Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34302e302f32322d3332203d3e20323732303836.roa
File:                     3138392e38352e34302e302f32322d3332203d3e20323732303836.roa (raw, json)
Hash identifier:          gH74hb0UjH8XS1FdrlfOhIeJ0EyLGh9H/m7oIHgwd8I=
Subject key identifier:   B2:49:6C:05:09:F0:1A:E6:19:E8:68:9C:43:ED:3A:91:3A:F9:52:05
Certificate issuer:       /CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
Certificate serial:       3B0E583EF290D14709B60950B35CC692007575FC
Authority key identifier: E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34302e302f32322d3332203d3e20323732303836.roa
Signing time:             Tue 04 Feb 2025 19:59:09 +0000
ROA not before:           Tue 04 Feb 2025 19:54:09 +0000
ROA not after:            Tue 03 Feb 2026 19:59:09 +0000
asID:                     272086
IP address blocks:        189.85.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0e:58:3e:f2:90:d1:47:09:b6:09:50:b3:5c:c6:92:00:75:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
        Validity
            Not Before: Feb  4 19:54:09 2025 GMT
            Not After : Feb  3 19:59:09 2026 GMT
        Subject: CN=B2496C0509F01AE619E8689C43ED3A913AF95205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:79:33:19:ac:9e:ed:e3:c9:91:fd:c1:4f:
                    42:6a:fa:54:49:3e:3f:11:0e:01:79:24:c1:1b:df:
                    04:a1:c3:5b:03:92:fc:b0:f0:2e:8f:6e:b3:97:aa:
                    48:66:31:99:04:3e:35:cd:05:c5:71:85:ca:ac:24:
                    ec:ba:ba:c3:67:5a:c6:de:1d:a3:05:fe:7c:c8:90:
                    ac:01:74:2e:49:cc:ec:8b:cc:49:13:97:9b:3b:68:
                    07:cd:e8:2b:80:3d:9a:f1:56:bb:c4:b0:54:d9:e0:
                    f6:1b:50:a9:a2:25:e3:d5:b7:bc:ab:28:b5:09:8c:
                    1a:cc:27:0b:f6:bc:b7:7a:b1:0a:c5:6f:af:45:50:
                    bb:a6:4a:cf:f4:1d:09:a4:b5:3d:f3:35:31:47:80:
                    0e:77:31:d0:13:02:ec:d0:27:b6:bd:7e:e7:3c:af:
                    ec:50:c9:da:5f:8a:42:a2:6d:0e:83:82:44:54:d9:
                    7e:f6:6f:91:1e:ee:eb:ca:89:81:6c:cf:8b:bd:a5:
                    69:8d:ca:78:3b:70:d3:4d:02:28:a7:ac:c5:3b:36:
                    63:5a:51:b5:be:fc:fc:ef:3d:9a:64:4b:e7:ec:df:
                    a9:ae:08:0e:4b:7b:7f:e9:4e:fd:61:46:c0:2a:81:
                    11:87:32:d9:18:35:61:7e:9d:b5:69:2e:7f:d9:85:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:6C:05:09:F0:1A:E6:19:E8:68:9C:43:ED:3A:91:3A:F9:52:05
            X509v3 Authority Key Identifier:
                keyid:E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34302e302f32322d3332203d3e20323732303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:42:ac:95:c3:c7:98:2c:84:39:74:6f:c0:a6:46:79:78:64:
         55:a6:4b:83:24:3a:26:6d:65:fa:26:db:a0:ea:27:45:c1:af:
         e8:b5:02:67:19:1f:8d:2e:f0:38:23:00:74:66:b2:c1:f1:7d:
         14:f0:8c:d5:54:34:70:ab:ec:71:4b:23:3e:da:76:3c:d5:c2:
         97:08:e4:c5:1e:b2:88:22:f6:71:b1:ce:5a:41:c7:61:5e:17:
         0a:62:a7:3f:7b:7e:58:35:e7:55:f0:ea:f5:ae:a9:ab:ce:10:
         88:2a:1a:86:20:e7:cc:73:ff:9b:a9:3e:3f:92:0a:44:a1:ed:
         a8:9a:2d:f5:3f:39:ab:97:54:ce:27:1b:19:7a:49:eb:2e:6f:
         a7:f2:fb:7e:73:88:3f:08:c8:1c:0f:c8:b4:bf:03:10:e4:5c:
         64:06:4d:14:88:49:60:5b:5d:ba:fe:fd:08:19:74:2e:c9:2a:
         6a:00:38:85:c3:65:af:56:81:45:4b:86:de:f7:bb:06:3a:8b:
         43:c6:2f:af:04:f4:9d:26:2d:99:f9:43:f0:e6:c3:38:52:63:
         5c:4e:69:ba:57:87:38:97:95:1b:05:6b:f4:38:c9:bf:77:5f:
         2c:d4:b5:fd:3c:78:b9:ba:a5:cf:8a:d3:30:9c:e6:93:67:64:
         8e:5c:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client