Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
File:                     3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa (raw, json)
Hash identifier:          b8YxkqvS07Ug13v89N0G+aLK9LtmW/IuuGlyZaiXJwU=
Subject key identifier:   98:A6:39:AF:E2:0D:9C:9F:7C:F7:A0:05:A0:08:AE:84:55:68:F8:BA
Certificate issuer:       /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial:       57652295356A6312E4DF931A7314311D61A35FC6
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
Signing time:             Tue 04 Feb 2025 20:03:44 +0000
ROA not before:           Tue 04 Feb 2025 19:58:44 +0000
ROA not after:            Tue 03 Feb 2026 20:03:44 +0000
asID:                     262932
IP address blocks:        191.103.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:65:22:95:35:6a:63:12:e4:df:93:1a:73:14:31:1d:61:a3:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
        Validity
            Not Before: Feb  4 19:58:44 2025 GMT
            Not After : Feb  3 20:03:44 2026 GMT
        Subject: CN=98A639AFE20D9C9F7CF7A005A008AE845568F8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:97:7f:f3:dc:8c:90:62:dc:fc:95:bf:8b:
                    6c:1a:ef:f6:55:7f:90:1f:3a:f1:82:dd:24:95:85:
                    b5:22:da:40:59:33:66:7b:fb:94:e8:c7:e7:79:71:
                    13:65:73:53:1a:ad:48:c7:a2:a4:33:7e:6a:f7:ee:
                    53:87:52:b0:f8:80:27:4a:69:7d:a6:b9:1a:c0:e6:
                    0e:e2:5a:b3:b9:c6:cf:c7:ce:ef:4d:12:5d:d2:f2:
                    6a:68:57:89:64:af:70:04:5d:61:dc:ef:89:16:ae:
                    35:e0:90:97:15:f5:7a:b7:16:c0:bc:66:fa:f8:2d:
                    9f:10:80:bc:22:6d:9f:33:5f:3c:0c:18:0b:bf:98:
                    f2:01:fe:18:6b:12:d2:b9:17:28:b1:4b:b5:87:2c:
                    12:70:17:6d:b8:89:90:a7:a2:57:31:be:4b:ac:16:
                    60:01:e9:1b:5f:94:7c:a5:6c:d9:e4:07:cc:64:a3:
                    79:dd:96:8d:f8:dd:36:42:c5:ca:5d:47:1f:b5:31:
                    ed:10:e0:b4:d4:d1:0e:44:cb:b7:87:ee:f4:d3:e5:
                    94:d1:4b:30:00:5b:7a:72:22:14:07:2e:ca:5a:7e:
                    f0:de:51:db:5d:59:da:5f:de:6b:77:03:b1:59:aa:
                    e4:a5:49:d7:dd:85:e2:f7:d8:53:1c:64:bd:c5:ab:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A6:39:AF:E2:0D:9C:9F:7C:F7:A0:05:A0:08:AE:84:55:68:F8:BA
            X509v3 Authority Key Identifier:
                keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:af:4b:1f:b0:13:d8:25:12:dd:7b:e3:98:21:3b:a7:86:
         d7:46:23:49:28:83:0d:47:2a:d0:a7:5e:a4:f3:e1:df:f3:b0:
         fe:6f:ed:6b:fb:98:00:48:90:d6:f2:13:00:78:83:2d:7e:62:
         36:66:a4:8e:d9:f8:b0:22:99:a1:8f:2c:f4:64:85:33:dd:bf:
         5b:77:71:2a:60:6d:23:0c:19:6f:87:e8:ff:79:b6:7d:cf:4d:
         ec:a6:ef:53:bf:73:39:f4:8c:26:35:ac:06:72:e6:61:18:ba:
         03:fa:85:fb:9f:fc:4b:44:db:7c:5b:d1:58:a6:2b:54:14:da:
         3f:76:9a:da:24:b6:27:56:9c:a3:f4:62:78:c8:29:64:9e:1d:
         c3:6b:54:dc:33:75:4f:60:15:99:18:c0:8e:8e:59:96:21:c6:
         47:15:ac:dc:1d:32:86:3d:91:ef:3d:48:64:91:6a:60:6e:64:
         96:1b:69:55:ef:5e:7c:75:8c:0e:93:b0:a5:a7:9d:b2:87:15:
         48:00:bc:17:8d:36:e7:3f:7d:62:f8:09:db:1b:9a:86:92:f9:
         b2:c3:5e:85:f8:c0:bd:92:42:5e:f8:61:d3:15:14:57:c0:a0:
         3f:bc:ed:65:92:09:26:a2:4f:b1:65:6e:b4:76:27:20:30:24:
         86:08:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:39 2025 by rpki-client