Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/3139322e3138382e34362e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e34362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          o52A1r/T2AYXJVsRACSNtUTYcObkbGGaoCg3MMdkLo8=
Subject key identifier:   39:CD:F8:AA:4C:07:4E:31:08:C1:A8:BC:58:31:3C:E7:EB:D9:87:72
Certificate issuer:       /CN=1788C398CC377559137DDB0CDB593589C2A693CA
Certificate serial:       0C4270413489163A9625173966D9BC0133F3CB29
Authority key identifier: 17:88:C3:98:CC:37:75:59:13:7D:DB:0C:DB:59:35:89:C2:A6:93:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1788C398CC377559137DDB0CDB593589C2A693CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/3139322e3138382e34362e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:08:36 +0000
ROA not before:           Tue 04 Feb 2025 18:03:36 +0000
ROA not after:            Tue 03 Feb 2026 18:08:36 +0000
asID:                     27947
IP address blocks:        192.188.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/1788C398CC377559137DDB0CDB593589C2A693CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/1788C398CC377559137DDB0CDB593589C2A693CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1788C398CC377559137DDB0CDB593589C2A693CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:70:41:34:89:16:3a:96:25:17:39:66:d9:bc:01:33:f3:cb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788C398CC377559137DDB0CDB593589C2A693CA
        Validity
            Not Before: Feb  4 18:03:36 2025 GMT
            Not After : Feb  3 18:08:36 2026 GMT
        Subject: CN=39CDF8AA4C074E3108C1A8BC58313CE7EBD98772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:21:cc:e8:ae:01:51:50:a1:ae:7f:18:c3:
                    da:2b:a1:6f:ec:a5:5b:70:65:08:61:b4:29:fa:43:
                    bd:1d:7e:c9:eb:af:8f:d4:6b:fc:3b:89:f6:87:1f:
                    e5:fd:cc:45:74:56:f3:d2:67:70:50:12:f3:44:f8:
                    8c:b5:1a:84:b2:d6:1e:d1:de:68:76:77:0c:15:1a:
                    da:20:5f:4e:fe:ae:fa:5b:4d:03:5c:9b:5b:df:c7:
                    71:18:e2:11:17:d8:b3:dc:61:17:40:7b:43:16:50:
                    b9:5d:30:83:ff:9e:e8:99:0a:b6:96:a6:58:79:57:
                    84:9b:09:57:be:6c:6a:d9:7a:1a:a3:c5:c5:81:ab:
                    ff:e0:84:bb:4f:62:e3:70:29:15:a7:15:11:89:84:
                    35:6e:3f:09:bd:45:ee:7f:63:96:d3:e7:29:97:8f:
                    f4:7d:10:3d:e5:11:1c:a1:2d:33:a7:21:9f:3c:b9:
                    af:da:f5:61:6a:cc:c1:f7:11:cc:c0:e2:ce:a5:2c:
                    1f:5a:ff:26:c1:7c:fe:26:48:4c:26:34:3f:d5:c2:
                    ad:56:d6:b1:06:86:f3:00:27:f0:25:b5:1a:80:21:
                    8c:54:37:ba:63:d0:9d:5e:5e:52:05:9c:16:3e:94:
                    f9:65:2e:2f:96:48:a4:b9:ea:81:f2:d6:1e:34:a6:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CD:F8:AA:4C:07:4E:31:08:C1:A8:BC:58:31:3C:E7:EB:D9:87:72
            X509v3 Authority Key Identifier:
                keyid:17:88:C3:98:CC:37:75:59:13:7D:DB:0C:DB:59:35:89:C2:A6:93:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/1788C398CC377559137DDB0CDB593589C2A693CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1788C398CC377559137DDB0CDB593589C2A693CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/3139322e3138382e34362e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:96:d6:ed:42:60:cb:95:4e:a9:23:f2:38:78:30:35:38:51:
         7f:02:30:63:42:62:e0:f2:6a:52:62:00:ba:cf:e2:14:49:5d:
         0e:8d:c1:c7:d9:a3:b7:ae:3f:3d:58:66:6a:e4:41:89:09:1c:
         a2:87:e8:f2:e6:5b:eb:be:a1:74:25:36:5d:33:f7:28:f8:11:
         b5:6f:03:53:51:bf:d0:d7:80:83:23:52:52:09:80:68:5a:6c:
         dc:41:bd:08:da:d8:bf:8d:ef:92:e6:9f:e3:c2:65:ff:05:51:
         e3:a8:4c:4b:e3:f9:b1:97:4c:c1:29:49:b9:ed:09:21:38:65:
         59:ce:9b:eb:c7:7a:22:61:ab:52:6f:4e:fe:25:e3:d2:fa:20:
         cd:91:4e:1b:4a:a6:9a:68:ab:2c:b2:96:4e:0d:dd:fb:ae:1c:
         cb:69:7e:a9:d4:0a:e0:34:65:34:c8:13:2b:8f:1f:9f:c2:7c:
         b0:e1:c3:00:b3:4d:af:cf:2e:02:90:70:ae:f8:54:22:6f:2f:
         c5:ba:3a:4d:07:30:70:23:3c:14:44:c4:51:31:3c:58:66:40:
         7d:94:13:d0:6a:a9:d5:8b:53:bf:7a:ae:df:a1:2f:db:8d:12:
         d8:d3:14:17:7c:6a:3b:05:da:85:3d:8f:8d:b4:71:f1:34:a3:
         d8:35:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:55 2025 by rpki-client