Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20333936393832.roa
File:                     3133322e3235352e302e302f32322d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          WiGabRJzL2fybR6N8v5nlJ45uiweQOsGcSA5K+6EYUw=
Subject key identifier:   CF:B3:39:4E:FD:23:DB:3C:C5:E9:93:16:E8:E8:7B:37:92:1D:B6:13
Certificate issuer:       /CN=6D3556529CE5599E78565FB2F26BF5285D573D92
Certificate serial:       42F12702D53DC31216685EC717D7BE196F257DA6
Authority key identifier: 6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20333936393832.roa
Signing time:             Sat 20 Sep 2025 19:47:50 +0000
ROA not before:           Sat 20 Sep 2025 19:42:50 +0000
ROA not after:            Sat 19 Sep 2026 19:47:50 +0000
asID:                     396982
IP address blocks:        132.255.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 23:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:27:02:d5:3d:c3:12:16:68:5e:c7:17:d7:be:19:6f:25:7d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3556529CE5599E78565FB2F26BF5285D573D92
        Validity
            Not Before: Sep 20 19:42:50 2025 GMT
            Not After : Sep 19 19:47:50 2026 GMT
        Subject: CN=CFB3394EFD23DB3CC5E99316E8E87B37921DB613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:88:fb:d8:bc:26:e3:2d:f1:51:2b:0c:07:
                    ad:84:48:34:44:3e:8a:37:3a:ad:fa:f4:e2:1e:ea:
                    62:d9:cc:05:b8:e8:e7:f7:ea:fd:12:5b:58:b3:5a:
                    bf:fe:5b:b7:7b:a1:6e:47:0a:5f:4a:c1:0d:2e:aa:
                    12:22:10:60:d9:54:dc:6e:b5:ae:83:91:de:87:74:
                    29:5b:f4:b5:76:c1:c8:7f:9a:f0:fc:b3:44:83:ae:
                    7d:81:2a:e2:7e:06:01:21:9a:e1:13:3b:ac:85:62:
                    6b:18:73:5b:1c:9d:03:e5:dc:d8:b1:3a:6c:86:05:
                    8a:47:af:68:fa:83:df:a4:10:f6:68:77:7d:52:4b:
                    13:df:e2:b2:3d:7b:5f:b4:7f:ae:24:7e:bc:62:6d:
                    d7:eb:8f:cc:b6:9a:e5:c2:23:53:7a:a6:7d:df:71:
                    4e:38:92:48:e5:b1:b1:80:67:64:7b:71:21:b0:08:
                    d0:2a:00:17:53:0a:bb:ff:3b:e7:7f:1c:4c:bd:2a:
                    3b:b8:c2:95:14:1e:d3:8f:02:97:27:c8:e2:db:f5:
                    b5:f0:a8:f5:9a:ef:88:44:7a:8c:5a:4d:20:c1:49:
                    cb:04:60:0f:10:45:6a:11:79:92:07:d3:ab:02:b2:
                    39:bd:22:9b:d1:30:72:95:a1:2a:73:3b:ab:10:a1:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:39:4E:FD:23:DB:3C:C5:E9:93:16:E8:E8:7B:37:92:1D:B6:13
            X509v3 Authority Key Identifier:
                keyid:6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:88:47:7f:46:17:77:21:bf:88:3a:c6:fd:7b:46:c7:f7:3d:
         b6:58:0e:16:79:c3:bb:0f:25:16:10:e6:bf:ca:9f:18:af:3c:
         3f:38:24:4f:f4:1b:44:f0:10:35:80:f2:cc:d0:63:e1:a0:2f:
         d3:46:4b:36:1c:d2:3d:01:0e:1e:87:9b:17:0b:85:b5:e0:25:
         05:5a:89:2e:9e:aa:cd:44:a0:ab:06:c0:98:9d:cf:48:9c:d1:
         7d:5d:51:69:85:85:a3:24:53:4e:0f:91:e8:64:cc:32:1a:11:
         bc:11:96:74:7e:5c:00:16:6d:e3:d9:b8:22:c4:d3:f3:bb:15:
         f3:b6:de:ee:c1:c5:56:35:2e:a9:cb:04:3b:c5:c0:23:b2:e6:
         ec:bf:93:40:8c:d5:2b:85:fd:28:fb:b8:07:bf:38:7b:89:06:
         00:7d:09:f6:09:09:05:48:56:ed:0b:02:5b:b0:1a:ba:0b:c3:
         f2:b1:e4:b5:93:48:45:c1:a8:61:44:51:ad:f9:b2:9c:b8:d5:
         fa:9d:07:29:6b:31:09:44:0e:73:c8:ed:e3:20:d2:7a:3e:31:
         33:6c:3d:73:a6:f2:2a:30:05:fe:79:60:9b:39:a5:54:17:1a:
         76:b4:30:67:3b:50:33:b0:2d:09:aa:df:d0:c4:5e:2d:eb:0b:
         b5:9a:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:49:40 2025 by rpki-client