Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          WzwbxsNMtSszMak8EuyjvkFv/GB7F0YwavVy3GUGQ80=
Subject key identifier:   12:DD:17:77:31:FC:6A:37:88:C2:C0:35:CB:78:C3:72:19:6D:1F:E5
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       71908FAC55AF2FB731F37B185AD555E4F23BF751
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 04 Feb 2025 18:50:25 +0000
ROA not before:           Tue 04 Feb 2025 18:45:25 +0000
ROA not after:            Tue 03 Feb 2026 18:50:25 +0000
asID:                     272150
IP address blocks:        192.141.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:90:8f:ac:55:af:2f:b7:31:f3:7b:18:5a:d5:55:e4:f2:3b:f7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Feb  4 18:45:25 2025 GMT
            Not After : Feb  3 18:50:25 2026 GMT
        Subject: CN=12DD177731FC6A3788C2C035CB78C372196D1FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:f7:f4:db:9a:bc:0a:e2:5d:41:08:16:a2:
                    4e:e9:c6:a8:c0:59:f3:5c:b4:86:80:66:8d:81:0f:
                    03:77:43:31:e7:ed:d4:36:c4:fb:75:0a:5a:19:16:
                    a7:5a:97:7c:96:84:98:35:0a:61:34:df:2e:14:e9:
                    e6:81:0e:4f:c8:a2:25:06:f7:48:92:80:1a:dc:dc:
                    87:68:ee:35:86:1c:f0:ce:b6:2f:a7:04:7d:1a:a3:
                    f2:2f:e1:23:67:22:6e:f0:31:e4:53:bb:ef:a4:8d:
                    db:76:5e:a1:42:ee:69:1e:3f:e1:01:dd:68:8a:cb:
                    b9:99:82:5f:89:ba:be:f8:36:ff:5d:ad:00:d3:99:
                    0e:0b:52:06:54:48:fb:a8:03:25:a2:f5:6a:98:82:
                    88:60:5f:09:9f:29:23:1a:46:da:d8:61:ee:e5:89:
                    76:0f:62:2e:59:24:04:37:2b:73:9b:b8:52:26:91:
                    5c:42:0c:d1:7c:31:be:b5:06:58:35:a6:ff:db:14:
                    4a:95:20:0c:c3:a9:de:a7:78:8c:37:2b:48:04:a4:
                    ac:40:79:54:c9:56:f8:03:f7:4d:d6:ff:4c:f4:fb:
                    6e:de:a3:b0:75:28:9b:be:a6:0c:c2:17:24:9b:05:
                    84:b7:15:66:19:91:ce:d3:fd:75:b6:58:77:65:b7:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DD:17:77:31:FC:6A:37:88:C2:C0:35:CB:78:C3:72:19:6D:1F:E5
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:12:59:21:e3:1a:ea:0c:c4:91:89:94:50:ac:b8:ba:b1:
         53:7c:4d:b8:65:4a:c0:0d:a9:e7:29:4e:65:bf:29:a0:98:35:
         e1:0b:44:10:c8:8f:71:e6:7a:9c:5d:32:34:e9:bd:f1:c2:07:
         f7:97:52:3d:d5:d3:19:c4:2c:b4:c6:1c:9f:1a:ed:8b:c1:7f:
         05:bf:58:b4:49:ec:5a:56:65:50:98:35:44:0f:3f:73:d2:55:
         a6:88:8c:35:aa:5f:1d:cf:56:51:f5:63:88:2e:9a:3a:00:96:
         70:df:eb:e2:e3:3e:ee:72:fd:28:0e:80:74:3e:10:cb:ec:60:
         4a:df:6d:89:db:b4:ae:ac:4d:c7:1b:e1:0c:b1:b2:5a:e1:79:
         63:2c:97:b3:65:fa:a1:4f:e8:55:4c:67:71:0c:8d:4f:6e:98:
         9a:c4:e8:8d:32:7a:29:de:6c:f1:37:8c:64:80:6e:79:2a:3c:
         06:90:3c:52:52:5c:c8:78:ae:36:d5:87:20:28:72:d0:ba:49:
         a4:8f:89:7e:e3:cc:21:21:d9:b7:eb:e0:12:32:cc:d2:f3:ae:
         fe:b7:f1:7b:61:b9:50:66:11:5c:8c:d9:ed:e7:15:cc:07:1e:
         4a:0a:6e:6f:b7:38:0c:ae:0c:d2:13:dc:fb:30:7e:18:05:1a:
         fd:af:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:06 2025 by rpki-client