Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e382e302f32332d3234203d3e203131313732.roa
File:                     3230312e3133392e382e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          vvBQVp8SPghF3Ljh3D9JX1hQezmh27lWRSCTRFS/TJo=
Subject key identifier:   0C:57:3E:9F:46:B3:61:1C:B4:B4:E2:66:8C:5A:53:A8:4D:C7:D3:57
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       5D64E2CBD6DEF5146FE48777F338F25FE60C9F82
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e382e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 03 Jun 2025 21:05:02 +0000
ROA not before:           Tue 03 Jun 2025 21:00:02 +0000
ROA not after:            Tue 02 Jun 2026 21:05:02 +0000
asID:                     11172
IP address blocks:        201.139.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 13:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:64:e2:cb:d6:de:f5:14:6f:e4:87:77:f3:38:f2:5f:e6:0c:9f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: Jun  3 21:00:02 2025 GMT
            Not After : Jun  2 21:05:02 2026 GMT
        Subject: CN=0C573E9F46B3611CB4B4E2668C5A53A84DC7D357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:c0:c0:16:fc:cb:f2:f1:59:c1:e9:a1:4d:
                    87:65:85:1a:bd:83:46:f4:fa:af:95:a2:e1:75:3b:
                    48:ff:ff:83:a0:a4:9e:01:70:f1:20:71:d0:c3:05:
                    c6:35:9c:2c:b8:df:a8:4f:46:5a:a0:60:e3:7c:08:
                    16:a9:26:c5:aa:42:b4:7a:6f:69:a1:9c:6e:c1:d4:
                    85:99:bf:6e:c4:3e:b8:ec:ab:99:b4:a0:59:98:24:
                    4e:a3:59:fa:e0:bf:b8:da:80:1d:f5:7b:38:f3:d3:
                    f8:e1:1f:d4:c6:de:69:c8:a6:3c:b1:bf:4d:c6:7c:
                    15:24:76:84:2a:b6:03:51:79:c3:95:1a:fb:fb:27:
                    ec:67:5d:c5:6d:c8:b8:dd:5c:72:06:04:55:a0:94:
                    1e:05:ff:40:7e:3d:e8:6f:c1:0c:11:d8:94:76:e1:
                    21:f5:94:61:07:14:58:c4:05:cd:7a:57:6f:5b:46:
                    f4:eb:26:ba:09:36:e6:32:be:5b:83:3d:91:95:a3:
                    9b:2f:e6:91:fb:74:b8:f5:c2:04:04:74:b2:97:b3:
                    ad:2b:a8:76:c5:8a:f4:f4:a9:68:f2:9c:43:d7:76:
                    ca:ad:3a:f5:9a:15:b0:f1:e0:a8:e7:6b:b3:04:df:
                    be:46:e5:92:91:f7:da:9c:df:9a:f5:32:31:a8:19:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:3E:9F:46:B3:61:1C:B4:B4:E2:66:8C:5A:53:A8:4D:C7:D3:57
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e382e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:a2:67:e5:2d:de:9f:8b:2b:7c:93:c9:ef:4b:91:67:58:
         89:fb:f5:7e:7e:d2:1b:f5:b9:9f:33:b3:20:11:05:fe:8f:c0:
         7e:1c:b9:d0:40:5a:c2:4d:11:33:b7:a5:49:60:47:56:58:60:
         35:70:dc:da:8e:f9:e0:f0:27:2a:ae:ff:f5:9b:6f:55:03:35:
         2b:ed:c7:ea:51:eb:d6:a4:7a:a9:1b:c6:9f:2e:c4:1a:3f:43:
         60:bd:77:db:12:7c:79:64:87:fc:b9:f5:6e:d3:e0:5f:87:ca:
         ff:d0:52:38:9b:38:d5:1d:3d:38:b4:4f:25:61:67:03:80:fc:
         35:94:ff:5d:85:ca:54:82:63:e8:53:5f:3c:02:4c:ba:41:4c:
         1f:64:c1:38:95:be:3e:85:21:f5:c5:b5:32:fd:e6:7e:99:fb:
         0d:57:c4:04:85:7a:04:6b:5a:f5:80:58:28:f3:c9:49:36:c5:
         ed:68:89:92:ac:2e:b4:90:02:de:9c:0a:e6:a6:d9:90:1f:c8:
         c1:f3:4d:76:0d:e0:49:18:8d:c2:1d:47:40:a2:fd:19:2b:58:
         6d:bf:67:82:fc:86:ec:9d:fb:86:64:bb:13:06:65:54:35:09:
         96:0b:b6:f6:66:72:a2:2a:ce:50:b3:99:5f:4e:0b:64:3c:56:
         16:b5:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:55:56 2025 by rpki-client