Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e35302e302f32342d3234203d3e20323635383331.roa
File:                     3139322e3134312e35302e302f32342d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          Rw2G0Q3LByD55hgDeZk5RzhQm2WTmuC5fldAWF2aMto=
Subject key identifier:   5D:11:FB:B7:32:08:44:C4:96:70:08:6D:2F:FD:44:09:68:C2:84:23
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       04754E681107E313CF0D0B16692361834E62CED0
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e35302e302f32342d3234203d3e20323635383331.roa
Signing time:             Tue 04 Feb 2025 18:03:57 +0000
ROA not before:           Tue 04 Feb 2025 17:58:57 +0000
ROA not after:            Tue 03 Feb 2026 18:03:57 +0000
asID:                     265831
IP address blocks:        192.141.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:75:4e:68:11:07:e3:13:cf:0d:0b:16:69:23:61:83:4e:62:ce:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Feb  4 17:58:57 2025 GMT
            Not After : Feb  3 18:03:57 2026 GMT
        Subject: CN=5D11FBB7320844C49670086D2FFD440968C28423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:80:34:c1:cb:f1:d0:9f:a3:91:0c:b9:4b:
                    e2:6a:19:1b:0d:bb:be:4f:ef:3e:48:2b:74:f9:2b:
                    35:d0:50:f8:66:cd:10:46:a9:85:47:9a:af:de:b6:
                    43:47:3e:f5:e8:90:47:29:65:82:fb:7f:19:d8:e9:
                    d1:11:48:80:19:3d:87:b5:af:24:0e:96:52:2b:e9:
                    34:38:d6:be:f1:d5:33:6a:56:9c:1e:1d:7b:f6:a1:
                    d8:93:ab:49:bc:4f:f1:73:f6:b3:75:e3:a9:0f:b3:
                    bf:50:36:66:5e:76:f3:cd:53:10:2f:d3:fa:f8:17:
                    49:b6:b9:be:54:e1:2f:c9:d5:53:8d:0e:0e:d4:5d:
                    42:95:64:93:72:85:df:6f:6f:75:59:1f:b2:95:a8:
                    51:4b:2b:89:f4:c3:c9:60:b6:0e:96:d9:41:d7:83:
                    e3:43:73:21:ca:81:96:f7:4d:1a:90:23:e6:49:0b:
                    b6:54:33:94:a3:9a:d3:82:a9:32:e2:79:42:94:31:
                    91:87:64:b0:b6:93:f1:a1:a2:fa:5f:16:0e:c9:14:
                    75:2c:c5:4e:31:2b:30:2a:55:8e:4f:2c:f5:89:ce:
                    a4:01:3b:d9:45:34:88:aa:20:44:40:e2:ff:b1:c4:
                    5b:78:99:ca:2b:91:dd:fc:bc:4f:ca:0d:8b:2b:6d:
                    b1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:11:FB:B7:32:08:44:C4:96:70:08:6D:2F:FD:44:09:68:C2:84:23
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e35302e302f32342d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ef:8f:05:80:2c:7a:66:8e:b8:ce:b1:ee:ce:c4:da:0a:a6:
         7a:0f:1e:b1:ee:32:b9:d9:2f:4a:98:ab:1d:4d:41:59:29:9d:
         e1:4e:0c:e4:79:1a:e2:40:dd:24:9d:cb:88:70:2c:61:c4:4e:
         29:bf:6e:df:06:5a:e0:71:1d:f9:a1:d2:94:b5:90:22:3e:cf:
         18:29:08:dd:1c:a7:bd:68:7f:df:46:e4:3e:32:84:1f:f6:ae:
         5f:98:f1:02:71:27:b7:28:35:26:55:a0:57:2a:58:0f:a4:80:
         68:f8:44:f2:00:73:ae:e3:63:88:55:44:62:e4:28:1e:e1:87:
         14:68:ea:5c:9a:52:d9:f5:42:21:dd:0e:ba:51:c2:fe:9b:a4:
         63:07:08:aa:05:c0:ad:ee:42:91:87:50:52:75:13:5c:3c:69:
         4f:f1:5b:5b:c8:9a:e4:43:09:05:f4:ad:db:8a:69:7f:98:33:
         c2:1b:4c:a7:a9:bc:3e:8e:c1:54:5a:85:d7:53:d9:52:5a:7f:
         26:67:0b:3a:4f:4e:4d:05:65:a8:7b:bf:29:ac:1b:75:8a:0e:
         a9:9a:0f:0d:6b:1a:87:9f:41:6f:5e:2b:63:71:6e:c4:c1:9e:
         16:ec:d3:bd:d7:b0:5a:fd:94:e6:a7:93:f0:d4:db:99:52:91:
         ea:b9:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:11 2025 by rpki-client