Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3139203d3e203235363230.roa
File:                     3139322e3232332e36342e302f31392d3139203d3e203235363230.roa (raw, json)
Hash identifier:          nhauLU5XcxtM5eHq4sxdvMiWkscRVVoExsmFbPjASKA=
Subject key identifier:   A7:86:66:D8:AA:1D:60:A1:7E:EA:41:3E:4C:B8:0D:16:BA:38:E2:E5
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       54EE394CE90DC39D6A2BDBA4B25D044E521617FC
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3139203d3e203235363230.roa
Signing time:             Fri 02 May 2025 18:17:33 +0000
ROA not before:           Fri 02 May 2025 18:12:33 +0000
ROA not after:            Fri 01 May 2026 18:17:33 +0000
asID:                     25620
IP address blocks:        192.223.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 20:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ee:39:4c:e9:0d:c3:9d:6a:2b:db:a4:b2:5d:04:4e:52:16:17:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: May  2 18:12:33 2025 GMT
            Not After : May  1 18:17:33 2026 GMT
        Subject: CN=A78666D8AA1D60A17EEA413E4CB80D16BA38E2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:b3:83:85:6c:37:cb:76:2e:e6:bf:73:8a:
                    c2:2a:14:3e:e8:15:59:e0:07:0f:c1:b6:74:a4:38:
                    7c:be:ba:c9:f8:24:dc:69:c1:78:1a:26:7a:f3:b0:
                    fd:74:5d:ee:31:2f:3f:5b:03:23:6b:3a:9e:ce:4f:
                    fd:0c:bb:7d:63:0e:4c:72:63:2c:f9:26:8c:b0:ff:
                    fc:d1:88:7f:cc:52:45:54:1d:72:8a:dd:64:bc:ae:
                    7c:e3:d5:62:53:ae:60:7c:7a:dc:79:e6:f8:d3:9d:
                    9a:2d:eb:1c:67:3a:4f:4f:88:ce:85:0a:da:49:48:
                    d1:e0:ad:18:f2:ac:c7:93:ff:35:ed:f3:42:74:a9:
                    83:04:32:7c:27:5c:b1:5c:7b:13:a1:e6:d8:0c:a4:
                    54:08:03:3a:9a:e8:a0:48:d4:0f:90:8b:d3:5a:44:
                    23:a1:98:dc:bc:19:61:a1:a4:3e:a7:85:44:98:ac:
                    0a:5e:8c:00:90:30:75:34:7d:f1:24:a9:76:0f:f5:
                    b3:fb:af:f9:08:5c:fd:13:61:c6:79:c1:4a:7b:83:
                    a3:44:9e:e5:31:f1:f6:26:a7:24:a4:39:d4:45:81:
                    0e:8b:71:b2:67:5f:47:46:1a:29:5d:02:f9:ae:e3:
                    39:a1:4c:4a:05:0e:dc:68:5d:a4:52:67:a8:e5:35:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:66:D8:AA:1D:60:A1:7E:EA:41:3E:4C:B8:0D:16:BA:38:E2:E5
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3139203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:f8:0a:b1:94:80:dd:27:df:a5:0f:ce:52:48:25:b6:9b:
         d6:e4:7d:37:e0:cb:18:92:22:11:d3:74:93:ac:7e:3a:46:34:
         97:fa:73:8a:ed:af:c2:7a:49:59:b6:ee:54:12:46:69:d3:9e:
         6e:ff:e0:3a:9d:9d:45:ba:11:8f:5c:5d:8c:fb:21:9c:52:d1:
         30:54:23:6b:70:3d:51:e2:35:33:f1:a1:aa:db:f2:fa:d3:c0:
         8b:c7:72:a5:73:db:21:e8:55:69:95:9c:a6:32:cd:30:60:24:
         80:84:a8:b5:c1:5a:c7:b6:b0:a6:53:ea:6a:f5:ea:33:20:a0:
         20:43:1a:3b:be:8b:bb:73:b9:0c:9c:d5:ba:2b:07:a8:45:bb:
         c5:2c:75:b9:47:63:24:06:4e:00:52:56:dc:ac:5d:1f:f7:40:
         1a:05:36:0a:0a:1d:54:b6:bc:62:58:07:11:ba:9c:b7:4a:63:
         f0:c8:91:de:e7:bd:3c:bd:a5:a8:a7:d0:17:6b:33:45:78:65:
         a9:44:40:a8:16:eb:3b:b2:c1:bc:26:3a:c1:40:28:70:5d:c2:
         4b:5f:e0:de:2c:0a:7f:4e:25:fa:ad:0a:17:17:fa:b1:5a:a2:
         5c:ab:43:5f:c7:e1:dd:2d:27:a7:fc:a8:92:d6:89:e2:74:94:
         0e:e9:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:42:05 2025 by rpki-client