Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32322e302f32332d3234203d3e203131313732.roa
File:                     3230312e3133392e32322e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          mkYa1rfXHt/tfgfst0ix1xFr/pSpCIcCwXpt1d+L8gM=
Subject key identifier:   16:DC:F6:E8:D0:68:67:F0:51:99:16:DF:41:BA:CA:C7:D0:21:49:86
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       1915D70C05EC25DA05600ECE1B1B01327ADDBE6A
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32322e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 03 Jun 2025 21:05:02 +0000
ROA not before:           Tue 03 Jun 2025 21:00:02 +0000
ROA not after:            Tue 02 Jun 2026 21:05:02 +0000
asID:                     11172
IP address blocks:        201.139.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:d7:0c:05:ec:25:da:05:60:0e:ce:1b:1b:01:32:7a:dd:be:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: Jun  3 21:00:02 2025 GMT
            Not After : Jun  2 21:05:02 2026 GMT
        Subject: CN=16DCF6E8D06867F0519916DF41BACAC7D0214986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:5e:e5:3f:69:b0:58:e8:c2:81:d2:25:74:
                    6c:e6:49:87:25:9d:53:16:20:a2:9e:6a:32:7e:23:
                    95:ae:47:5e:53:84:af:5b:20:d7:60:4d:5b:56:77:
                    75:98:50:54:96:f1:b4:1d:b5:28:92:15:22:56:a9:
                    ff:4b:bf:46:62:52:18:e8:93:ff:75:6a:0e:ca:49:
                    e8:2c:d9:15:d8:df:35:bd:2c:c3:e2:dd:0a:ae:16:
                    c0:d7:4b:07:cc:35:93:b2:86:a1:ea:0a:8e:ed:40:
                    36:9e:ee:0f:b6:a8:0b:53:a6:9b:39:f2:c0:a3:18:
                    af:03:9e:f5:08:84:90:1b:4c:6a:b0:20:92:70:9e:
                    29:93:10:04:11:72:47:0d:db:0c:37:56:19:c6:ee:
                    0b:16:26:05:39:34:f4:ba:7d:13:ae:36:4a:78:f5:
                    90:1c:a7:5c:70:5a:e6:be:5b:cb:f1:9b:33:fe:ce:
                    97:ef:a5:d5:46:ee:e6:11:0d:da:8c:83:56:b5:29:
                    08:4a:e2:94:b6:3a:79:5e:d8:3a:b8:6f:7d:3e:7b:
                    8f:c3:91:97:a9:95:dc:9d:1f:62:df:de:e7:e2:43:
                    9e:38:42:be:d4:03:ae:0b:4d:7b:4f:04:f9:c2:7c:
                    96:b1:09:b9:35:a8:c7:75:71:25:ca:8c:cc:3f:a2:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:F6:E8:D0:68:67:F0:51:99:16:DF:41:BA:CA:C7:D0:21:49:86
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32322e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:dd:f9:06:b6:95:0d:33:3b:e7:b8:2a:a6:b5:04:75:1e:
         05:61:4b:fe:31:cf:b9:8d:7a:99:05:e8:cb:ac:b8:2c:5c:08:
         df:35:31:59:86:04:33:57:7c:be:aa:53:11:e1:4a:5f:8a:0c:
         70:e3:a4:bf:cf:3b:66:d2:b8:24:55:2c:5b:7d:01:ae:8e:7e:
         63:ef:91:63:69:0f:e7:4a:57:47:e4:4b:a7:04:86:35:e9:97:
         73:9b:cc:07:b4:d3:e9:39:13:82:f8:a3:48:7e:c0:2f:ad:a3:
         52:24:f6:4a:45:35:6b:9c:d5:42:e7:c2:44:14:db:c5:98:e0:
         24:e4:4a:8f:a9:84:28:9f:24:d7:05:73:2e:d9:18:3b:1f:85:
         9c:76:d2:6e:ca:cd:e4:d0:d0:f9:af:66:b5:47:a2:59:b0:fc:
         7f:39:63:e7:4e:bc:95:ce:a7:e3:69:46:2d:48:7f:a5:a4:a3:
         28:a3:85:81:97:db:96:40:c3:88:cb:7a:66:ac:31:06:8b:7b:
         ac:70:cf:fc:74:c4:2f:61:92:1f:76:97:74:54:74:18:3a:fa:
         32:13:64:80:41:a6:ec:31:0f:1f:c5:36:66:ed:b5:7c:61:67:
         22:1c:9f:00:24:dc:5a:c7:ac:d1:0d:e8:88:bb:cf:64:34:79:
         6d:4c:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:08:42 2025 by rpki-client