Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3132382e302f31392d3234203d3e203331383938.roa
File:                     3134342e32322e3132382e302f31392d3234203d3e203331383938.roa (raw, json)
Hash identifier:          6hVHn7XNLl3Tb1QecJ4zKYcUqMzmIIzqGbsu4OAsP20=
Subject key identifier:   30:00:76:A2:08:E4:B3:49:5E:A3:E7:97:19:6E:02:22:1F:0F:D8:55
Certificate issuer:       /CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
Certificate serial:       33891AC66F0170044F64A667CF52ABB172126529
Authority key identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3132382e302f31392d3234203d3e203331383938.roa
Signing time:             Fri 17 Oct 2025 18:45:00 +0000
ROA not before:           Fri 17 Oct 2025 18:40:00 +0000
ROA not after:            Fri 16 Oct 2026 18:45:00 +0000
asID:                     31898
IP address blocks:        144.22.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 22:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:89:1a:c6:6f:01:70:04:4f:64:a6:67:cf:52:ab:b1:72:12:65:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
        Validity
            Not Before: Oct 17 18:40:00 2025 GMT
            Not After : Oct 16 18:45:00 2026 GMT
        Subject: CN=300076A208E4B3495EA3E797196E02221F0FD855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:d1:ad:1f:c6:7a:f2:b7:4f:78:0a:70:87:
                    99:48:59:bc:ce:98:08:1c:d9:d6:07:5a:19:a9:6f:
                    28:54:f0:00:bc:af:0e:46:5c:b7:d3:41:9f:89:aa:
                    ef:45:9a:63:7c:59:ca:37:6b:84:6f:ea:67:a1:01:
                    fa:c5:ec:0a:3c:51:19:6b:77:69:b1:29:4b:54:73:
                    d0:92:6c:99:99:d0:38:cf:3e:53:13:fb:20:d7:db:
                    f9:5e:d0:d7:98:f0:53:06:c3:4a:ea:51:06:66:dc:
                    5d:bd:6b:69:3e:cb:0d:3b:2d:50:46:ad:71:14:cb:
                    bc:78:ca:b9:7f:de:4c:a6:aa:f8:3f:b1:02:f9:a0:
                    a2:b5:2a:cc:ff:1f:01:d3:18:9b:fb:2c:53:66:ce:
                    95:22:96:92:55:ad:54:18:ad:38:92:ef:09:96:0d:
                    bf:c6:c9:14:e1:d5:f4:64:a6:2a:ff:a8:2f:0e:b7:
                    a3:2f:9f:24:7e:01:3d:58:57:f7:23:ac:c0:d1:f1:
                    5d:32:5c:ad:95:62:8d:d4:f3:ef:2e:d5:d6:2e:2e:
                    65:4f:6f:2b:62:95:06:e5:c5:e7:d4:28:cc:64:6b:
                    b8:ff:c8:c1:8b:cd:db:40:28:db:3f:91:96:4f:4f:
                    f1:dc:0a:d9:29:ac:de:2e:3a:1d:bd:02:73:85:d8:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:76:A2:08:E4:B3:49:5E:A3:E7:97:19:6E:02:22:1F:0F:D8:55
            X509v3 Authority Key Identifier:
                keyid:43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3132382e302f31392d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.22.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:55:c6:5c:1e:4f:ed:68:bb:b3:f3:fe:94:53:e3:36:ea:
         63:fb:25:aa:f7:20:f0:3c:c6:d4:66:e4:0c:9f:18:e3:25:39:
         48:ff:2e:fc:48:88:68:84:6b:7e:f7:81:c7:9e:1e:de:1e:6c:
         21:43:d2:0a:9d:45:1e:44:e6:e1:88:67:a6:01:57:2a:23:83:
         52:e3:a4:13:79:d8:ca:91:fc:3a:df:66:53:02:ae:cf:0b:a5:
         80:75:19:a3:b0:ac:80:a8:45:66:32:a7:a0:5b:57:b4:fa:fa:
         9e:ca:17:81:b9:92:f5:a9:52:fe:67:89:ad:80:76:40:df:e3:
         f1:05:68:2c:e3:d5:fe:d8:5f:0d:68:98:0a:cb:74:5a:4d:84:
         75:c8:49:5b:09:72:88:16:4c:e6:83:c3:40:89:b1:70:6b:9d:
         44:09:62:15:8d:fe:2a:b5:a9:dd:63:97:bd:62:66:d9:ab:99:
         5e:e3:8d:02:0d:95:02:7a:b6:8e:df:41:22:3e:11:aa:58:b1:
         a3:a1:a9:a3:8f:4f:2b:94:20:91:65:15:58:7e:21:7e:17:41:
         09:34:58:18:eb:78:a4:d9:4b:ad:59:dc:64:16:d6:be:63:d0:
         4d:43:5e:4f:07:5d:68:88:dd:09:05:f1:09:f7:9f:ce:55:06:
         87:77:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:28 2025 by rpki-client