Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS3905.roa
File:                     AS3905.roa (raw, json)
Hash identifier:          IEodOgN8NHh2LRpDANmDPBetAVb1ECBoqtdkNpMmbUY=
Subject key identifier:   ED:18:01:95:4D:4F:5A:F8:8F:3A:D4:C2:E5:67:84:27:06:08:4B:74
Certificate issuer:       /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial:       6CBB3B65FE23A258293A3071090B61E0A1A77158
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS3905.roa
Signing time:             Tue 04 Feb 2025 18:27:43 +0000
ROA not before:           Tue 04 Feb 2025 18:22:43 +0000
ROA not after:            Tue 03 Feb 2026 18:27:43 +0000
asID:                     3905
IP address blocks:        189.247.131.0/24 maxlen: 24
                          189.254.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bb:3b:65:fe:23:a2:58:29:3a:30:71:09:0b:61:e0:a1:a7:71:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
        Validity
            Not Before: Feb  4 18:22:43 2025 GMT
            Not After : Feb  3 18:27:43 2026 GMT
        Subject: CN=ED1801954D4F5AF88F3AD4C2E567842706084B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:ae:74:5d:ad:f2:70:7e:05:ab:75:54:f4:
                    ad:37:20:87:a6:6d:b7:4b:34:c5:13:86:93:f7:43:
                    db:2c:69:0c:ec:a5:8a:29:da:48:28:e9:ac:65:82:
                    8f:25:f0:b0:22:6f:13:3d:99:8a:e2:bf:67:46:d0:
                    e0:d9:ad:a9:67:99:af:6b:c4:ca:49:f4:f4:f4:a5:
                    0b:13:ce:f1:bf:6c:e1:aa:a5:86:a6:ab:58:7e:d9:
                    ea:72:fe:94:1a:51:f6:55:c5:3b:fc:9f:bc:a5:9e:
                    1c:61:46:b3:83:3f:af:72:78:d3:f5:65:0a:1a:a7:
                    d4:e1:3c:2c:93:ed:71:e0:c5:71:e9:1f:4e:63:77:
                    4f:3a:03:e0:75:b6:b0:4a:71:d3:f1:b4:a2:a2:98:
                    9d:2c:52:2b:c8:97:9a:86:92:f5:6b:90:7d:9a:71:
                    4d:1d:86:0b:00:66:42:84:99:e4:8b:35:f4:0d:c7:
                    51:c7:af:a0:3d:c1:7f:11:64:f5:ab:33:31:ba:23:
                    ff:79:83:b7:dd:0a:27:95:bd:e1:99:d2:72:08:01:
                    39:34:80:cf:5a:f8:55:38:6a:5e:89:f2:f6:6a:57:
                    12:49:cf:21:95:d6:4b:89:62:47:fb:f0:d4:37:ea:
                    68:e8:e2:00:7d:07:16:20:8c:28:3d:d1:aa:65:92:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:18:01:95:4D:4F:5A:F8:8F:3A:D4:C2:E5:67:84:27:06:08:4B:74
            X509v3 Authority Key Identifier:
                keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS3905.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.247.131.0/24
                  189.254.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:c5:99:9c:71:c7:54:19:9d:f9:f9:7a:34:fc:d9:63:02:
         69:a4:b2:d2:1b:c0:b7:f3:9a:73:6f:6c:56:67:2a:fe:b2:ab:
         8b:09:16:80:f0:15:51:47:b6:9d:d9:02:0a:65:7e:d2:62:cc:
         88:05:da:e7:04:ee:97:e1:0e:30:40:08:d4:74:0c:b0:8c:72:
         65:5b:9c:95:5a:9a:ec:48:bf:a1:55:79:ac:8e:90:0e:93:f0:
         64:e8:ff:cd:77:3f:75:e3:d6:6e:b6:b8:c7:4d:66:e7:77:bf:
         7f:7d:d6:b9:44:7c:e0:92:7c:02:85:62:1c:ec:20:ee:6e:8d:
         ac:b6:a9:09:50:c6:6d:cf:a5:b9:f0:46:98:0b:e9:0b:d7:ca:
         36:58:20:4f:b1:16:51:73:96:ab:6b:69:35:a8:dc:85:c5:b7:
         5f:51:94:f0:5f:f5:89:36:35:53:55:74:ab:4a:ca:20:c8:b5:
         f3:b6:85:ef:e2:15:a7:2f:34:5b:97:57:7a:a7:80:6d:0d:48:
         30:2d:d8:0b:b9:a8:b8:95:ed:06:49:82:21:4f:0b:28:08:51:
         95:a7:9a:a1:de:cf:90:9f:23:41:6b:f7:b2:4d:e5:5a:dd:d4:
         26:c5:52:a1:70:3f:6a:ef:84:9e:98:7c:d0:02:9f:d1:74:5e:
         22:ce:4e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:17 2025 by rpki-client