Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
File:                     3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (raw, json)
Hash identifier:          8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=
Subject key identifier:   86:7F:80:79:C1:B5:5B:6A:22:E3:15:B4:F0:D0:F6:15:5D:17:E0:92
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       6D4C67E11A989F26C842608EB99E097BF5931921
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
Signing time:             Fri 22 Aug 2025 16:40:27 +0000
ROA not before:           Fri 22 Aug 2025 16:35:27 +0000
ROA not after:            Fri 21 Aug 2026 16:40:27 +0000
asID:                     272865
IP address blocks:        191.97.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 06:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4c:67:e1:1a:98:9f:26:c8:42:60:8e:b9:9e:09:7b:f5:93:19:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Aug 22 16:35:27 2025 GMT
            Not After : Aug 21 16:40:27 2026 GMT
        Subject: CN=867F8079C1B55B6A22E315B4F0D0F6155D17E092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:33:e9:95:ac:64:61:25:7a:fd:76:18:02:
                    71:0e:9a:d1:9e:17:ba:eb:cf:fe:2c:cc:82:a9:08:
                    58:2d:dc:27:14:ea:04:9a:25:68:3b:dd:eb:1f:59:
                    78:f0:64:bb:1d:80:d3:40:48:ac:e3:90:55:9a:dd:
                    28:99:f9:61:90:0d:fc:44:16:4a:b1:d1:ff:57:e3:
                    76:75:f0:6e:22:31:07:28:aa:a4:67:58:3a:0a:6d:
                    3c:1d:98:b3:27:de:35:43:7f:16:58:59:29:d1:0f:
                    2e:3c:96:c7:65:9e:04:b0:06:5f:f4:6b:72:e0:00:
                    92:2e:1a:37:b1:bd:a1:c9:54:b1:67:02:70:68:a1:
                    73:e4:9e:b5:79:2d:5b:c4:77:02:d1:78:40:79:0d:
                    92:1b:57:c1:0a:b3:b6:2c:ca:25:bc:92:18:fd:07:
                    e9:96:ea:6d:82:de:18:b2:38:a8:cd:b5:da:96:81:
                    33:ea:eb:99:d5:95:b1:9a:4f:b2:9c:5b:a2:fb:6d:
                    9e:b6:8a:f8:36:f7:89:88:a7:92:76:6f:0f:30:6a:
                    c6:c4:35:40:82:85:2f:32:c9:63:bf:fa:0e:11:e4:
                    e3:75:c9:08:d9:04:64:8f:27:c3:62:80:35:44:68:
                    f2:8f:c1:f4:6a:31:d8:e8:16:cd:dd:55:13:36:e8:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:80:79:C1:B5:5B:6A:22:E3:15:B4:F0:D0:F6:15:5D:17:E0:92
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:ce:94:82:17:72:b0:6a:45:03:aa:83:66:d9:eb:ca:22:
         cd:01:89:15:2e:f1:04:7e:95:d8:d8:e3:76:02:f6:d9:9f:78:
         71:75:6e:e6:73:b7:7b:a0:73:20:bc:a0:ec:61:4c:57:b0:16:
         20:c4:6c:92:47:1d:4d:9a:15:c8:c8:0d:41:af:be:61:f9:f2:
         9a:d0:95:2f:9f:0a:66:20:05:5b:6f:71:c6:86:05:3c:87:28:
         b2:11:64:9b:23:88:b1:98:9d:98:92:5c:94:5c:6f:21:31:cc:
         17:65:db:18:39:2f:0f:99:40:97:4a:15:2f:db:b1:25:2d:89:
         24:ef:df:9d:82:80:4e:c1:db:20:c7:55:30:4d:b2:14:04:7c:
         49:96:db:17:4f:57:5d:59:10:ea:ee:08:ab:12:1c:97:02:c5:
         8b:31:14:9a:7d:30:60:bc:15:55:38:ab:eb:f4:1a:17:05:95:
         2d:9f:36:97:7a:2a:04:f0:86:16:f0:0e:d8:a7:6d:dc:ac:5c:
         7c:d5:45:c5:7e:b7:2b:bd:2e:92:ba:f3:6c:89:bf:0f:4c:f2:
         57:da:03:4c:3c:30:ab:89:ae:d0:88:9d:15:62:72:40:33:1a:
         23:c7:7e:a5:74:16:9c:82:0e:c4:9f:c6:25:e8:07:5c:0e:10:
         7c:a4:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 03:55:34 2025 by rpki-client