Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237383230.roa
File:                     3139322e3138382e35302e302f32342d3234203d3e203237383230.roa (raw, json)
Hash identifier:          U25vViz6qnETacOMllnZBrSF/mTMNQzGsUsUNHgeCnQ=
Subject key identifier:   DE:83:30:01:E0:FB:2C:98:A4:42:5D:B9:08:66:99:83:D2:A5:2E:1F
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       0A6C90805D6CF3408219132B6950F5D7699F84AE
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237383230.roa
Signing time:             Tue 04 Feb 2025 20:02:30 +0000
ROA not before:           Tue 04 Feb 2025 19:57:30 +0000
ROA not after:            Tue 03 Feb 2026 20:02:30 +0000
asID:                     27820
IP address blocks:        192.188.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:90:80:5d:6c:f3:40:82:19:13:2b:69:50:f5:d7:69:9f:84:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Feb  4 19:57:30 2025 GMT
            Not After : Feb  3 20:02:30 2026 GMT
        Subject: CN=DE833001E0FB2C98A4425DB908669983D2A52E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:35:4d:a1:71:f7:04:09:b8:f4:df:26:47:
                    79:25:eb:b7:a5:fc:37:9b:84:92:db:ce:1e:66:a5:
                    92:dc:bd:0e:e7:93:46:5c:76:25:99:39:5b:28:6d:
                    e9:3d:43:1a:da:cf:21:0e:fe:71:61:2e:bc:30:86:
                    d8:18:ed:5b:2e:97:e3:93:60:7d:04:94:31:ca:eb:
                    18:81:18:cc:9a:d0:09:8b:be:47:6c:aa:9b:2a:a4:
                    59:e4:a3:a2:53:c4:12:6b:18:03:74:ed:fb:28:21:
                    53:ac:54:1d:b7:81:f8:3d:a0:2b:d9:ab:77:1d:61:
                    6e:f2:f4:1d:ca:df:54:05:b0:c8:df:7d:99:b0:2b:
                    b6:39:50:e8:7e:0f:5e:10:55:f2:ab:17:2e:ca:53:
                    db:76:ae:38:58:71:d8:06:e2:c5:44:7d:42:0a:85:
                    35:fa:e1:64:ed:32:39:1b:4a:fc:19:57:71:88:e7:
                    b5:67:a6:32:c2:e0:b6:2a:45:c6:4e:67:d7:b4:16:
                    45:24:79:c6:93:09:77:86:1c:a9:bc:96:aa:30:e5:
                    04:ec:6b:cf:b8:f6:b2:ec:b9:c4:62:78:6b:77:42:
                    cf:3e:22:49:a8:de:a0:6d:48:c3:2d:d2:69:ed:4d:
                    1b:e2:b7:cb:8b:fe:a3:8f:22:d8:36:c5:e8:42:13:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:83:30:01:E0:FB:2C:98:A4:42:5D:B9:08:66:99:83:D2:A5:2E:1F
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:83:4d:ed:af:67:1f:62:9d:c2:68:ab:46:93:46:51:82:a1:
         f2:a0:9e:37:b9:67:c9:89:4f:be:d2:44:83:fd:7e:7b:82:0b:
         fd:11:fa:55:7c:2e:b0:3c:f0:3e:99:c9:2c:f9:7c:07:d6:0b:
         2e:24:d6:d8:e2:70:dc:ad:84:de:93:7d:6e:e5:a3:0f:f4:05:
         9e:8c:1e:7b:1c:9f:1f:f5:6d:7e:5b:09:11:cb:9e:6b:e6:1c:
         95:56:28:66:82:5c:98:41:85:f0:9c:44:d7:af:b3:35:b9:85:
         88:f0:a8:59:2e:bf:5d:1b:64:b0:b2:dc:9b:bd:84:94:b4:5a:
         8b:ff:70:15:df:4a:aa:56:d2:54:dc:11:e5:9f:19:63:02:52:
         a2:c4:04:1e:aa:da:12:ec:9b:16:2d:e2:c8:48:a4:f2:6c:a5:
         85:aa:9a:97:92:a0:78:ab:8c:ad:99:13:90:40:7a:79:f0:97:
         93:af:e4:fa:81:00:13:33:71:b8:5e:81:d7:6a:e9:62:0e:3a:
         88:b4:ba:ec:84:d9:b1:e4:ec:70:45:ae:7b:1f:99:fc:3b:ae:
         b4:1a:70:6e:ad:30:48:99:0c:c6:4b:c5:aa:37:92:f0:28:cf:
         c9:13:36:32:87:30:88:aa:9d:03:f5:cc:9f:a2:5d:1c:73:d2:
         6a:34:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:10:47 2025 by rpki-client