Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130322e302f32332d3234203d3e203237383832.roa
File:                     3139322e3232332e3130322e302f32332d3234203d3e203237383832.roa (raw, json)
Hash identifier:          D1Qf9y/w01w3tQKqf59YW0W1wC+Bpp7m+877RHEkw2U=
Subject key identifier:   B3:A5:40:59:1D:3A:0F:C3:52:3E:3D:B1:07:35:A4:F3:BC:0C:CC:7C
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       18B459E7EFBD0920823DF2724F77070B7738D89C
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130322e302f32332d3234203d3e203237383832.roa
Signing time:             Wed 23 Jul 2025 21:20:00 +0000
ROA not before:           Wed 23 Jul 2025 21:15:00 +0000
ROA not after:            Wed 22 Jul 2026 21:20:00 +0000
asID:                     27882
IP address blocks:        192.223.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b4:59:e7:ef:bd:09:20:82:3d:f2:72:4f:77:07:0b:77:38:d8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jul 23 21:15:00 2025 GMT
            Not After : Jul 22 21:20:00 2026 GMT
        Subject: CN=B3A540591D3A0FC3523E3DB10735A4F3BC0CCC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:6b:1f:df:c2:7f:ee:8d:20:4e:55:e9:9b:
                    08:ce:e9:be:34:55:04:8e:ad:93:45:25:36:3d:5f:
                    f7:11:c8:4e:1d:7d:21:a0:05:60:14:1f:f7:eb:c7:
                    e1:f6:8a:b7:9a:c9:20:5a:b2:6c:65:92:a4:84:e9:
                    f2:a6:c5:c9:bf:ec:c7:24:92:55:5e:07:4c:d2:09:
                    d7:09:33:9d:d4:6e:8e:df:aa:60:fe:af:3d:ea:8a:
                    7b:3f:14:d7:14:41:5e:1f:7c:3f:3d:24:89:d4:48:
                    81:ab:88:05:b7:b8:d7:6c:64:d2:d1:4f:02:f0:d7:
                    2d:6a:be:b2:f8:38:c0:6e:74:68:be:ad:eb:63:b0:
                    28:7f:f4:08:8c:03:ff:49:04:bd:b8:e3:d3:f8:86:
                    77:ab:1a:aa:c3:ec:a2:94:6f:53:d5:54:61:c0:72:
                    cb:6a:fa:9c:a9:57:79:2a:5b:0a:aa:41:55:bd:41:
                    d2:f4:ed:cf:52:e7:f4:ea:dc:9a:68:73:77:d3:98:
                    10:3c:2d:f3:d9:6e:8e:a4:75:ee:1a:89:a7:d2:a4:
                    20:f3:9f:6e:32:5d:62:a7:93:5b:74:f6:69:60:af:
                    1a:35:e8:5c:0c:a8:d0:58:ed:f5:e8:3f:8d:78:44:
                    40:01:ce:ca:0e:54:4b:cd:f1:a6:1b:5f:fa:2a:e7:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:40:59:1D:3A:0F:C3:52:3E:3D:B1:07:35:A4:F3:BC:0C:CC:7C
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130322e302f32332d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:bb:14:7b:f1:20:59:18:81:a1:77:ca:2a:de:dc:cd:2c:
         2d:e8:bd:32:7d:c3:10:6b:39:37:46:3f:04:e6:0d:4c:4c:86:
         77:ae:5d:ca:d2:9b:e4:38:4d:99:d6:51:dc:29:cb:71:54:a2:
         b2:e6:40:71:1e:15:92:73:42:2c:88:e8:4c:48:c1:b9:d3:aa:
         3b:3e:e2:fd:86:a8:d8:3b:f0:21:3c:de:3f:05:5f:fc:b4:c1:
         5f:e8:e6:01:7c:5c:05:36:26:cf:ad:a2:a0:99:1b:9a:82:47:
         70:01:ed:af:01:56:8e:24:d4:a6:65:b5:4c:b4:36:53:ee:49:
         4d:ac:f0:cc:95:76:f5:90:6d:00:6f:60:bd:1f:e4:69:9f:3d:
         2f:01:a6:b4:9b:66:01:9b:5a:98:98:f6:8e:35:e8:7e:f3:4d:
         4f:87:98:2b:b4:04:3f:48:b3:8e:47:f5:99:32:f7:a3:a9:66:
         1e:86:bf:5a:97:4c:9c:20:fe:a0:2d:bd:85:1b:24:97:d9:1c:
         78:f6:d3:b5:24:ad:2a:87:dc:99:4c:60:54:86:3b:09:5f:37:
         fa:34:a6:30:57:ed:e2:d2:6c:35:53:26:1f:5f:99:d5:ee:11:
         25:e2:a0:97:d3:01:91:e5:63:1d:16:f7:4f:eb:fc:55:7b:f8:
         15:1f:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:39:52 2025 by rpki-client