Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e38302e302f32302d3234203d3e203235363230.roa
File:                     3139322e3232332e38302e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          PrJutMTrDq8AzZ0KJHkBsF3p4uYhYIL5Y9ZlRBiHlw8=
Subject key identifier:   71:F7:F6:40:DB:83:EC:B1:27:A0:D8:0E:C4:1C:76:3C:06:10:B0:AF
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       39C96432F9E89B2A46F2C1B66A330440EE6ECB41
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e38302e302f32302d3234203d3e203235363230.roa
Signing time:             Wed 30 Apr 2025 19:17:21 +0000
ROA not before:           Wed 30 Apr 2025 19:12:21 +0000
ROA not after:            Wed 29 Apr 2026 19:17:21 +0000
asID:                     25620
IP address blocks:        192.223.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 20:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c9:64:32:f9:e8:9b:2a:46:f2:c1:b6:6a:33:04:40:ee:6e:cb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Apr 30 19:12:21 2025 GMT
            Not After : Apr 29 19:17:21 2026 GMT
        Subject: CN=71F7F640DB83ECB127A0D80EC41C763C0610B0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:15:ef:ea:ba:3c:7f:8a:b7:e7:62:f5:34:
                    8e:a3:f0:1a:c9:d0:72:c3:c9:75:b3:09:86:e0:66:
                    e4:a0:29:58:70:fc:b1:a2:d1:49:03:72:3a:c8:05:
                    82:3e:af:95:d7:58:52:e9:4f:dc:9a:a1:de:78:f7:
                    14:39:bd:1e:f3:93:20:36:26:2a:73:a6:5a:b8:85:
                    d5:59:1e:52:4b:75:25:ab:6d:ef:10:40:98:5a:51:
                    52:aa:e1:90:76:3d:50:91:f9:bd:2f:aa:4c:5c:58:
                    4e:9a:79:3e:77:64:e9:6d:56:9d:9c:1c:61:b8:ce:
                    f0:66:65:9c:4e:90:e6:a2:3f:a9:e8:68:6e:f9:aa:
                    80:bd:a2:18:53:8e:be:e5:d8:17:51:e3:16:52:dc:
                    29:e3:e6:ac:7a:d2:e1:70:11:68:e9:44:95:c3:5c:
                    9c:a2:1d:d8:74:2c:b4:87:e9:67:f8:8b:50:91:db:
                    ad:02:f5:b8:7a:6d:4f:5f:f5:ef:2d:f6:e6:f5:d6:
                    17:6f:3b:d1:1d:a0:e7:1c:6e:45:09:c1:3c:2d:ed:
                    c3:d2:30:0f:7c:1c:53:fd:dc:0e:d2:75:31:0d:fe:
                    1e:ae:6c:60:2c:34:b4:c8:84:34:41:e0:9c:a5:56:
                    3e:ff:51:54:5a:17:20:d0:51:bd:63:7d:04:84:ec:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:F6:40:DB:83:EC:B1:27:A0:D8:0E:C4:1C:76:3C:06:10:B0:AF
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e38302e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:65:39:85:4c:cf:0a:98:0e:44:82:36:db:e0:39:68:4a:39:
         28:f7:45:9a:c2:0f:5a:10:9b:c5:68:49:5c:27:28:f6:73:3e:
