:d5:0f:e4:3f:8a:66:95:
                    6e:30:b1:e3:be:98:95:60:13:ff:cb:a7:75:83:c3:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0C:38:82:4C:AD:43:2D:1E:78:01:EA:01:DA:D5:DD:81:AA:D8:9F
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e3132322e3234302e302f32322d3232203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:62:d2:f0:8a:9e:8a:02:c3:cb:ea:c6:e6:5a:e7:6c:dd:
         70:e0:f9:9f:b6:2d:2a:47:89:c9:1c:de:9f:8e:5a:db:d8:0b:
         cd:55:2a:f5:49:b7:f6:29:8b:b4:a9:7d:14:0e:3b:e9:74:b5:
         39:0a:1f:98:89:77:e1:11:9f:f3:6c:5c:75:dc:3c:38:07:ed:
         af:ee:25:c0:ab:08:3f:08:a6:67:42:d2:04:85:68:83:ba:62:
         02:c8:e9:71:9c:3a:1a:f2:bc:47:6f:ed:71:7d:7b:48:b5:9c:
         ca:23:2b:ae:40:3c:a5:58:95:45:ea:ba:19:28:e2:f4:78:3e:
         7e:b9:94:26:0a:da:62:54:b7:df:73:e7:93:67:e9:49:c0:51:
         b8:a2:84:1b:be:84:d5:d7:68:e9:66:33:fa:c0:db:5b:34:12:
         1f:0e:38:2c:6b:34:a4:8a:06:47:18:43:97:0b:0b:0d:9b:7e:
         0c:43:eb:ef:7a:6e:1c:b7:8e:6c:1c:c6:1b:f6:3f:3a:91:8e:
         76:14:b2:51:60:c5:61:40:82:54:d7:40:a7:f8:e0:a0:1d:e8:
         3f:5e:13:a9:ef:8d:f4:2c:93:ec:39:f4:d7:a0:b9:9d:08:49:
         98:32:71:68:be:e2:52:25:87:4e:61:3e:74:52:ca:59:a0:20:
         70:04:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:22 2025 by rpki-client