Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e20323632323536.roa
File:                     3139322e3134312e34382e302f32322d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          qH2jUJX5ceUAWnSoMx5pyYbHj8qjguqldZwL62y3ehA=
Subject key identifier:   37:7F:58:F1:BD:4C:9C:CE:51:57:73:CB:76:63:B4:CC:CE:C2:17:9F
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       76724689A34613D1A2CE45FA1EC3D5F0A2E76656
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e20323632323536.roa
Signing time:             Tue 04 Feb 2025 18:03:57 +0000
ROA not before:           Tue 04 Feb 2025 17:58:57 +0000
ROA not after:            Tue 03 Feb 2026 18:03:57 +0000
asID:                     262256
IP address blocks:        192.141.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:72:46:89:a3:46:13:d1:a2:ce:45:fa:1e:c3:d5:f0:a2:e7:66:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Feb  4 17:58:57 2025 GMT
            Not After : Feb  3 18:03:57 2026 GMT
        Subject: CN=377F58F1BD4C9CCE515773CB7663B4CCCEC2179F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:dc:47:f7:14:37:03:4f:23:e5:6b:34:93:
                    36:f3:5d:1d:0a:27:c2:ee:23:16:c2:d4:60:95:4b:
                    60:e6:e0:5b:02:64:b7:e5:35:8f:f2:6d:c3:4d:1e:
                    bb:98:78:7c:55:e0:53:99:23:94:bf:18:89:0c:80:
                    d1:e4:74:c2:1d:01:9e:7b:96:27:9c:e3:90:88:0e:
                    87:f8:fe:7c:a6:da:2a:86:f1:2f:d5:96:70:1e:8c:
                    d2:3b:44:54:04:af:30:3c:73:f5:c9:59:53:f4:6a:
                    8a:10:1e:af:36:3e:e0:29:31:f3:2c:05:bc:90:26:
                    19:d7:f3:0c:af:fa:ec:a5:33:ed:f4:f1:bc:d3:e3:
                    13:9b:cc:2f:b8:a1:33:c3:44:ad:16:64:65:5e:d4:
                    d5:0d:bb:27:34:20:3b:f7:77:e6:2c:97:20:96:fa:
                    c4:dd:09:72:5a:75:35:b7:3c:aa:23:5e:58:c7:28:
                    ce:91:c6:14:29:91:ca:f7:2e:96:3e:7d:48:50:07:
                    24:06:2f:d0:02:8a:37:4d:69:eb:ac:9a:7e:e5:41:
                    03:c4:02:4a:14:de:51:45:a2:67:3a:9c:d0:1d:6e:
                    8e:d0:4a:ac:99:da:c8:45:eb:f3:d2:54:9e:ef:ea:
                    38:5a:23:79:3a:8c:be:f4:1f:de:a6:60:19:9d:85:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7F:58:F1:BD:4C:9C:CE:51:57:73:CB:76:63:B4:CC:CE:C2:17:9F
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:57:02:22:1b:b0:fb:17:dc:85:ce:6d:d6:8b:90:31:80:
         31:88:69:03:b8:8e:36:d4:e7:90:08:fc:70:c7:56:ed:36:21:
         2d:a5:49:0d:b2:1b:b6:6c:22:3c:c1:6e:f6:f0:07:20:e6:b2:
         8c:69:4c:8c:ce:91:da:a7:3e:11:55:23:ce:5c:bd:30:80:85:
         ef:c7:8e:d5:ac:00:b7:f0:c6:51:3d:66:16:82:11:49:3d:f1:
         1c:72:c2:88:af:df:a8:b9:98:85:03:88:37:26:24:c2:d1:b9:
         f2:12:44:d9:13:fb:f5:bf:88:1d:70:e1:e2:2e:3d:cc:24:f9:
         19:91:8b:59:1c:24:56:88:91:ef:0e:a0:0e:58:a2:83:b8:2e:
         ee:62:5e:60:e4:85:ca:b7:16:d9:b4:32:1e:6c:e6:49:42:06:
         a1:36:3f:b1:ac:45:27:1f:c1:5e:1c:bb:bf:e8:41:2d:c8:3f:
         1a:46:bf:36:ef:97:e8:74:11:c0:bf:aa:80:c3:93:03:fb:00:
         92:09:bd:ef:2e:cb:50:ab:ce:6c:b7:46:6b:dd:cd:12:b7:8a:
         0f:c9:19:ce:d5:51:06:5f:8e:71:28:09:2e:3d:15:f8:86:53:
         25:b1:ab:4a:c8:17:72:a1:27:10:c6:de:81:46:a3:3b:a2:7e:
         83:c9:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:40 2025 by rpki-client