Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
File:                     36342e32382e3133392e302f32342d3234203d3e203238303637.roa (raw, json)
Hash identifier:          vhty+fB2zD6AIyNtrun2P6GYg5pyTBw22qxONWM/rSQ=
Subject key identifier:   39:1B:37:DC:64:B0:E0:79:56:03:3F:4C:CF:8B:2F:78:29:5B:7E:66
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       1B26058C64267D280D9308BE0A3CDE8275ACF681
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
Signing time:             Tue 04 Feb 2025 18:29:12 +0000
ROA not before:           Tue 04 Feb 2025 18:24:12 +0000
ROA not after:            Tue 03 Feb 2026 18:29:12 +0000
asID:                     28067
IP address blocks:        64.28.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:26:05:8c:64:26:7d:28:0d:93:08:be:0a:3c:de:82:75:ac:f6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Feb  4 18:24:12 2025 GMT
            Not After : Feb  3 18:29:12 2026 GMT
        Subject: CN=391B37DC64B0E07956033F4CCF8B2F78295B7E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f9:50:7d:3a:6a:8b:a3:19:e8:d9:ce:2b:cd:
                    0c:b1:6b:93:d5:c8:56:91:0c:0e:0c:7a:90:ba:16:
                    a8:68:ca:d8:d1:a9:3b:5b:c9:b1:9f:22:73:16:d8:
                    46:2b:ae:73:a8:c9:5d:2a:9c:2e:00:ff:5c:b7:52:
                    d2:6d:d3:a8:71:a9:c1:95:f0:2c:11:c7:3f:eb:35:
                    e5:02:21:a5:77:d1:e3:33:95:86:36:00:91:fa:ea:
                    d2:1a:cb:b9:a8:61:d8:1d:ae:57:50:c9:6c:01:af:
                    ec:9d:c8:dc:cf:bf:76:b7:f2:ae:34:e3:16:32:84:
                    bb:99:ac:78:72:a8:23:97:7f:67:2b:22:cf:b7:29:
                    de:58:5f:72:5d:90:c9:3d:0a:a4:35:f9:40:63:4e:
                    2c:57:4c:c8:cc:51:2f:7a:a6:1f:1b:39:25:68:2a:
                    f8:1d:7d:dd:ed:a4:39:e6:03:b7:aa:72:8a:18:f9:
                    97:47:89:fc:c6:ee:3f:6c:6d:99:8d:20:a8:74:10:
                    f3:d4:8b:a4:84:5d:f0:7c:de:fb:4a:a0:c4:c2:8a:
                    ee:62:27:88:84:fd:79:46:c9:e6:5d:e4:75:48:65:
                    d5:0a:df:9d:f6:96:4b:0b:5e:a1:a2:a4:f7:71:cd:
                    3e:c9:ff:fb:bc:57:37:05:5a:ac:ae:b8:26:39:b1:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1B:37:DC:64:B0:E0:79:56:03:3F:4C:CF:8B:2F:78:29:5B:7E:66
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:1d:2d:c7:27:c1:85:b2:6f:b5:70:3a:98:a6:ed:44:21:
         c0:9d:14:5f:f2:14:4d:82:cc:96:90:04:d5:a3:a7:40:63:ad:
         97:f1:f0:d7:60:c9:89:3e:a7:db:37:90:00:df:42:22:3e:e8:
         ff:b1:cc:5a:cd:35:03:3f:b6:89:90:69:86:83:dc:85:0e:cc:
         80:0b:54:29:5d:12:3a:51:1d:70:54:89:49:98:13:9f:5e:f9:
         22:ca:0f:7b:32:d6:6b:db:43:b3:18:0b:46:90:f8:d1:1e:fe:
         23:45:ac:4a:d2:aa:08:d9:a4:d2:16:72:c5:ff:97:48:f5:18:
         6f:7b:32:65:3e:b4:61:7e:b4:7c:8d:1f:49:64:83:e8:e5:95:
         41:9c:d0:80:a4:70:78:f3:13:be:ce:6e:a4:92:5f:48:70:0d:
         2b:55:a9:bf:c6:f2:3d:70:99:96:74:62:30:fe:74:12:87:f1:
         02:bc:2d:31:56:c0:7e:8e:c0:a1:f3:a6:ed:cf:e4:22:f2:61:
         5d:9a:2e:e9:bc:82:a6:df:4d:46:1f:97:6d:19:dc:a7:93:66:
         07:db:99:80:be:1d:12:b5:84:01:3e:16:88:81:00:a5:09:8c:
         fe:d8:d8:89:7f:4a:7e:53:6a:50:f7:e8:e6:03:4d:c7:92:12:
         68:ee:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:00:25 2025 by rpki-client