Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e20323733393535.roa
File:                     3139322e3134312e3136382e302f32322d3234203d3e20323733393535.roa (raw, json)
Hash identifier:          7+ePoQKi/L32G0s0rwcrQRv/gL2UezI+TXgv8Luvufs=
Subject key identifier:   63:D0:36:D4:A4:1F:0F:D4:CC:46:FC:47:4E:CE:F4:86:97:C8:B2:20
Certificate issuer:       /CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
Certificate serial:       1FAC1AEC97A9BD9864B09E384F572721251B9AE7
Authority key identifier: 42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e20323733393535.roa
Signing time:             Wed 23 Jul 2025 15:45:00 +0000
ROA not before:           Wed 23 Jul 2025 15:40:00 +0000
ROA not after:            Wed 22 Jul 2026 15:45:00 +0000
asID:                     273955
IP address blocks:        192.141.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ac:1a:ec:97:a9:bd:98:64:b0:9e:38:4f:57:27:21:25:1b:9a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
        Validity
            Not Before: Jul 23 15:40:00 2025 GMT
            Not After : Jul 22 15:45:00 2026 GMT
        Subject: CN=63D036D4A41F0FD4CC46FC474ECEF48697C8B220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:42:f6:35:b7:06:de:44:b4:39:bb:4a:43:
                    27:b0:8f:d9:b4:a2:bb:59:af:d1:50:6a:39:71:5d:
                    b3:0f:f6:ae:93:5a:03:ae:55:ef:11:a5:35:02:61:
                    24:50:99:e8:d7:b4:80:b3:15:56:47:4e:4c:09:7d:
                    9a:f5:84:8a:67:0e:ee:48:bf:ac:90:cd:c7:85:50:
                    fe:91:2c:7f:04:22:ff:aa:2b:c5:eb:ac:39:1f:37:
                    83:84:31:91:78:45:64:fd:c8:0b:e4:72:eb:2d:eb:
                    e1:0c:cf:34:3a:92:01:74:7a:81:77:d1:38:cf:62:
                    bb:c8:0e:a7:79:99:bc:a8:8f:58:35:c6:24:92:0b:
                    1a:09:6f:40:e7:e9:24:b5:d0:a9:f5:7a:e0:c9:14:
                    4f:69:05:9b:85:58:e0:3b:f8:cb:c0:86:7a:c5:8a:
                    62:23:1f:44:04:bc:42:58:13:22:2a:a1:a8:cc:54:
                    eb:c7:f9:c8:7b:e8:dc:3d:8a:85:07:65:f3:5d:0f:
                    d3:83:6b:cf:5d:1d:4c:80:cd:77:40:8d:f6:81:b3:
                    ba:d1:84:f9:e0:51:af:06:73:4e:52:15:4b:32:20:
                    c0:94:bf:2d:27:b0:16:93:02:bf:38:1c:89:2d:bd:
                    b1:96:65:0a:64:44:5a:f2:08:59:1f:4c:96:0d:9c:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:36:D4:A4:1F:0F:D4:CC:46:FC:47:4E:CE:F4:86:97:C8:B2:20
            X509v3 Authority Key Identifier:
                keyid:42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e20323733393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:eb:b0:40:8e:63:cf:a9:a1:90:72:26:e2:14:dd:04:9e:a0:
         fd:f3:9f:0e:d4:e5:f4:7d:64:57:82:97:9a:15:8d:8e:87:05:
         dd:95:f3:d4:0d:ab:93:87:22:92:a7:af:a3:76:ea:c7:7d:83:
         90:c0:6d:24:ae:e4:62:34:d2:b1:eb:22:35:53:9a:80:30:e5:
         e5:85:d8:8e:79:9f:a8:08:d1:38:96:67:30:a0:3e:12:78:12:
         3d:75:83:65:8f:c3:e8:cc:45:b7:fa:6b:57:6d:86:43:b1:38:
         c3:2a:fe:90:de:14:ed:77:48:77:84:49:98:e5:16:e9:05:ae:
         41:22:22:4b:be:5e:b1:0a:08:3d:62:c9:46:8d:82:dc:c8:15:
         ea:df:92:35:08:fb:7a:54:0e:55:c2:a9:54:53:5e:db:bf:40:
         06:dc:c7:4a:a8:87:a9:56:13:0f:27:f4:89:6a:13:fd:be:20:
         9b:32:64:51:dc:6e:fc:41:2e:97:db:07:1d:af:16:63:54:11:
         c9:bf:07:63:9e:d6:f4:f7:74:65:b6:4d:57:73:be:aa:3a:49:
         19:f9:a5:d4:45:77:ad:30:86:85:f1:b9:25:a2:dd:b4:aa:2c:
         91:76:3a:71:5d:8b:0b:ef:6f:0b:b6:a7:dd:84:64:46:1a:36:
         25:43:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:28 2025 by rpki-client