Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e3130322e35362e302f32312d3234203d3e203237373936.roa
File:                     3139302e3130322e35362e302f32312d3234203d3e203237373936.roa (raw, json)
Hash identifier:          jNGFgP5VBRKbw4c2oSpAMiEIyOmq4Wc5OspKHqPLj1E=
Subject key identifier:   72:2D:B8:C3:E7:71:22:F1:3C:73:74:F4:54:60:C1:4B:E6:0F:0B:92
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       3810B980CC10BDB004E0976ED2D5E56538B9ADC5
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e3130322e35362e302f32312d3234203d3e203237373936.roa
Signing time:             Tue 17 Jun 2025 21:22:38 +0000
ROA not before:           Tue 17 Jun 2025 21:17:38 +0000
ROA not after:            Tue 16 Jun 2026 21:22:38 +0000
asID:                     27796
IP address blocks:        190.102.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 06:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:10:b9:80:cc:10:bd:b0:04:e0:97:6e:d2:d5:e5:65:38:b9:ad:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Jun 17 21:17:38 2025 GMT
            Not After : Jun 16 21:22:38 2026 GMT
        Subject: CN=722DB8C3E77122F13C7374F45460C14BE60F0B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:92:57:ea:80:58:bb:5d:df:d5:fa:cf:5b:
                    cb:55:31:09:44:09:11:b0:3c:a8:29:13:01:1f:7f:
                    38:ca:eb:db:a7:14:68:9d:a3:da:e5:e4:41:b1:48:
                    d0:35:8d:31:f1:4b:a6:66:3c:bf:ae:77:26:90:b9:
                    39:41:a5:75:1d:fe:33:83:e9:92:3d:e9:bf:63:0d:
                    9d:9e:48:dc:e2:a6:3e:86:74:e0:16:d1:83:bd:80:
                    b5:69:6d:b9:05:1e:e9:4a:b2:5b:bb:30:ad:7d:b1:
                    1f:58:fe:a1:8e:53:ee:a6:4b:6c:cd:65:a4:b7:b6:
                    45:48:81:3f:96:ce:b5:a4:fd:a1:63:c1:ed:cb:5a:
                    12:4f:63:3c:9e:52:d7:d9:8f:97:77:7b:f7:79:11:
                    b7:99:d8:d0:82:12:ef:18:91:de:5a:b4:3b:82:8f:
                    f2:bb:94:91:db:d0:15:a3:72:31:13:33:a3:ca:0c:
                    41:d3:45:8f:f1:4b:32:ff:56:6c:17:28:82:a1:bf:
                    5b:78:41:14:f2:30:20:26:be:0b:0a:5b:77:c4:db:
                    76:17:29:43:0a:be:f9:3e:1c:35:13:38:c9:74:59:
                    ed:ce:2c:ba:8f:f4:9f:d6:69:e5:79:21:57:ff:d7:
                    ba:16:d3:11:c7:8e:e3:ae:9b:4a:d5:d5:ae:e0:0c:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2D:B8:C3:E7:71:22:F1:3C:73:74:F4:54:60:C1:4B:E6:0F:0B:92
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e3130322e35362e302f32312d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:48:5a:29:68:38:32:6e:3e:57:eb:26:5b:66:f7:3b:12:ae:
         3c:92:7e:56:55:a0:3b:ab:fb:c9:c5:67:2d:5b:0d:40:7a:38:
         a1:73:c1:ac:93:c7:18:0a:6a:d3:d5:cf:94:42:0b:56:cc:7e:
         f2:e0:c4:41:72:0f:e8:0e:dd:54:1d:e1:8d:b5:39:29:14:cb:
         c6:bb:c0:bf:69:15:b9:a1:13:31:0b:4a:89:af:cd:35:28:21:
         98:a4:e8:ce:6c:95:af:55:f4:aa:48:e1:35:7a:99:a7:34:dd:
         21:0a:4a:13:85:e1:d3:dc:4c:71:a3:fd:73:11:08:cb:b0:6d:
         d2:c5:38:1b:21:ca:a3:f1:21:dc:2c:46:85:f3:c6:39:00:31:
         c4:c0:fd:e3:88:10:4c:f9:5c:de:4b:78:4b:da:0c:54:12:cf:
         1a:05:bf:22:bf:08:a2:ef:3b:70:86:63:2d:c7:95:d6:1d:58:
         12:58:d9:fa:8f:47:21:38:95:95:f4:7a:ca:79:d1:d7:78:a2:
         0d:04:59:80:2e:ba:91:37:fb:28:11:69:48:dc:18:7e:25:78:
         8c:97:82:6c:73:43:3b:b4:80:ad:8c:b6:b2:be:bb:7f:3a:6c:
         4a:0c:d3:36:4e:d6:e8:36:09:3e:e6:6e:ca:5d:7b:34:f8:6a:
         9a:4b:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:49:35 2025 by rpki-client