Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135392e302f32342d3234203d3e203231353735.roa
File:                     3139302e382e3135392e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          X216r+dveb5S/6cuNoztAKVkifLXsmdu9JoaVdAWzVg=
Subject key identifier:   D4:E0:76:7D:2E:0A:8A:76:F4:2C:AA:A6:70:9E:3D:A4:06:D9:97:EB
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       06CBE64235FC0A7921D083348A276FC78FC31CD3
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135392e302f32342d3234203d3e203231353735.roa
Signing time:             Thu 07 Aug 2025 21:05:01 +0000
ROA not before:           Thu 07 Aug 2025 21:00:01 +0000
ROA not after:            Thu 06 Aug 2026 21:05:01 +0000
asID:                     21575
IP address blocks:        190.8.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 18:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cb:e6:42:35:fc:0a:79:21:d0:83:34:8a:27:6f:c7:8f:c3:1c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Aug  7 21:00:01 2025 GMT
            Not After : Aug  6 21:05:01 2026 GMT
        Subject: CN=D4E0767D2E0A8A76F42CAAA6709E3DA406D997EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:59:fb:74:e2:ca:42:64:28:2c:d7:89:3d:
                    a2:f0:8f:ed:6d:fe:18:35:be:c8:ec:fe:95:ee:90:
                    17:85:d6:36:54:eb:3e:96:f8:ec:51:a6:da:e1:33:
                    cf:ed:5c:a8:9a:9b:81:15:fe:97:fe:ff:92:84:19:
                    08:a8:b9:79:4c:52:3b:e8:4b:9a:93:fe:fc:43:c1:
                    e2:89:ab:0f:0b:79:ee:1a:8b:3d:41:22:42:a4:1f:
                    1c:4c:da:7d:95:e5:76:ba:77:e6:c3:41:cb:ff:19:
                    cb:63:90:c6:87:52:1b:e5:4d:8f:c4:97:31:04:d8:
                    54:6d:c1:69:d1:07:11:03:be:2a:5e:9d:1e:42:bb:
                    2c:17:86:11:a5:ae:db:f7:54:ed:c3:2d:a4:25:5c:
                    e3:87:a2:8e:18:c1:ce:c8:42:11:3d:c3:54:25:5b:
                    39:6c:c4:e9:5f:cb:1d:f3:14:5b:54:ef:2d:b1:2d:
                    ec:51:18:5d:9b:c3:bf:97:6e:58:b6:00:91:d7:af:
                    4d:31:d7:a4:4c:da:1e:d6:6a:cc:37:23:c4:67:2c:
                    bd:7d:20:86:ab:47:76:4e:e1:b8:bb:a0:97:7c:b3:
                    f6:78:5f:cb:ae:ca:14:0d:d5:b1:6d:11:84:23:d1:
                    43:dd:e4:5d:f8:14:3c:1f:0f:0e:48:de:9d:85:ad:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:76:7D:2E:0A:8A:76:F4:2C:AA:A6:70:9E:3D:A4:06:D9:97:EB
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135392e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:27:7b:b0:87:ac:bc:69:a0:d7:b1:c9:ba:9b:75:64:2d:b4:
         b5:97:b8:8e:08:6a:03:a8:3b:2a:e5:c9:36:a0:96:43:7f:2f:
         3b:6b:a8:12:56:62:2d:32:8b:b7:a0:16:d5:06:47:a1:03:e8:
         89:2c:60:6d:b3:5b:55:5f:e1:69:81:4d:70:76:31:74:10:cd:
         59:c7:d1:9c:64:ba:f3:91:d3:55:1f:a3:0a:d0:2f:1c:22:f7:
         aa:1a:3e:2e:c2:64:9a:26:7e:d2:0f:40:2d:4b:2a:da:d1:55:
         ac:53:5a:68:59:7f:6a:28:97:5f:7a:c9:67:16:aa:06:b5:16:
         93:ea:90:6f:2e:7c:3f:b7:9e:81:8f:69:c3:ca:e9:1d:6a:34:
         07:ac:97:99:14:fa:2f:ee:5a:bb:83:8b:5b:a7:ca:c7:84:24:
         78:4e:00:1c:85:a7:09:23:5a:b9:ac:1a:6f:fc:ad:4c:e0:13:
         87:f4:dc:3b:e6:df:a9:81:eb:f6:97:3e:f6:45:db:fe:f2:bd:
         1b:c8:5f:94:b5:53:05:5d:d1:9b:de:2c:88:2b:e8:a7:b5:00:
         17:ef:9f:51:44:76:d0:62:09:bf:41:28:b1:d5:64:75:17:d6:
         56:b4:72:ce:59:b9:25:f5:14:2c:e7:c8:36:d4:01:bc:c3:75:
         36:a9:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:56:25 2025 by rpki-client