Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/3136302e32302e39322e302f32322d3234203d3e20323635373134.roa
File:                     3136302e32302e39322e302f32322d3234203d3e20323635373134.roa (raw, json)
Hash identifier:          RqnDAIDmkSeG0htYYCdorQvms8biBvAj6zXh93awNwo=
Subject key identifier:   5C:B3:5D:24:1D:BF:81:CE:54:53:93:6D:BA:6E:8F:E7:D5:E7:D1:5B
Certificate issuer:       /CN=25B35CCB197A59589C3EC69A6379A2D5D692BFE4
Certificate serial:       236EB527A86D87385A52B1B7C2FA8DB5856A01E0
Authority key identifier: 25:B3:5C:CB:19:7A:59:58:9C:3E:C6:9A:63:79:A2:D5:D6:92:BF:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/3136302e32302e39322e302f32322d3234203d3e20323635373134.roa
Signing time:             Tue 14 Apr 2026 04:38:43 +0000
ROA not before:           Tue 14 Apr 2026 04:33:43 +0000
ROA not after:            Tue 13 Apr 2027 04:38:43 +0000
asID:                     265714
IP address blocks:        160.20.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 07:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6e:b5:27:a8:6d:87:38:5a:52:b1:b7:c2:fa:8d:b5:85:6a:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B35CCB197A59589C3EC69A6379A2D5D692BFE4
        Validity
            Not Before: Apr 14 04:33:43 2026 GMT
            Not After : Apr 13 04:38:43 2027 GMT
        Subject: CN=5CB35D241DBF81CE5453936DBA6E8FE7D5E7D15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:b8:5e:86:10:57:91:a4:e0:d8:34:48:ac:
                    d7:24:e3:15:18:f3:e2:d6:e4:b3:bb:45:bc:cc:58:
                    cb:97:9b:a9:00:84:4d:bf:32:c8:b1:eb:ae:8a:95:
                    42:a3:ca:d8:19:12:75:d4:be:5b:c7:88:59:f5:00:
                    27:b6:6f:f0:6a:1f:e2:bb:ae:31:bb:e1:42:16:ad:
                    97:2c:3b:b4:f4:bb:10:55:ca:f9:84:34:7d:91:ea:
                    4b:f8:7b:cb:bd:ad:0d:c3:ef:a7:66:31:22:2a:af:
                    65:a8:c2:9d:99:0c:3e:66:86:e3:63:8d:25:27:47:
                    c5:38:28:a7:0f:60:64:9e:d8:b6:3e:ce:57:bf:8c:
                    d3:a0:ae:02:c7:4e:1d:a8:e6:79:20:d3:0b:6b:57:
                    f2:a8:ab:bc:65:a6:6d:49:3e:1f:9f:23:28:68:5a:
                    9c:d0:fa:9a:90:69:81:ed:de:05:b0:b8:6b:e6:dd:
                    fb:a6:79:3c:f4:20:20:08:bd:b6:14:4f:dc:89:85:
                    3d:42:f0:3f:59:e4:09:f2:2c:d4:5e:93:b1:4f:7e:
                    03:9b:5c:1d:96:ac:09:8b:8b:01:76:a8:65:66:ce:
                    ca:32:19:4d:a9:d1:20:42:ae:0a:11:7d:11:23:96:
                    18:d8:1e:2d:e8:50:7f:cd:73:3a:90:0b:12:c7:65:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:5D:24:1D:BF:81:CE:54:53:93:6D:BA:6E:8F:E7:D5:E7:D1:5B
            X509v3 Authority Key Identifier:
                keyid:25:B3:5C:CB:19:7A:59:58:9C:3E:C6:9A:63:79:A2:D5:D6:92:BF:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/3136302e32302e39322e302f32322d3234203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:55:ed:ab:e8:ed:85:c7:19:99:80:8e:7a:66:22:88:12:
         6b:f3:8f:3f:fe:27:8c:c4:1d:4d:93:9a:41:86:6d:90:34:50:
         03:0e:49:b9:59:23:c7:01:bd:22:3a:b0:f4:93:bc:50:4c:fa:
         0d:34:f5:6a:57:88:c6:d9:81:e5:88:47:e0:23:9b:2d:1f:a9:
         cf:4e:b8:8a:74:06:a2:33:91:51:be:96:ed:64:20:30:e5:8a:
         28:22:81:a6:90:7a:e7:88:ea:0f:a6:c7:bb:ee:ed:b4:6c:87:
         7f:62:1d:1b:a8:28:0e:6e:70:a1:af:15:04:9b:02:76:64:40:
         b4:b2:88:b3:10:81:6a:9c:f2:2a:63:43:fb:c7:01:ee:e4:72:
         ed:da:ce:20:86:88:c1:95:39:d9:23:e5:7d:fd:6f:54:34:e7:
         38:d3:a3:f7:f9:6d:8e:2f:c6:b2:d2:4a:e4:f3:0e:88:9c:63:
         07:31:8e:0a:3e:79:db:0f:cf:d4:7c:a0:dd:aa:6e:33:1c:60:
         d0:d1:52:2b:7e:31:ad:4a:91:6b:0a:9e:c1:96:31:c1:f9:af:
         d0:96:e5:b6:3e:ec:16:c2:d0:0f:23:4c:05:3f:46:a4:99:c0:
         b4:54:7e:87:da:a2:b1:3a:a0:d6:3b:82:8a:9d:1d:88:c8:14:
         be:44:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:49:18 2026 by rpki-client