Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e34382e302f32312d3234203d3e203331383938.roa
File:                     3134342e32322e34382e302f32312d3234203d3e203331383938.roa (raw, json)
Hash identifier:          FaK4A3gZNyVGTforwlX2WMRA6RNIAm83YBK4LGRNtJQ=
Subject key identifier:   07:46:EC:6D:04:B4:DB:53:7B:5A:A6:FE:5B:74:CE:7A:ED:59:95:31
Certificate issuer:       /CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
Certificate serial:       082D75DCE277D4F2DE0053FB54D3AFA032243412
Authority key identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e34382e302f32312d3234203d3e203331383938.roa
Signing time:             Fri 17 Oct 2025 00:00:00 +0000
ROA not before:           Thu 16 Oct 2025 23:55:00 +0000
ROA not after:            Fri 16 Oct 2026 00:00:00 +0000
asID:                     31898
IP address blocks:        144.22.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 22:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2d:75:dc:e2:77:d4:f2:de:00:53:fb:54:d3:af:a0:32:24:34:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B
        Validity
            Not Before: Oct 16 23:55:00 2025 GMT
            Not After : Oct 16 00:00:00 2026 GMT
        Subject: CN=0746EC6D04B4DB537B5AA6FE5B74CE7AED599531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:a5:81:4f:07:55:38:0c:8e:39:df:4c:dc:
                    ae:35:1c:33:85:5b:0b:74:56:5e:76:ce:92:44:8e:
                    27:84:03:21:0a:bf:e0:94:cc:9b:be:81:a8:0d:bb:
                    20:75:f1:27:ba:c3:b2:a0:a2:30:9e:3c:b7:0a:d8:
                    b3:12:80:bd:10:93:6a:b5:8a:f9:1e:ad:11:3f:48:
                    e7:f6:d1:73:77:9c:f9:58:00:49:b0:61:e1:00:0e:
                    01:32:99:b5:cd:ae:49:ec:0e:66:82:b3:6f:0e:78:
                    50:04:6b:6a:6a:6b:da:5a:b3:da:ad:dd:d1:48:c9:
                    cd:fc:a9:ab:12:38:8f:ec:1d:3c:10:00:04:06:24:
                    b7:d8:23:65:a1:07:94:d5:ee:8d:eb:54:2e:bd:17:
                    9d:6d:c2:dc:02:c7:8a:1c:c2:d7:4a:51:82:91:4d:
                    b3:cd:51:8d:00:ba:bb:45:df:c7:60:d7:c1:c9:d2:
                    00:d1:7d:1e:9e:91:bc:b5:ab:97:9d:85:29:78:a3:
                    70:ff:ce:28:f4:52:3a:72:54:62:bc:2f:23:cd:c6:
                    70:17:1e:ed:e1:e9:5a:e0:a8:d2:54:02:f9:ee:bd:
                    f2:01:eb:25:09:f4:59:f9:f5:4c:60:10:87:e2:6b:
                    4d:7f:6c:0b:d2:33:97:8c:e9:be:73:46:47:04:0d:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:46:EC:6D:04:B4:DB:53:7B:5A:A6:FE:5B:74:CE:7A:ED:59:95:31
            X509v3 Authority Key Identifier:
                keyid:43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/3134342e32322e34382e302f32312d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.22.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:64:0b:40:c4:03:ba:4e:a0:66:26:09:92:14:d0:ed:69:55:
         58:d4:2d:99:a2:42:24:3b:17:28:a1:86:52:de:48:da:83:7c:
         98:66:10:6d:8b:dc:15:ad:20:7e:ef:24:0d:62:0d:47:be:e2:
         b6:a0:a9:f4:86:fe:5c:ef:b6:99:9d:b0:c6:17:f3:59:4c:b3:
         31:0a:a5:4a:ac:34:a6:3c:1c:6f:b8:ff:c1:72:ad:2a:ca:e5:
         58:3f:c4:0e:15:e4:7e:13:af:9f:8d:10:3d:45:75:f1:ba:48:
         27:51:8f:d7:49:af:51:58:9a:e5:94:24:10:a6:62:23:a5:ab:
         1d:61:b9:1e:56:8c:af:31:65:69:3c:09:69:ec:cc:3f:47:77:
         2f:1b:6c:d2:66:e2:ac:62:a3:27:0d:40:74:76:31:f4:94:de:
         68:f0:e8:7d:b1:d2:da:ff:fa:57:01:03:05:35:7b:99:e1:97:
         43:81:7a:f6:f6:7a:1e:6f:13:15:b9:2d:08:be:f0:8a:0d:ef:
         59:9f:bb:9c:3f:72:30:97:a0:ce:33:5b:f8:13:ae:f2:08:b5:
         8b:22:9b:8e:90:24:13:31:1f:b9:7a:34:f4:bd:90:55:bc:f5:
         67:ee:e6:4b:34:e6:36:1f:38:93:ae:f3:fb:97:70:ef:dd:49:
         ec:d5:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:22 2025 by rpki-client