Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31342e302f32332d3234203d3e203131313732.roa
File:                     3230312e3133392e31342e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          QypBLhuysY4ccDpQQpUaYGSzE3meiaR4ig+SMq3XfqU=
Subject key identifier:   FE:12:2E:01:A1:5B:91:05:E5:45:A6:16:27:21:B4:69:CC:7B:21:38
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       7EBA491AD63856029AA8C51E7C6B3EEEB022692A
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31342e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 03 Jun 2025 21:05:00 +0000
ROA not before:           Tue 03 Jun 2025 21:00:00 +0000
ROA not after:            Tue 02 Jun 2026 21:05:00 +0000
asID:                     11172
IP address blocks:        201.139.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:49:1a:d6:38:56:02:9a:a8:c5:1e:7c:6b:3e:ee:b0:22:69:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: Jun  3 21:00:00 2025 GMT
            Not After : Jun  2 21:05:00 2026 GMT
        Subject: CN=FE122E01A15B9105E545A6162721B469CC7B2138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:2f:ca:a4:72:a7:a2:30:f5:6b:0e:45:a5:
                    0f:c2:3f:50:d4:8e:e0:fd:56:b1:1d:0f:bb:d3:63:
                    6f:ac:eb:91:f1:da:08:e6:93:0a:e0:cb:97:5f:dd:
                    96:57:bd:6d:62:81:5b:9d:d5:32:a9:be:97:ef:38:
                    7e:f3:cb:d0:60:08:6a:70:15:68:ae:22:62:0b:93:
                    70:03:36:19:a6:06:91:53:40:96:b0:c1:31:f1:b8:
                    20:ce:a4:d1:8a:71:3b:6a:d3:8a:9e:d2:b8:fc:e9:
                    a4:04:50:85:ed:fc:04:13:77:9d:b8:7b:d5:c6:82:
                    df:92:19:1d:c5:7c:81:80:47:8e:e5:11:f5:53:cc:
                    3c:48:d7:df:49:63:84:5a:13:96:d9:43:32:21:e7:
                    da:60:65:74:d3:fc:09:9e:82:25:23:3b:e2:f2:42:
                    01:d0:df:7b:4f:5a:10:7d:52:07:d6:da:71:77:4b:
                    fc:2d:ba:e4:7e:6d:67:86:6d:67:80:b5:43:be:bc:
                    14:c5:45:15:fd:a8:c8:c7:a5:89:9b:88:47:8a:14:
                    1d:bf:36:18:81:57:5e:36:39:6d:88:6a:5a:a7:0d:
                    59:5f:d7:bb:a0:3c:e3:a8:e7:3b:9e:f1:2c:52:80:
                    d5:a6:d8:12:26:b3:0f:d2:77:ec:26:d2:4f:60:c1:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:12:2E:01:A1:5B:91:05:E5:45:A6:16:27:21:B4:69:CC:7B:21:38
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31342e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:9c:4b:08:ab:fd:ba:fd:cc:1e:ca:0e:3c:87:d1:96:86:
         54:9c:80:e6:e8:ac:db:51:fb:3b:e8:39:b8:53:50:0f:7a:b4:
         89:60:6a:a2:53:0b:70:a6:b7:6b:35:bd:86:62:bb:c3:6e:90:
         68:92:b7:ea:2c:4d:9a:21:72:1c:f7:d3:f0:27:72:86:a4:d6:
         94:be:14:99:57:10:1f:60:50:d1:a5:29:46:50:29:57:05:a5:
         dc:24:18:b3:b4:e8:1d:f7:c4:a0:d5:d0:b3:31:ab:5f:a6:4a:
         c6:03:2a:e4:37:74:96:81:e6:93:5e:d7:1b:c3:aa:72:57:b7:
         2a:65:45:f9:f6:5c:b0:90:a0:8d:0e:70:2f:aa:9d:c8:e2:cd:
         e5:81:9f:84:09:54:02:0a:33:3a:76:05:85:ba:de:b3:a4:4b:
         be:da:18:32:32:64:b7:1e:fe:03:96:13:b3:c0:76:af:9c:34:
         e4:a2:2d:81:a7:07:9a:a6:4a:d7:5f:85:6e:d6:01:e7:13:7c:
         ea:82:61:9f:2c:d8:01:17:e5:90:6f:14:b8:74:5a:27:e6:77:
         79:29:57:1a:50:87:4c:7d:b8:e6:bd:29:59:1b:e6:f3:24:c0:
         cd:f7:c6:08:ca:32:a9:69:61:b6:be:5e:a9:ba:55:cc:2f:4b:
         f4:9d:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:02:32 2025 by rpki-client