Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130342e302f32312d3234203d3e203237383832.roa
File:                     3139322e3232332e3130342e302f32312d3234203d3e203237383832.roa (raw, json)
Hash identifier:          wPXzJoDYFPck7wfB5bx14FY7g4SsNiO0JXlKG5Q152Q=
Subject key identifier:   19:44:2B:4D:9F:16:0A:5E:27:C6:D6:CB:0C:04:89:CF:02:AB:CA:30
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       53909B8110C85D13E088A696D55063ECC29C63D8
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130342e302f32312d3234203d3e203237383832.roa
Signing time:             Wed 23 Jul 2025 21:20:01 +0000
ROA not before:           Wed 23 Jul 2025 21:15:01 +0000
ROA not after:            Wed 22 Jul 2026 21:20:01 +0000
asID:                     27882
IP address blocks:        192.223.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:90:9b:81:10:c8:5d:13:e0:88:a6:96:d5:50:63:ec:c2:9c:63:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jul 23 21:15:01 2025 GMT
            Not After : Jul 22 21:20:01 2026 GMT
        Subject: CN=19442B4D9F160A5E27C6D6CB0C0489CF02ABCA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:83:4e:92:d4:af:a7:c2:03:5b:d9:e9:83:
                    ab:a2:e7:12:ae:00:eb:8d:3a:f7:e2:58:fe:6f:a3:
                    3d:60:44:a8:8b:a9:7c:6f:2b:10:fc:0d:cd:08:d9:
                    41:85:4b:b7:c2:5b:c4:a0:0c:81:8b:e2:04:3b:38:
                    44:f9:57:86:ef:c7:fa:57:8c:dd:59:46:3e:dd:82:
                    de:70:97:5e:9e:b5:44:a6:aa:e9:b3:af:35:46:09:
                    49:f6:61:4f:c1:69:d6:db:28:67:e2:99:ac:7d:17:
                    5c:fc:a5:4a:71:b2:9d:fd:ac:81:1b:c4:50:31:30:
                    ef:27:d6:de:0b:36:10:98:32:0b:d2:9d:be:2a:02:
                    8e:15:c8:2c:e6:5d:2c:04:fe:e9:ca:7b:9b:91:11:
                    a2:42:5b:d7:f0:21:df:2e:14:c9:2c:09:4f:bf:cb:
                    09:ba:31:99:0e:94:08:17:ee:d4:8e:7d:62:a3:55:
                    d6:84:d6:c3:2d:7c:5f:8d:e7:a3:a1:f9:a9:dd:3f:
                    ef:59:a6:b4:e1:6d:ca:93:93:7c:b4:37:59:02:0b:
                    12:4e:9c:b6:4b:09:79:82:c1:ac:4a:4a:e2:4f:bf:
                    e3:ca:22:72:d2:19:65:64:5b:66:e8:ec:37:16:55:
                    ed:5b:82:20:4b:30:a7:84:54:0a:d6:00:ae:76:6c:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:44:2B:4D:9F:16:0A:5E:27:C6:D6:CB:0C:04:89:CF:02:AB:CA:30
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130342e302f32312d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:cd:5d:29:f0:bd:46:40:fc:e4:f7:78:aa:17:bf:b8:4d:
         1c:8f:b2:f2:5b:46:58:60:12:b5:13:7e:b6:a8:cf:45:50:79:
         79:d3:84:a2:70:a5:c2:47:23:7a:62:42:45:ca:8f:b1:ad:63:
         43:84:d8:24:bb:ec:e5:fa:5c:43:3e:17:15:6d:80:b2:8d:46:
         2c:2d:90:73:e3:37:29:4b:c9:c2:be:49:21:f5:57:26:c1:c0:
         cb:83:96:e4:2f:04:7c:67:0c:f6:8a:1c:02:0f:c9:62:9c:9f:
         89:c0:96:53:6f:18:80:7d:23:c4:e9:ef:34:21:e0:e5:df:19:
         e9:b7:4d:e0:fa:7c:ff:fc:0d:00:92:46:4b:d2:23:e7:9e:89:
         80:48:3d:d5:38:f0:72:2c:ac:04:52:b2:bf:88:2f:40:57:31:
         be:ca:52:b6:16:cf:69:fc:29:73:2a:56:0f:64:e1:b6:7c:fc:
         6a:9e:cb:db:c2:ba:db:98:39:70:b7:2e:fc:f4:eb:de:07:0e:
         5c:5b:cf:79:6e:6c:f4:54:aa:e1:37:b8:90:14:72:25:40:0c:
         8b:a9:d2:5e:f6:29:12:bf:96:32:b5:7e:a1:cf:7d:2c:0d:9a:
         87:2f:cb:c0:2d:dc:82:e6:6a:b4:d4:30:f2:a0:34:0e:8a:0a:
         b8:85:49:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:03:41 2025 by rpki-client