Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e20323635373638.roa
File:                     3139302e3131322e33322e302f32312d3234203d3e20323635373638.roa (raw, json)
Hash identifier:          QMFog2P6Kr70S4b0DkgLkGrQnwNfikTiolluEGl12Cc=
Subject key identifier:   B3:5F:B6:FA:99:E1:0E:81:49:E9:E6:76:DD:9F:A5:DB:A8:B4:DB:14
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       0FC8A3F9E220F19CAADE21DE26B008C9A74A9666
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e20323635373638.roa
Signing time:             Fri 24 Oct 2025 13:25:00 +0000
ROA not before:           Fri 24 Oct 2025 13:20:00 +0000
ROA not after:            Fri 23 Oct 2026 13:25:00 +0000
asID:                     265768
IP address blocks:        190.112.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 08:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c8:a3:f9:e2:20:f1:9c:aa:de:21:de:26:b0:08:c9:a7:4a:96:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Oct 24 13:20:00 2025 GMT
            Not After : Oct 23 13:25:00 2026 GMT
        Subject: CN=B35FB6FA99E10E8149E9E676DD9FA5DBA8B4DB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:8c:7b:49:f4:d3:b6:f7:d4:a8:67:bd:85:
                    0a:99:c5:e7:18:53:65:50:b6:ce:67:cd:ea:d9:5b:
                    01:48:69:e1:e4:89:a9:5d:98:d9:72:70:7c:74:b0:
                    5e:66:c7:f0:57:52:c3:e9:fc:01:6b:9e:7e:77:7d:
                    06:00:90:06:b2:90:07:65:99:da:69:1a:52:5e:e5:
                    23:ee:51:aa:d6:79:c6:7a:6f:22:38:5d:39:c3:0f:
                    22:8f:92:28:95:ba:d4:b8:e5:ee:4f:85:12:bd:3e:
                    dc:fa:a5:93:72:c5:66:40:b7:93:bf:9d:0a:74:d3:
                    69:d9:6a:d0:08:d2:1c:40:f9:0a:f3:5c:d3:80:2c:
                    06:2b:f8:52:23:77:4f:5b:bb:2a:a6:f5:c1:09:7d:
                    c1:31:7e:5d:cc:09:37:0b:7f:94:14:d5:50:40:96:
                    cd:3a:73:f8:1d:41:b4:4c:86:b7:df:0e:8a:5c:35:
                    89:bc:d7:a0:60:7d:0e:a0:73:72:9a:1d:82:f0:dd:
                    e1:13:c1:bb:54:62:f4:ee:e3:51:49:ed:5d:00:c6:
                    3e:d1:8a:2a:5d:76:72:5e:34:12:3a:e5:aa:2b:2b:
                    b8:74:07:fd:c0:2e:f9:1e:9c:ff:ff:4c:6e:ad:ad:
                    c2:4f:9d:35:83:6f:bc:ec:23:05:a4:21:56:31:34:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:B6:FA:99:E1:0E:81:49:E9:E6:76:DD:9F:A5:DB:A8:B4:DB:14
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e20323635373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:95:a7:e5:dd:a5:26:8c:2f:ba:77:26:ba:67:52:5f:03:0c:
         5f:c5:7a:6e:3a:55:5a:48:d5:83:4b:cd:76:5e:22:83:d8:f0:
         5b:85:0c:bd:e5:84:fc:f0:bd:a2:36:af:4e:76:0d:69:d9:fa:
         9e:42:0f:76:37:f4:5c:f6:48:7c:c1:37:b1:98:e7:0a:ae:45:
         04:fe:4a:6e:bb:ed:1e:93:09:a9:e1:e5:9e:e8:f0:07:4e:e0:
         d8:80:95:58:cd:51:23:c7:a8:2e:c4:91:e3:76:cb:fc:81:9b:
         5e:dc:1a:bb:1e:15:03:7e:cb:3d:33:ab:e9:85:93:90:fc:38:
         bf:5c:fc:c7:16:c5:1f:30:8d:9f:e6:44:9e:83:51:72:2a:9c:
         45:42:fd:ad:03:1a:48:e8:f2:df:29:97:e7:93:8f:b6:f6:74:
         f3:bf:66:c2:c6:f9:2c:ae:85:55:70:bd:91:43:61:a2:cc:11:
         27:99:b0:19:e7:49:bc:5a:51:7c:ea:5e:3d:50:e7:ec:11:f5:
         d6:6f:3b:6d:fb:0d:62:ff:be:04:78:dd:01:03:c2:ba:fa:06:
         e7:53:79:f4:af:59:fa:29:f7:2c:5b:01:e4:ec:d1:68:20:3f:
         9f:43:86:b3:44:58:49:5c:c1:25:f0:0d:72:3b:f9:89:7b:de:
         e1:08:00:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:42:51 2025 by rpki-client