Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3136302e302f32302d3234203d3e203331383938.roa
File:                     3134342e32322e3136302e302f32302d3234203d3e203331383938.roa (raw, json)
Hash identifier:          oZn92KWEuXWw6DOCkIB4eSJluPN0Udf/N1lucV+IyaE=
Subject key identifier:   E3:BF:9F:D8:CE:70:E0:FB:8A:A2:C1:47:25:8B:CA:4F:63:35:A0:09
Certificate issuer:       /CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
Certificate serial:       31B9D677343C2E40F25F7D98E04E903379D6C4DD
Authority key identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3136302e302f32302d3234203d3e203331383938.roa
Signing time:             Fri 17 Oct 2025 18:40:00 +0000
ROA not before:           Fri 17 Oct 2025 18:35:00 +0000
ROA not after:            Fri 16 Oct 2026 18:40:00 +0000
asID:                     31898
IP address blocks:        144.22.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 22:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b9:d6:77:34:3c:2e:40:f2:5f:7d:98:e0:4e:90:33:79:d6:c4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
        Validity
            Not Before: Oct 17 18:35:00 2025 GMT
            Not After : Oct 16 18:40:00 2026 GMT
        Subject: CN=E3BF9FD8CE70E0FB8AA2C147258BCA4F6335A009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:41:34:ce:be:09:64:e7:3e:86:0f:8e:c9:
                    2b:60:97:6d:d2:a0:5c:3d:33:30:bd:2b:4a:03:50:
                    72:3d:be:a8:3f:57:0e:38:5c:cf:75:f2:1f:73:be:
                    36:65:04:46:17:9c:07:bb:27:4a:3c:22:39:c4:d9:
                    cc:00:f6:7a:77:62:85:84:82:3b:b8:df:80:5e:51:
                    f0:d9:f6:7b:d1:83:76:2c:89:83:b7:54:9d:de:b8:
                    3d:cb:82:d9:69:f0:3b:e7:a6:33:8b:3e:c4:66:4e:
                    6c:fc:b3:ce:35:b7:36:dc:b9:74:7c:a6:0f:25:c7:
                    76:a8:ad:a2:f0:d1:42:45:c9:14:3a:66:60:a9:1a:
                    d4:52:8c:2d:3e:1f:2c:8b:ce:cd:70:87:99:71:30:
                    5d:1e:c2:7a:55:cb:5c:e6:4c:d1:62:71:c4:ed:9a:
                    df:c3:91:45:ce:bd:48:48:b7:93:80:23:f3:ee:29:
                    8f:ce:62:74:80:47:79:1d:43:39:79:a1:8c:f0:bc:
                    51:1d:19:8b:ac:4b:6a:42:bb:66:48:2a:c2:d2:10:
                    fd:ea:93:29:15:9c:8f:c7:ff:79:1a:13:f6:16:ce:
                    74:24:6f:d4:f5:30:a3:fc:dd:17:41:18:ad:4d:1a:
                    34:99:78:12:1f:9e:42:7e:89:64:b0:95:14:85:1f:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:9F:D8:CE:70:E0:FB:8A:A2:C1:47:25:8B:CA:4F:63:35:A0:09
            X509v3 Authority Key Identifier:
                keyid:43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3136302e302f32302d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.22.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:71:64:63:0d:f2:0e:e7:a1:38:7d:5b:39:19:dc:1e:43:49:
         e8:d0:a3:48:1e:54:20:ad:f8:2c:8e:3b:04:23:9d:ea:b2:ff:
         71:6e:02:3c:ee:5d:1d:27:8e:07:dd:8c:dc:3c:f9:ed:68:7a:
         66:cf:db:53:b2:df:e4:2f:49:ed:34:fe:a2:c7:85:50:67:4f:
         a5:62:55:d1:52:fa:ef:9b:4a:ed:c0:90:75:8a:9a:b9:c4:f0:
         1b:3d:10:43:d6:06:6a:95:f6:9d:d9:ac:08:8f:bc:0a:73:7c:
         eb:22:eb:b3:ff:73:81:59:58:51:4f:bf:3c:c4:06:36:84:f8:
         20:ce:5a:cd:3e:20:9d:ed:f2:1e:49:03:96:22:11:9f:84:e9:
         87:e2:04:c4:89:ac:c3:13:ac:ea:c8:f4:df:84:f8:0e:8f:09:
         06:3a:c5:92:57:52:7f:73:c2:3f:e7:c3:20:d4:1c:fb:53:58:
         3b:1f:fe:72:60:45:71:8b:9b:55:cd:6b:6f:fd:29:3e:1c:2f:
         6c:b6:7b:22:0f:1e:6d:9f:76:fd:ca:ca:5e:b0:0e:ee:b3:8a:
         e3:c1:3b:42:01:4c:2b:60:d9:91:5a:34:af:46:3f:d4:05:03:
         a8:96:66:f3:10:4f:31:5f:c0:36:5f:ff:f9:84:0b:41:22:a2:
         fe:35:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:25 2025 by rpki-client