Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3132302e302f32312d3234203d3e203236323130.roa
File:                     3139322e3232332e3132302e302f32312d3234203d3e203236323130.roa (raw, json)
Hash identifier:          qBkl4ErsJt+meGWZ+mQgQzef3YlDjdCXThOQRu447L0=
Subject key identifier:   6B:12:16:DD:C6:F1:52:D8:7B:0E:E6:E8:73:0A:14:69:A7:1C:1D:80
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       1F4AD8D72ABBD8D837C9CF5975A1D9BEB4B1B802
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3132302e302f32312d3234203d3e203236323130.roa
Signing time:             Fri 27 Mar 2026 17:36:19 +0000
ROA not before:           Fri 27 Mar 2026 17:31:19 +0000
ROA not after:            Fri 26 Mar 2027 17:36:19 +0000
asID:                     26210
IP address blocks:        192.223.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4a:d8:d7:2a:bb:d8:d8:37:c9:cf:59:75:a1:d9:be:b4:b1:b8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Mar 27 17:31:19 2026 GMT
            Not After : Mar 26 17:36:19 2027 GMT
        Subject: CN=6B1216DDC6F152D87B0EE6E8730A1469A71C1D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:dc:e1:e4:3c:6f:34:27:8a:0e:87:77:c2:
                    19:c4:8d:d1:2a:e6:f8:3c:75:43:28:48:57:31:78:
                    22:f2:b6:f6:89:7e:91:6d:1c:4f:c7:74:dd:bf:12:
                    49:0c:3d:17:9b:ff:c1:3f:2c:50:61:b8:43:48:91:
                    3d:5a:f7:c7:e3:5c:d1:bc:7f:08:9b:70:30:48:bd:
                    db:97:04:64:49:53:b0:6c:91:2c:74:9e:cc:b4:c3:
                    fe:c8:d4:d6:1b:92:13:a2:2a:78:1b:fb:0a:00:08:
                    11:fc:69:84:df:d0:17:b1:61:5b:8f:16:c9:51:4e:
                    80:44:39:ef:d5:3c:ae:27:7f:ba:34:a1:f8:75:50:
                    fb:cd:0a:74:91:73:38:54:d2:5f:ec:f3:a3:e7:f9:
                    66:3f:7d:2f:7a:ad:58:ec:6b:50:4a:49:03:34:30:
                    14:de:af:e7:3d:19:66:d1:03:d1:f5:ae:1a:d9:ad:
                    70:ad:da:5c:74:74:b5:39:21:2c:2d:09:49:2b:2c:
                    90:c7:96:80:08:5e:b1:05:00:73:b4:b1:df:9d:0a:
                    d5:cf:de:ed:0a:27:b2:ca:06:19:7a:b8:70:93:e6:
                    97:3e:0e:0e:d5:81:ee:54:ff:43:8d:1f:79:37:c3:
                    51:65:ea:ee:26:01:5d:d0:89:17:02:0b:f7:52:36:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:12:16:DD:C6:F1:52:D8:7B:0E:E6:E8:73:0A:14:69:A7:1C:1D:80
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3132302e302f32312d3234203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:86:93:3c:e3:60:6e:a7:b5:42:26:c1:f1:51:c5:0a:08:57:
         ce:f5:08:60:aa:88:e0:42:68:d0:1b:21:86:8d:39:83:b6:54:
         65:d8:67:8f:70:49:b9:14:10:32:0b:ee:31:56:f4:b0:45:54:
         6b:ed:80:f1:5d:06:2b:eb:f5:4a:f7:25:cd:e9:60:9e:ac:92:
         80:c4:ba:68:1f:b6:d0:7b:45:f8:3c:ba:b2:cd:08:51:5e:14:
         b9:d3:8e:a2:5d:05:7a:ba:9b:6e:88:51:9d:ef:9d:03:41:cb:
         1d:5f:9d:94:6f:03:34:da:23:11:ff:a2:2f:4b:a6:66:3e:3d:
         c5:2e:20:27:46:56:8a:e2:51:9f:e5:50:33:25:dc:d1:3e:c5:
         ee:d0:f0:a3:26:e7:d5:92:b4:7f:73:f2:bd:33:22:4c:4d:e9:
         49:b6:5c:b8:c0:1d:6d:cc:99:bb:fa:bc:e8:40:5e:ac:8b:b1:
         d0:6c:db:3c:b9:48:c2:01:cf:c6:ec:d4:57:93:8c:d5:6f:13:
         ca:d2:e3:08:93:55:3d:7c:25:b6:da:82:bc:5b:27:35:b8:6b:
         c8:74:a5:74:37:2e:04:99:67:b3:eb:ea:25:d4:1a:d8:48:99:
         7c:f2:54:bb:19:d9:a3:66:26:bc:47:f0:35:60:53:d9:62:26:
         09:69:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:42:16 2026 by rpki-client