Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/168A9A2AF51CCA03D300652074EDFE2BE4132EA09005662812D91524A81072F9/0/3139322e3134312e3230382e302f32322d3234203d3e20323635373935.roa
File:                     3139322e3134312e3230382e302f32322d3234203d3e20323635373935.roa (raw, json)
Hash identifier:          BRrxtJ3zCQts6XwpSozYF99QTqe8zOYFQo8FhkQNfyA=
Subject key identifier:   7E:9E:A6:B1:F1:EB:DF:AF:3E:52:8A:67:F5:EA:74:C9:9C:A7:CF:AA
Certificate issuer:       /CN=481960DE7247D26B7F63421AEEA13EB63009C85C
Certificate serial:       4E5A2EEECC6EEF9919A4B1BABEE820323E07741C
Authority key identifier: 48:19:60:DE:72:47:D2:6B:7F:63:42:1A:EE:A1:3E:B6:30:09:C8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481960DE7247D26B7F63421AEEA13EB63009C85C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/168A9A2AF51CCA03D300652074EDFE2BE4132EA09005662812D91524A81072F9/0/3139322e3134312e3230382e302f32322d3234203d3e20323635373935.roa
Signing time:             Tue 04 Feb 2025 18:22:00 +0000
ROA not before:           Tue 04 Feb 2025 18:17:00 +0000
ROA not after:            Tue 03 Feb 2026 18:22:00 +0000
asID:                     265795
IP address blocks:        192.141.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/168A9A2AF51CCA03D300652074EDFE2BE4132EA09005662812D91524A81072F9/0/481960DE7247D26B7F63421AEEA13EB63009C85C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/168A9A2AF51CCA03D300652074EDFE2BE4132EA09005662812D91524A81072F9/0/481960DE7247D26B7F63421AEEA13EB63009C85C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481960DE7247D26B7F63421AEEA13EB63009C85C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5a:2e:ee:cc:6e:ef:99:19:a4:b1:ba:be:e8:20:32:3e:07:74:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481960DE7247D26B7F63421AEEA13EB63009C85C
        Validity
            Not Before: Feb  4 18:17:00 2025 GMT
            Not After : Feb  3 18:22:00 2026 GMT
        Subject: CN=7E9EA6B1F1EBDFAF3E528A67F5EA74C99CA7CFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:4e:a9:f1:eb:d3:ce:11:be:3f:91:47:9c:
                    fe:6c:57:97:7c:08:2a:09:00:43:28:e6:75:ca:be:
                    25:b0:50:db:49:2d:dc:21:da:ad:0a:56:db:2c:4e:
                    47:ed:36:19:13:59:5a:4a:9e:40:f7:41:48:11:7c:
                    fe:0f:53:d7:a2:ba:81:cc:37:99:cd:f5:e9:66:bb:
                    94:86:02:55:4e:87:8f:86:2d:af:57:f5:01:f5:f9:
                    25:dc:ac:7e:50:01:e0:ee:75:34:c9:eb:14:b9:a7:
                    e9:ef:79:6f:dc:a3:86:d4:67:86:a4:d1:46:21:7a:
                    86:33:72:ad:30:5f:1d:e7:7c:ea:98:b6:88:cd:09:
                    43:42:15:17:98:83:1d:41:94:17:e7:c7:a8:64:d7:
                    99:dc:4e:d3:aa:2e:88:23:fe:cf:0b:28:f3:94:d4:
                    eb:bb:6a:0f:6b:aa:53:93:0d:34:00:a0:b7:21:24:
                    b1:84:d4:64:98:68:70:f2:b5:c6:b1:64:97:9f:37:
                    4d:4a:fc:96:60:17:92:20:77:fe:63:4e:b6:6d:59:
                    a6:e1:4e:65:7d:ce:3f:a0:21:87:16:c9:27:da:be:
                    eb:a9:ef:96:57:d4:17:35:b2:d4:93:9e:6b:71:c6:
                    9c:08:1d:b2:c0:65:7c:d0:75:b2:3a:81:c8:48:58:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:A6:B1:F1:EB:DF:AF:3E:52:8A:67:F5:EA:74:C9:9C:A7:CF:AA
            X509v3 Authority Key Identifier:
                keyid:48:19:60:DE:72:47:D2:6B:7F:63:42:1A:EE:A1:3E:B6:30:09:C8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/168A9A2AF51CCA03D300652074EDFE2BE4132EA09005662812D91524A81072F9/0/481960DE7247D26B7F63421AEEA13EB63009C85C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481960DE7247D26B7F63421AEEA13EB63009C85C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/168A9A2AF51CCA03D300652074EDFE2BE4132EA09005662812D91524A81072F9/0/3139322e3134312e3230382e302f32322d3234203d3e20323635373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:e7:94:b5:e1:39:c7:6b:ed:dd:62:b7:9b:97:a5:7b:16:
         08:52:24:c2:6c:38:35:97:56:5c:e4:8a:ca:99:43:32:70:10:
         04:96:6c:8b:bd:d5:22:a0:27:1e:bb:67:41:36:86:b7:d6:c2:
         b0:78:8d:87:71:62:53:84:a5:d7:24:77:e6:e2:57:13:c8:bb:
         fa:23:20:25:f6:ab:39:87:fd:83:b9:db:36:64:42:41:c9:76:
         bf:b3:64:9d:89:69:12:56:bd:b4:0c:0f:52:b2:4e:89:94:e2:
         6d:8f:47:b1:ab:74:f0:e5:13:e2:99:d3:ac:36:a2:94:37:93:
         5f:70:fe:5d:87:a4:9f:65:45:71:bb:dc:5e:03:d7:ee:b8:c2:
         1e:03:e6:7f:0f:d9:40:29:dc:eb:20:48:5a:35:1d:6b:72:43:
         0c:c8:a7:1f:ce:fd:ab:01:c3:6f:c8:42:67:a9:9d:c6:2e:6c:
         f9:c9:89:51:f0:21:13:a4:d5:c1:00:e1:01:e9:90:e4:14:07:
         41:2b:e7:16:c3:43:50:7d:b0:f2:55:30:6f:5f:4e:da:8d:aa:
         96:44:1c:b4:ea:93:f6:35:1e:17:b3:ba:14:c8:e7:81:8f:41:
         1c:43:de:48:96:43:23:78:85:52:7a:45:cb:83:8c:3e:82:95:
         88:e3:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:47 2025 by rpki-client