Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3137362e302f32302d3234203d3e203331383938.roa
File:                     3134342e32322e3137362e302f32302d3234203d3e203331383938.roa (raw, json)
Hash identifier:          tYsRRNQHuFqcihn8aHqGZZqhoQWJ81W8uIELlwB+POI=
Subject key identifier:   80:6F:FB:F9:00:17:9A:D9:8C:B6:8E:6E:74:36:42:57:A2:71:56:17
Certificate issuer:       /CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
Certificate serial:       3BEFE33ED75E68C85A456CF328A90EC9300AF1DF
Authority key identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3137362e302f32302d3234203d3e203331383938.roa
Signing time:             Fri 17 Oct 2025 18:45:01 +0000
ROA not before:           Fri 17 Oct 2025 18:40:01 +0000
ROA not after:            Fri 16 Oct 2026 18:45:01 +0000
asID:                     31898
IP address blocks:        144.22.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 22:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ef:e3:3e:d7:5e:68:c8:5a:45:6c:f3:28:a9:0e:c9:30:0a:f1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
        Validity
            Not Before: Oct 17 18:40:01 2025 GMT
            Not After : Oct 16 18:45:01 2026 GMT
        Subject: CN=806FFBF900179AD98CB68E6E74364257A2715617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:50:52:df:67:9c:ce:96:75:e9:a1:fd:7c:
                    92:ba:ab:9a:33:0e:f0:54:a6:a3:29:bd:1f:14:1b:
                    d8:b7:d0:81:d9:46:36:3c:79:75:8d:00:df:71:55:
                    89:82:7a:ee:73:1f:04:45:35:75:d6:2b:f2:1b:d5:
                    08:78:79:a6:ca:9c:10:cc:03:31:14:c9:2c:42:50:
                    3a:65:95:5b:73:c5:2d:35:d0:ff:5b:dc:38:50:67:
                    e1:80:c4:4a:b8:d9:e2:18:46:8c:ed:33:05:68:89:
                    69:c2:43:15:16:67:b4:f6:e3:8b:86:8d:45:e3:62:
                    b7:cf:f4:59:f4:2b:3c:89:95:07:4c:45:8c:6f:02:
                    66:f7:20:e6:63:b7:73:63:ff:98:72:e2:ac:9c:9b:
                    9b:ab:1f:c1:01:7e:61:ca:31:4e:c1:0b:3c:69:8f:
                    8b:b6:af:c8:93:28:28:b5:87:83:07:54:1c:b4:d1:
                    d4:1c:4e:d0:70:58:ce:45:e7:95:47:a6:36:f0:b8:
                    ae:c6:6e:1b:12:9c:f7:46:06:81:9c:a6:a5:d5:89:
                    28:99:c2:f6:db:25:48:49:eb:06:48:51:7a:8e:32:
                    53:da:34:a9:b9:b6:ae:e8:29:5f:0d:f8:3e:c3:66:
                    b7:63:26:89:fe:ec:7e:97:0a:ce:ad:41:39:45:a7:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:FB:F9:00:17:9A:D9:8C:B6:8E:6E:74:36:42:57:A2:71:56:17
            X509v3 Authority Key Identifier:
                keyid:43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e3137362e302f32302d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.22.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:60:26:82:f7:f0:17:35:cb:c6:8e:f6:37:ac:8e:d5:89:96:
