Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          daFjJlWq8RBs7L+coSBwcMydFoQb4VuhfwKWNzmnNSs=
Subject key identifier:   9A:2D:0A:6C:46:D1:37:30:32:99:78:7B:FA:E3:EF:18:21:77:A6:45
Certificate issuer:       /CN=F7B07584D2AD2762D747DA517E182FEBEA108A82
Certificate serial:       434F158A3042974581FD80FA9DD9D72AEFFEE0B9
Authority key identifier: F7:B0:75:84:D2:AD:27:62:D7:47:DA:51:7E:18:2F:EB:EA:10:8A:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 19:58:34 +0000
ROA not before:           Tue 04 Feb 2025 19:53:34 +0000
ROA not after:            Tue 03 Feb 2026 19:58:34 +0000
asID:                     61468
IP address blocks:        192.188.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:15:8a:30:42:97:45:81:fd:80:fa:9d:d9:d7:2a:ef:fe:e0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7B07584D2AD2762D747DA517E182FEBEA108A82
        Validity
            Not Before: Feb  4 19:53:34 2025 GMT
            Not After : Feb  3 19:58:34 2026 GMT
        Subject: CN=9A2D0A6C46D137303299787BFAE3EF182177A645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:06:76:75:dc:50:2f:57:04:df:82:63:f4:
                    22:57:96:af:f0:15:e4:11:5f:ec:06:19:0b:7e:73:
                    cc:f3:31:54:b3:ea:ef:1d:ea:05:c9:b9:9e:b5:4d:
                    5e:95:47:5a:25:30:21:a4:cb:52:74:65:93:f1:94:
                    b5:70:77:70:2b:52:a1:b5:db:de:d1:3a:64:b3:25:
                    5b:3c:fe:29:43:90:fd:54:c3:77:96:28:df:c3:70:
                    78:a3:97:d6:05:e4:80:ab:a3:fb:4a:01:12:70:67:
                    23:7a:42:44:9d:f9:15:c6:c6:64:24:4a:d5:0b:d7:
                    ba:87:23:36:b2:ba:c4:32:88:2f:3d:3b:01:b7:d6:
                    ed:0b:90:56:dd:42:8f:05:e9:2a:d2:c0:8e:fd:ae:
                    10:7e:81:7f:b9:8f:73:f6:ae:af:ed:97:d1:99:73:
                    57:1d:18:ff:56:b3:66:12:3a:e3:66:f4:12:9d:47:
                    f6:40:12:5a:4e:34:3c:b7:17:b4:41:40:d8:74:d2:
                    59:57:69:97:7e:8a:77:a0:00:35:36:8e:37:85:8b:
                    2f:e6:cc:7c:7d:3a:3b:b8:ad:92:c7:96:b2:13:2b:
                    39:75:bb:e7:9e:e9:8d:46:de:27:c9:08:74:86:42:
                    01:3b:78:58:df:86:d7:af:8e:f3:96:c5:53:b8:c2:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:0A:6C:46:D1:37:30:32:99:78:7B:FA:E3:EF:18:21:77:A6:45
            X509v3 Authority Key Identifier:
                keyid:F7:B0:75:84:D2:AD:27:62:D7:47:DA:51:7E:18:2F:EB:EA:10:8A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:38:5b:e6:93:92:0e:a5:29:71:01:18:2d:d2:c8:5e:cf:36:
         f0:b4:e1:1a:a6:38:fa:ce:51:f8:78:e5:61:c7:af:8b:8b:f3:
         19:ae:74:ad:58:de:49:d3:a0:bb:54:85:5b:18:7c:ea:a9:5c:
         8c:b1:5c:7a:42:06:5a:23:eb:fb:db:c5:d9:78:ac:0e:4f:39:
         7d:f1:7f:8f:6d:79:fa:c8:0f:d9:8c:f7:b6:41:c3:e6:b4:00:
         45:b6:43:de:cd:23:77:a2:e9:50:c8:51:d5:72:57:2c:2e:95:
         f9:9f:a5:a9:08:ca:27:da:66:5d:3a:8b:d2:fa:03:58:56:4a:
         5e:0a:17:40:0c:11:bb:b5:e1:5f:b2:23:4d:02:2f:87:ca:37:
         de:15:67:e7:3e:8c:03:29:d5:a8:7c:e5:97:9f:35:9f:45:87:
         13:6a:54:2d:e4:4d:ea:73:11:c3:ed:dd:de:eb:c0:4a:50:68:
         68:90:47:65:af:4d:ba:3d:51:b6:dd:a8:18:27:8d:33:6c:a2:
         b9:50:79:ae:f0:bd:dc:8f:da:99:f1:3e:6f:42:a1:16:d4:c6:
         dc:c7:e5:7a:6e:94:be:d0:ad:13:8c:3e:67:bc:1b:7d:34:d3:
         ee:a0:a8:99:2e:29:b1:6f:e0:3d:56:da:78:59:68:2e:8f:d1:
         4c:47:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:41:36 2025 by rpki-client