Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33382e302f32342d3234203d3e20323733303030.roa
File:                     3139302e3231362e33382e302f32342d3234203d3e20323733303030.roa (raw, json)
Hash identifier:          lzfLBpmne1aEPmMwSZyE68Si/LgAxNoAxrg7/W9PDgc=
Subject key identifier:   C6:7D:50:EE:13:19:9A:9C:5E:6E:6F:DA:AC:42:E2:93:A4:F1:F4:0F
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       453DB7AAA502518453BFBE2726AAA67C10107977
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33382e302f32342d3234203d3e20323733303030.roa
Signing time:             Thu 24 Jul 2025 14:05:00 +0000
ROA not before:           Thu 24 Jul 2025 14:00:00 +0000
ROA not after:            Thu 23 Jul 2026 14:05:00 +0000
asID:                     273000
IP address blocks:        190.216.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 11:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:b7:aa:a5:02:51:84:53:bf:be:27:26:aa:a6:7c:10:10:79:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jul 24 14:00:00 2025 GMT
            Not After : Jul 23 14:05:00 2026 GMT
        Subject: CN=C67D50EE13199A9C5E6E6FDAAC42E293A4F1F40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:b6:fe:3d:34:b1:11:c4:69:0e:0f:e3:6b:
                    e4:6f:d1:a9:a1:d1:23:2d:62:2c:48:24:e0:f1:8f:
                    33:38:7e:e0:86:7b:2d:04:b3:77:36:b9:9f:47:41:
                    a5:b5:b4:6a:6b:21:69:54:5c:ce:3d:c7:16:38:2e:
                    61:90:f0:a8:35:9f:6f:8e:35:d7:7a:62:29:aa:9b:
                    66:8c:f5:5a:5c:b9:e5:4f:8b:b7:c8:15:e8:d3:29:
                    3a:b5:a5:77:8e:5e:94:90:79:1f:70:4a:6b:d0:d6:
                    74:6c:02:50:3e:71:62:c4:e7:c1:4e:ae:20:e2:b9:
                    5c:88:d0:97:d3:e6:fb:ce:72:65:7a:56:f9:79:fc:
                    65:28:00:0c:f5:22:c1:eb:44:e8:91:ec:45:86:7e:
                    8f:10:16:2f:1b:bf:1f:4c:de:73:4a:e0:75:ad:18:
                    8d:ae:4f:ac:3b:e8:9c:6b:8c:6d:59:25:43:ad:38:
                    31:a1:13:94:42:19:09:52:7a:ea:21:27:f0:72:2b:
                    5b:48:44:e1:7b:4e:9a:1b:68:7a:04:e6:11:96:b8:
                    18:2f:b7:d3:75:21:6b:c7:d4:b8:05:44:b5:8f:8b:
                    cf:04:7e:c7:68:c5:9a:2c:3b:bc:d6:f8:b2:37:02:
                    7e:13:80:21:5f:32:9c:d6:9c:49:58:a1:3c:7a:80:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7D:50:EE:13:19:9A:9C:5E:6E:6F:DA:AC:42:E2:93:A4:F1:F4:0F
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33382e302f32342d3234203d3e20323733303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:00:ff:a9:d9:d6:fa:e2:88:8a:1a:54:56:16:2c:83:c0:6a:
         65:62:81:d6:e6:9f:da:c1:a4:ab:d5:36:35:11:4c:86:e1:54:
         94:4f:4b:fa:62:ac:0e:99:c4:77:ba:64:f0:75:c2:69:a9:27:
         81:db:58:07:3c:6e:6c:33:79:d3:6e:c2:e4:e6:4c:8e:4a:85:
         2e:08:31:6a:0c:e3:6f:35:25:d3:58:b8:11:a8:16:f3:72:99:
         33:7a:45:44:fb:7c:a0:2c:f8:1a:00:7a:f5:3d:c7:55:07:83:
         76:6c:d4:82:13:ed:74:b4:ee:b9:be:1e:b8:59:8d:35:3c:ca:
         39:6d:b3:6a:3a:c6:ae:95:d7:78:2c:55:83:88:6a:c6:ea:78:
         59:70:3c:7d:87:2e:23:e3:cf:31:79:76:5e:16:c4:f7:d2:91:
         24:ab:0b:0f:1f:dc:ec:0d:02:10:5d:37:12:58:33:0b:d1:2e:
         9f:1f:37:19:fc:42:f4:66:f3:92:7d:41:7d:9e:b8:0f:ac:71:
         ce:ce:60:a7:37:22:07:37:e5:e7:2a:c6:b9:7f:06:64:f0:8d:
         15:13:93:fc:77:ac:a9:6e:22:fb:3e:97:72:28:8f:31:5a:81:
         e5:ff:b5:1d:43:7e:98:07:92:43:e2:36:e1:8f:13:26:31:a5:
         0e:c1:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:37:23 2025 by rpki-client