Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3139203d3e203235363230.roa
File:                     3139322e3232332e36342e302f31392d3139203d3e203235363230.roa (raw, json)
Hash identifier:          oyEKQRZbddgaKwn0VmyGeCVf4l9FmDpcpElbGalBTC8=
Subject key identifier:   E2:32:51:0F:A8:BA:53:9B:AC:5C:59:95:76:6D:90:D6:39:4D:B8:F2
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       515178E854D075FE5A3AD2FF8D51418E3DD5D439
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3139203d3e203235363230.roa
Signing time:             Fri 03 Apr 2026 18:37:27 +0000
ROA not before:           Fri 03 Apr 2026 18:32:27 +0000
ROA not after:            Fri 02 Apr 2027 18:37:27 +0000
asID:                     25620
IP address blocks:        192.223.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:51:78:e8:54:d0:75:fe:5a:3a:d2:ff:8d:51:41:8e:3d:d5:d4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Apr  3 18:32:27 2026 GMT
            Not After : Apr  2 18:37:27 2027 GMT
        Subject: CN=E232510FA8BA539BAC5C5995766D90D6394DB8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:99:c6:31:68:e4:7a:c0:8f:2b:0c:0e:44:
                    b5:c9:7a:44:26:99:93:d9:7e:1f:46:64:f2:75:dd:
                    05:e9:c0:cd:7b:e2:c2:bf:7d:5f:f1:e9:2a:82:fe:
                    6f:85:cc:d2:f7:b5:c4:09:26:17:fb:60:a4:d8:cc:
                    ac:6d:95:1c:c2:47:4b:5b:d8:7c:55:ea:cb:af:75:
                    c6:bc:4e:bc:bf:a3:a1:b6:d8:5e:91:89:1e:6c:57:
                    22:b9:16:f8:4a:5e:8f:e3:db:c4:50:dc:e4:54:3e:
                    a2:76:c4:e5:72:c3:b9:ba:f0:5b:50:ce:9d:e8:50:
                    04:ea:38:a7:0b:e2:01:53:bb:a9:ec:7c:6f:f9:a4:
                    89:9e:51:06:67:6c:be:b4:5c:98:c1:ae:40:0b:20:
                    aa:a5:45:79:41:eb:86:5c:a1:de:c6:34:8e:9e:9d:
                    36:94:b3:62:f1:b8:85:13:59:55:d2:f4:2c:dd:43:
                    e5:b2:f5:e0:8d:97:71:f0:24:9b:8e:d4:23:40:86:
                    c8:57:97:05:4b:7b:fe:bd:10:d3:d3:21:5b:09:0b:
                    26:6a:29:af:5f:21:d3:ec:3d:5c:30:16:86:ce:e2:
                    7d:a3:8c:fc:92:c4:39:f5:02:70:eb:f0:00:14:8f:
                    86:ea:42:d6:d8:7e:b0:f5:d6:7a:c7:50:9b:b0:e3:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:51:0F:A8:BA:53:9B:AC:5C:59:95:76:6D:90:D6:39:4D:B8:F2
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3139203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:e5:6e:8e:a4:9f:ff:f9:e1:47:1e:68:ba:fc:67:be:51:
         f0:8b:e0:fb:0c:c9:03:c5:3d:9d:95:91:34:1d:3c:71:ae:2b:
         21:4c:ef:a6:e0:43:2c:e8:4e:24:db:bb:03:a5:8f:76:74:56:
         58:d7:b6:c8:8e:34:e4:fb:d6:23:5c:e4:78:05:c5:e2:b0:09:
         5f:4b:f8:e9:85:8e:8b:04:d6:25:85:80:a7:d3:d6:8e:aa:e2:
         7f:31:0e:d6:c1:90:81:5f:ec:04:b7:94:ac:19:4a:0f:ed:95:
         8a:4d:15:22:6c:cf:39:73:21:85:08:64:db:d2:49:da:92:61:
         12:37:0e:79:eb:16:ff:20:f1:d1:36:b5:1a:86:b5:03:7f:f3:
         9c:23:1d:7f:76:ad:ad:50:42:95:74:8a:93:d3:bd:39:34:d7:
         3d:90:d0:31:43:7b:41:87:f1:c7:e1:ef:37:a1:c8:7f:41:5f:
         83:1d:2e:c7:9c:3c:93:83:0c:79:0d:22:b9:23:13:85:4a:2f:
         01:55:67:e6:f4:10:ba:09:7c:f0:ca:28:2e:3c:ca:e9:f1:7d:
         a3:60:31:fc:cf:b0:55:10:88:30:fa:88:87:4e:cb:a6:13:23:
         34:b8:43:b7:0a:bc:49:06:67:1f:ae:f8:d5:2f:f9:34:0c:ef:
         e1:14:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:47 2026 by rpki-client