Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          jzg3C+V4+fMhKcuols7p7qpRJrJgt7cX6K0uoelVf+8=
Subject key identifier:   32:5B:45:9A:EF:08:43:A9:4A:65:6A:1A:49:2D:C2:D3:E2:64:C7:AD
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       282665940B025569538802A1B5E2377D5DF8D35D
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 04 Feb 2025 18:50:24 +0000
ROA not before:           Tue 04 Feb 2025 18:45:24 +0000
ROA not after:            Tue 03 Feb 2026 18:50:24 +0000
asID:                     272150
IP address blocks:        192.141.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:26:65:94:0b:02:55:69:53:88:02:a1:b5:e2:37:7d:5d:f8:d3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Feb  4 18:45:24 2025 GMT
            Not After : Feb  3 18:50:24 2026 GMT
        Subject: CN=325B459AEF0843A94A656A1A492DC2D3E264C7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:08:66:3f:b6:80:b4:6e:5a:85:2d:45:33:
                    00:dd:05:31:3f:aa:07:8c:a6:67:67:08:af:6d:df:
                    a9:1d:79:15:1c:c1:de:73:79:18:86:c7:74:ba:db:
                    0d:b1:44:41:30:78:a1:c9:cc:53:e3:7e:e2:39:02:
                    e3:76:95:ee:2c:8c:16:fc:09:a4:cd:fb:0e:ec:12:
                    5c:cb:09:e7:ca:f8:71:5e:aa:f9:ff:05:7d:11:43:
                    b2:cf:a2:10:7a:26:32:45:8a:32:ff:cd:6c:c8:8a:
                    64:40:7f:7a:52:41:88:cf:75:18:ed:99:e6:b0:dc:
                    66:ff:83:f0:2f:e5:5a:e5:72:cb:2e:85:7b:bd:61:
                    85:c4:17:ef:25:a7:29:2d:08:9a:ee:ca:e7:a9:ae:
                    bf:fb:8b:35:a3:e0:77:f6:60:f1:8d:0f:98:79:fd:
                    fa:af:0b:9d:d2:62:55:50:9b:ff:94:55:c1:01:dd:
                    6d:b1:29:57:90:eb:85:c3:2d:28:1c:1f:f2:81:36:
                    0f:a6:b5:ce:23:44:b0:7a:21:93:22:29:2e:c7:92:
                    9f:9d:42:2f:ee:6c:92:1b:b9:cc:52:7f:c4:0d:fc:
                    7a:6c:d6:f7:7e:da:19:05:86:e7:69:89:59:70:da:
                    36:c0:5f:1c:f0:c5:72:67:98:4e:7a:ad:ea:86:d8:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:45:9A:EF:08:43:A9:4A:65:6A:1A:49:2D:C2:D3:E2:64:C7:AD
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:d7:55:35:76:3a:42:4f:31:eb:60:dc:ca:41:32:f8:a8:
         e0:6f:1f:34:b1:c3:28:7c:a8:7c:81:4c:7c:44:11:6a:23:ae:
         cc:20:bd:97:68:86:6f:94:91:86:48:a8:62:2a:54:e9:14:48:
         68:4f:b8:11:58:6a:71:07:bd:8b:7a:bf:c8:0a:26:e2:cc:9a:
         a9:76:66:a3:8b:ce:49:79:cc:52:65:a1:71:f4:3d:a5:04:dc:
         73:5e:28:08:98:58:d7:fc:87:a0:1e:01:5a:bc:cb:b5:fc:41:
         a1:38:e0:b5:d8:9e:a3:40:e5:bf:37:b9:a1:28:d5:db:7b:df:
         cb:1b:cd:57:85:46:2b:80:1b:32:ff:fc:00:e1:79:85:12:05:
         5c:3b:df:50:82:b2:40:13:40:b3:db:d9:ee:af:ff:79:6e:ba:
         54:d4:fb:23:37:32:47:08:49:65:9c:99:5e:59:55:48:a0:5d:
         51:73:1f:03:9b:aa:aa:a7:6a:e7:f8:15:35:91:18:38:14:38:
         69:e9:81:67:9a:fa:84:61:65:ff:f0:2c:57:8f:79:5e:ab:21:
         f9:59:08:30:27:e0:7a:e2:94:51:69:6a:17:62:b8:43:56:8f:
         1a:22:6a:9a:e1:44:69:e4:dd:5b:b0:83:63:56:09:35:a3:4c:
         4b:53:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:25 2025 by rpki-client