         8a:d3:1b:93:94:af:6a:74:8c:7c:72:d1:c3:fe:73:14:2b:b7:
         b0:ab:32:b7:48:34:72:a5:31:eb:db:d1:88:81:98:48:38:bd:
         d6:35:0b:8a:ef:47:21:95:02:2f:3d:3c:cc:e9:cf:91:7a:ad:
         54:a9:55:1e:f1:f4:c6:9d:43:30:cf:69:87:d2:fd:3e:1d:ce:
         07:a7:cb:6b:d1:e9:9d:97:0f:cf:7e:9b:98:03:96:db:95:dd:
         8c:cc:ea:d2:8e:c1:56:b7:a7:0c:2e:66:63:f2:8f:0a:3e:8d:
         16:1d:ba:48:27:de:15:cb:9c:73:80:ab:bd:cf:8b:9f:2f:b4:
         d4:db:1a:03:96:36:a1:c9:72:2a:0c:3c:a2:05:ef:d3:f4:d4:
         db:51:12:0b:97:64:c9:a5:ab:ae:36:92:b7:27:b3:69:85:b0:
         5b:28:af:13:5a:6e:9a:ba:5e:1d:8a:5b:6d:d4:07:73:60:b3:
         81:ea:db:75:fd:bd:31:61:c9:79:eb:89:26:0e:44:03:d1:ea:
         bc:2e:c6:52:ea:9d:f1:48:9a:5a:6f:8c:b2:70:18:8f:87:f7:
         f7:88:fe:67
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOclkMvnomypG8sG2ajMEQO5uy0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0NjY1NEQ2RjAyQ0VDNDFFQUE0MzM5NDk4NDg2QzYw
OUJGMzRFQzAeFw0yNTA0MzAxOTEyMjFaFw0yNjA0MjkxOTE3MjFaMDMxMTAvBgNV
BAMTKDcxRjdGNjQwREI4M0VDQjEyN0EwRDgwRUM0MUM3NjNDMDYxMEIwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMRXv6ro8f4q352L1NI6j8BrJ
0HLDyXWzCYbgZuSgKVhw/LGi0UkDcjrIBYI+r5XXWFLpT9yaod549xQ5vR7zkyA2
Jipzplq4hdVZHlJLdSWrbe8QQJhaUVKq4ZB2PVCR+b0vqkxcWE6aeT53ZOltVp2c
HGG4zvBmZZxOkOaiP6noaG75qoC9ohhTjr7l2BdR4xZS3Cnj5qx60uFwEWjpRJXD
XJyiHdh0LLSH6Wf4i1CR260C9bh6bU9f9e8t9ub11hdvO9EdoOccbkUJwTwt7cPS
MA98HFP93A7SdTEN/h6ubGAsNLTIhDRB4JylVj7/UVRaFyDQUb1jfQSE7HU5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcff2QNuD7LEnoNgOxBx2PAYQsK8wHwYDVR0j
BBgwFoAUOkZlTW8CzsQeqkM5SYSGxgm/NOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEYxQjg1NTI5ODhBQzdCMjk5QzI3MDU2RjQ3MzNDMjMw
MzIxMkNBMkJBMDZCMkEyQ0YyQzVDODAzOENGRjJDLzAvM0E0NjY1NEQ2RjAyQ0VD
NDFFQUE0MzM5NDk4NDg2QzYwOUJGMzRFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQ2NjU0RDZGMDJDRUM0MUVB
QTQzMzk0OTg0ODZDNjA5QkYzNEVDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBGMUI4NTUyOTg4QUM3QjI5OUMyNzA1NkY0NzMzQzIzMDMyMTJDQTJC
QTA2QjJBMkNGMkM1QzgwMzhDRkYyQy8wLzMxMzkzMjJlMzIzMjMzMmUzODMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNTM2MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMDfUDAN
BgkqhkiG9w0BAQsFAAOCAQEACmU5hUzPCpgORII22+A5aEo5KPdFmsIPWhCbxWhJ
XCco9nM+itMbk5SvanSMfHLRw/5zFCu3sKsyt0g0cqUx69vRiIGYSDi91jULiu9H
IZUCLz08zOnPkXqtVKlVHvH0xp1DMM9ph9L9Ph3OB6fLa9HpnZcPz36bmAOW25Xd
jMzq0o7BVrenDC5mY/KPCj6NFh26SCfeFcucc4Crvc+Lny+01NsaA5Y2oclyKgw8
ogXv0/TU21ESC5dkyaWrrjaStyezaYWwWyivE1pumrpeHYpbbdQHc2Czgerbdf29
MWHJeeuJJg5EA9HqvC7GUuqd8UiaWm+MsnAYj4f394j+Zw==
-----END CERTIFICATE-----
Generated at Tue May 13 14:22:36 2025 by rpki-client