Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa
File:                     3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa (raw, json)
Hash identifier:          wkLvUdFcHRDtq+AprdgKUhVzO9p8+REYkPdnfhQh0Cs=
Subject key identifier:   A9:C7:E0:40:BE:05:7C:75:B4:57:14:22:6D:27:93:E5:3A:D3:D1:90
Certificate issuer:       /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial:       7FD396F873F07CB36A0DF0FAA3C448317FD66736
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa
Signing time:             Tue 04 Feb 2025 18:23:19 +0000
ROA not before:           Tue 04 Feb 2025 18:18:19 +0000
ROA not after:            Tue 03 Feb 2026 18:23:19 +0000
asID:                     265762
IP address blocks:        128.201.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d3:96:f8:73:f0:7c:b3:6a:0d:f0:fa:a3:c4:48:31:7f:d6:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
        Validity
            Not Before: Feb  4 18:18:19 2025 GMT
            Not After : Feb  3 18:23:19 2026 GMT
        Subject: CN=A9C7E040BE057C75B45714226D2793E53AD3D190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:c4:b6:6e:39:e2:25:de:9f:aa:d5:3d:d2:
                    5c:b4:c9:45:03:1e:88:37:c6:f6:da:15:8f:19:d6:
                    f9:49:30:1a:df:4f:96:32:32:54:36:bc:83:12:ba:
                    47:a6:8b:8e:f5:ea:67:75:4e:f1:9e:1f:9d:da:1a:
                    63:0b:d5:dd:9c:d2:43:cb:24:9d:09:a3:61:c4:3c:
                    59:9b:08:00:08:74:cc:90:15:74:a8:23:d2:97:42:
                    eb:8a:99:9f:32:69:54:f0:a1:68:a8:64:00:7c:7f:
                    e2:1f:b1:16:33:a5:da:9b:a0:0e:cf:0d:ed:3f:ce:
                    78:d2:77:ab:0f:e1:a3:c5:df:45:da:60:8a:43:be:
                    cf:4b:c1:c4:c6:93:46:bd:b2:c1:b2:ed:7f:4b:7a:
                    66:d1:9f:61:32:45:f3:7e:01:f0:a6:c5:3d:92:7a:
                    d7:a8:52:83:3f:3c:6e:f0:0a:f0:cf:24:f8:ff:c9:
                    1e:51:d4:76:28:72:30:18:a2:c5:b5:fc:18:e0:8c:
                    30:58:2b:64:9e:bb:40:19:02:a0:4b:3b:57:56:4b:
                    95:01:67:2c:d3:0e:98:2c:9f:7f:9e:30:c1:19:fc:
                    24:92:17:79:2e:82:40:48:d5:06:aa:a0:c8:08:38:
                    b1:5c:ee:70:30:63:4e:c9:63:c6:b0:2f:e3:00:0c:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:E0:40:BE:05:7C:75:B4:57:14:22:6D:27:93:E5:3A:D3:D1:90
            X509v3 Authority Key Identifier:
                keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:50:20:ef:3d:bb:30:96:72:50:bf:6a:d8:75:4a:ea:0a:0b:
         af:c7:e5:d5:19:e2:80:05:d4:b1:2f:c0:56:69:d1:5e:00:f0:
         61:df:e7:78:af:3d:18:4c:52:7d:3b:8e:61:79:d1:a4:d3:be:
         42:e8:77:6d:20:1c:ad:78:dc:14:43:a4:51:d8:61:84:8e:eb:
         e5:c5:7f:74:a2:6c:4e:72:38:21:e0:6a:fa:ba:8c:c1:5c:45:
         d4:82:94:d8:8f:8c:a5:e9:3a:e8:1d:e1:f0:09:0f:96:24:f9:
         b8:5d:83:1c:e5:56:78:6f:8a:3c:02:b0:87:55:33:47:2b:fc:
         e2:7c:c5:6a:ac:f9:04:b5:32:b9:97:ac:75:76:a0:28:67:e6:
         e7:d7:ed:06:48:32:6c:01:85:8f:28:92:b4:8e:ba:3a:f7:12:
         54:3d:9f:5d:5f:1b:ed:20:79:3a:f3:5b:43:96:28:ae:c7:34:
         45:8c:32:da:5a:62:6f:10:d6:fb:4f:51:66:31:e3:e6:09:ee:
         ef:d3:48:a4:8b:12:34:07:76:5a:7f:fc:e0:27:fc:d8:0e:2e:
         b7:ea:80:50:d7:1e:a8:ae:83:7e:79:a7:97:06:e6:c9:c5:79:
         ae:d8:e2:79:b4:f7:4b:50:81:c2:51:99:69:5a:9a:e9:43:db:
         e3:6e:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:51 2025 by rpki-client