         72:a0:40:ea:37:40:c4:d0:6e:3d:91:88:c8:b8:ab:78:cf:0c:
         8c:a0:3b:bb:b1:05:55:a6:80:45:c8:dd:60:8d:68:ce:fa:57:
         71:46:31:2f:08:17:ea:b9:6d:ad:6f:02:77:b3:db:01:01:2b:
         d8:9a:85:0a:7e:00:56:7a:f2:7f:0f:0c:12:b8:32:ec:4b:5f:
         00:90:6c:60:d5:ca:e3:00:8a:a8:11:9b:cc:30:03:df:38:0d:
         95:2e:9b:a5:98:85:c8:8e:5d:ff:ec:4e:7c:61:78:6c:35:36:
         05:4a:f6:8b:73:05:23:b4:23:d6:b2:30:62:0e:7a:49:d9:8d:
         43:59:7d:a0:16:8d:2e:8c:e1:da:5e:6a:23:46:84:21:32:35:
         b8:fd:bb:4a:43:3e:aa:7e:34:3b:c5:d4:48:82:fa:30:3b:47:
         ef:53:44:2a:39:fb:2e:af:bc:21:7c:e0:9a:c4:42:67:a8:e4:
         1e:96:9f:4d:2e:92:6b:9c:36:25:41:5c:7f:45:46:75:ad:0d:
         65:9d:9b:9c:89:7d:ad:72:62:e8:34:7a:bf:5c:23:b8:46:3b:
         d3:72:38:68:c7:5b:84:b9:1b:87:69:6e:4d:47:5b:3e:2e:1e:
         f8:3c:b4:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO+/jPtdeaMhaRWzzKKkOyTAK8d8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNEMkE2NjFCNkYxQjREMDBCMjkxNkI1MkI3Mjk0MTQw
MTZGNEM2QjAeFw0yNTEwMTcxODQwMDFaFw0yNjEwMTYxODQ1MDFaMDMxMTAvBgNV
BAMTKDgwNkZGQkY5MDAxNzlBRDk4Q0I2OEU2RTc0MzY0MjU3QTI3MTU2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmt1BS32eczpZ16aH9fJK6q5oz
DvBUpqMpvR8UG9i30IHZRjY8eXWNAN9xVYmCeu5zHwRFNXXWK/Ib1Qh4eabKnBDM
AzEUySxCUDpllVtzxS010P9b3DhQZ+GAxEq42eIYRoztMwVoiWnCQxUWZ7T244uG
jUXjYrfP9Fn0KzyJlQdMRYxvAmb3IOZjt3Nj/5hy4qycm5urH8EBfmHKMU7BCzxp
j4u2r8iTKCi1h4MHVBy00dQcTtBwWM5F55VHpjbwuK7GbhsSnPdGBoGcpqXViSiZ
wvbbJUhJ6wZIUXqOMlPaNKm5tq7oKV8N+D7DZrdjJon+7H6XCs6tQTlFpzV5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgG/7+QAXmtmMto5udDZCV6JxVhcwHwYDVR0j
BBgwFoAUQ9KmYbbxtNALKRa1K3KUFAFvTGswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E1QTBCOUQ5QzVBQTgxQzQ2Rjc0MkQ0MUEwNjk0MjE0
MkFCRDY3RTBCNzQxNEFFNUQwRUZFNTZCQzlFNzMzLzAvNDNEMkE2NjFCNkYxQjRE
MDBCMjkxNkI1MkI3Mjk0MTQwMTZGNEM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0QyQTY2MUI2RjFCNEQwMEIy
OTE2QjUyQjcyOTQxNDAxNkY0QzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNUEwQjlEOUM1QUE4MUM0NkY3NDJENDFBMDY5NDIxNDJBQkQ2N0Uw
Qjc0MTRBRTVEMEVGRTU2QkM5RTczMy8wLzMxMzQzNDJlMzIzMjJlMzEzNzM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzMTM4MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJAWsDAN
BgkqhkiG9w0BAQsFAAOCAQEAhWAmgvfwFzXLxo72N6yO1YmWcqBA6jdAxNBuPZGI
yLireM8MjKA7u7EFVaaARcjdYI1ozvpXcUYxLwgX6rltrW8Cd7PbAQEr2JqFCn4A
Vnryfw8MErgy7EtfAJBsYNXK4wCKqBGbzDAD3zgNlS6bpZiFyI5d/+xOfGF4bDU2
BUr2i3MFI7Qj1rIwYg56SdmNQ1l9oBaNLozh2l5qI0aEITI1uP27SkM+qn40O8XU
SIL6MDtH71NEKjn7Lq+8IXzgmsRCZ6jkHpafTS6Sa5w2JUFcf0VGda0NZZ2bnIl9
rXJi6DR6v1wjuEY703I4aMdbhLkbh2luTUdbPi4e+Dy0kQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:23 2025 by rpki-client