Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3139312e39382e3230302e302f32312d3234203d3e203532343339.roa
File:                     3139312e39382e3230302e302f32312d3234203d3e203532343339.roa (raw, json)
Hash identifier:          egh6iNATScJDT+VkU5MbeqF4WHNoasQvX62RnNEobKg=
Subject key identifier:   01:04:E8:73:18:BF:5D:4D:75:57:98:4D:8A:7C:EC:DA:F4:27:57:D8
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       7356773FC21DAB4E3289C104C1774B2C4CDF20EB
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3139312e39382e3230302e302f32312d3234203d3e203532343339.roa
Signing time:             Tue 04 Feb 2025 18:48:13 +0000
ROA not before:           Tue 04 Feb 2025 18:43:13 +0000
ROA not after:            Tue 03 Feb 2026 18:48:13 +0000
asID:                     52439
IP address blocks:        191.98.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:77:3f:c2:1d:ab:4e:32:89:c1:04:c1:77:4b:2c:4c:df:20:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Feb  4 18:43:13 2025 GMT
            Not After : Feb  3 18:48:13 2026 GMT
        Subject: CN=0104E87318BF5D4D7557984D8A7CECDAF42757D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:27:c5:f3:14:8a:ef:cf:fa:b6:43:34:2c:
                    b8:5f:1c:db:b5:e8:cf:8b:1b:53:fc:72:f2:31:16:
                    3e:ea:7a:aa:db:40:ed:d8:1a:a6:04:b1:82:a0:0b:
                    59:4c:f9:45:82:f9:28:3c:8b:60:96:8e:92:30:06:
                    f7:57:34:80:12:22:9b:65:a5:98:72:43:a8:93:e4:
                    cb:5c:bd:71:58:28:09:b8:e2:76:ce:88:f8:d3:44:
                    4e:36:ef:53:7d:4f:48:1c:be:48:7d:36:b4:d7:58:
                    2c:79:78:c3:1e:5d:71:3f:13:3d:56:cc:37:a4:cb:
                    ac:f2:b4:48:49:ab:67:6f:d6:51:e2:0a:96:bf:e8:
                    99:ca:60:fb:0a:4d:fa:1a:4d:69:ae:41:21:77:3c:
                    50:66:04:a5:0d:67:6b:b2:06:7e:d6:bb:5a:f1:d4:
                    78:46:29:1f:4c:0a:65:a6:d5:11:9e:77:67:8c:b2:
                    3c:1e:6a:d9:76:c4:cd:c1:a0:1d:2d:1b:8a:52:87:
                    1f:80:94:21:90:4c:ef:dd:9f:88:0b:4a:7e:ca:2c:
                    1a:5f:71:b7:b1:b0:04:10:0f:0b:3d:c5:e2:c7:bc:
                    c5:d7:0b:8d:05:31:af:99:9b:a3:74:30:b1:5b:b6:
                    11:d7:aa:15:cd:1c:91:15:84:85:84:7e:2b:ef:0a:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:E8:73:18:BF:5D:4D:75:57:98:4D:8A:7C:EC:DA:F4:27:57:D8
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3139312e39382e3230302e302f32312d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:32:f9:75:39:1f:5a:97:e9:17:5e:fa:af:17:24:62:47:61:
         3f:1c:93:01:0d:be:ce:2e:1c:c0:68:b8:08:b2:44:84:2c:80:
         ab:27:9e:d2:9a:78:36:3f:35:1f:63:28:fc:97:6a:da:06:67:
         04:4a:12:3f:1e:bc:76:17:c6:74:1f:cf:c3:50:d2:6a:54:09:
         fb:96:4e:31:fb:68:24:d1:68:24:bc:92:d4:a5:2f:db:9a:c4:
         bd:8f:a7:9a:28:8e:89:42:81:53:ec:b7:94:64:f4:b3:79:a8:
         f0:24:c8:25:4e:d7:7d:4f:9c:4f:10:fd:1b:13:c1:4a:4b:d4:
         9a:35:02:e7:52:3d:f0:8c:0c:ea:3b:c4:ae:e4:6f:9b:84:39:
         2b:3c:93:b2:ba:eb:2d:da:b7:35:1c:db:0b:b2:f2:3a:6c:12:
         f8:37:1e:bc:66:4f:42:6a:9e:22:62:e3:03:99:dc:52:a7:58:
         1c:cd:38:a0:6d:89:c2:ff:46:83:46:24:bb:ce:62:3d:06:8c:
         1f:aa:79:d4:98:1d:a1:86:7c:a5:92:f9:2f:6b:83:35:fd:32:
         6d:e7:c1:30:c1:a7:b9:a5:29:c0:60:a7:b4:3d:d1:68:1f:e2:
         68:8e:2f:70:50:7e:66:15:01:5a:68:38:0a:08:24:52:a5:1e:
         34:9e:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:42 2025 by rpki-client