Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135362e302f32342d3234203d3e203231353735.roa
File:                     3139302e382e3135362e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          xdX69tAwmMfebr4IWTizb2b6bZN4TYmiQ4RY4ksrti0=
Subject key identifier:   EA:08:C4:71:6F:27:26:AF:6B:73:54:9F:1A:B0:19:92:CA:57:53:2D
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       7754EC001136868044A66297F18169AC4814A102
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135362e302f32342d3234203d3e203231353735.roa
Signing time:             Thu 07 Aug 2025 21:05:00 +0000
ROA not before:           Thu 07 Aug 2025 21:00:00 +0000
ROA not after:            Thu 06 Aug 2026 21:05:00 +0000
asID:                     21575
IP address blocks:        190.8.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 18:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:54:ec:00:11:36:86:80:44:a6:62:97:f1:81:69:ac:48:14:a1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Aug  7 21:00:00 2025 GMT
            Not After : Aug  6 21:05:00 2026 GMT
        Subject: CN=EA08C4716F2726AF6B73549F1AB01992CA57532D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:e4:b1:5e:d0:6c:5a:4a:d8:bb:09:9b:74:
                    f6:3b:64:f0:a1:85:8a:bf:33:ba:4d:47:f9:70:2e:
                    89:53:fb:0d:e7:08:a3:40:49:f5:22:d5:8f:66:c8:
                    d1:e5:57:ba:7e:82:1a:6b:52:97:26:e8:24:b9:f4:
                    75:d4:0b:02:08:e6:18:e5:ed:25:5c:1b:1e:a6:90:
                    00:1f:b7:e5:ad:cc:d9:8e:18:ed:66:67:4e:23:0b:
                    56:94:a2:d2:e6:c3:f3:f7:88:48:98:72:63:dd:a8:
                    9d:1a:c1:31:00:35:6b:66:84:d5:f3:bc:f5:17:80:
                    13:fa:b3:9d:7d:6b:cc:dd:3d:17:ef:fb:7f:b7:10:
                    10:e4:04:c8:92:ad:2f:5c:22:f5:75:49:97:23:9f:
                    22:8c:07:a9:31:94:13:0c:cb:b2:29:fc:dc:73:06:
                    4b:15:4c:33:ae:cc:ca:53:ad:14:7a:88:fc:fe:41:
                    83:20:f0:6c:f6:f6:f1:81:ac:e1:be:21:d6:d7:03:
                    fc:d5:20:59:29:c9:6f:58:70:f2:29:e7:67:a0:13:
                    95:34:fd:ea:75:1b:06:b3:d6:e2:11:83:64:e9:ca:
                    55:fd:5c:7e:89:19:fb:ca:9c:0a:2a:41:6a:b6:fb:
                    82:08:6d:76:22:6d:79:77:b3:cc:6f:17:e6:2c:0e:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:08:C4:71:6F:27:26:AF:6B:73:54:9F:1A:B0:19:92:CA:57:53:2D
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135362e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8b:3b:74:a5:86:b1:4f:21:89:28:aa:5b:4c:85:bb:b9:bb:
         7b:7f:fc:eb:f0:f6:78:06:b5:df:d2:58:ba:09:a8:c9:82:f5:
         90:e8:6e:75:25:7d:3d:b8:70:f7:49:af:a0:34:24:03:3b:d9:
         80:44:3f:2a:71:e1:ac:2e:fe:fa:3c:63:a2:14:d7:65:22:de:
         dc:de:21:4b:96:fe:77:74:52:14:04:2f:d9:03:d2:c7:bb:05:
         01:c7:9a:81:e8:16:0b:6c:4e:20:c9:29:3e:e3:22:4d:f8:fb:
         4a:15:a0:7a:cc:8f:d6:cb:7f:86:52:62:ee:44:cf:81:02:bb:
         76:0d:8a:05:0e:35:b1:3d:28:20:14:fb:ab:f6:97:e1:77:7e:
         49:af:4b:eb:b0:58:c6:37:cf:e8:e5:6a:67:0e:01:17:78:11:
         d6:89:62:aa:2a:1d:6e:95:af:70:ae:78:17:8a:72:41:88:a5:
         b7:dc:2b:92:60:ee:61:73:86:07:14:14:f7:ea:2d:b7:fb:67:
         32:3d:5b:11:e8:90:9c:66:ea:8a:5d:88:a0:d4:8b:0b:08:de:
         91:ec:e5:59:14:dc:03:9a:09:0b:06:c8:5a:87:11:f5:69:1b:
         c1:ab:f0:eb:9f:84:ba:8b:ef:db:23:9b:ed:f2:81:05:92:c2:
         e2:23:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:59 2025 by rpki-client