Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232382e302f32342d3234203d3e203238353438.roa
File:                     3138392e3230322e3232382e302f32342d3234203d3e203238353438.roa (raw, json)
Hash identifier:          RlaTPA4LHwvVAfDqo+1aBFSvS9Iu15TbAePO+f+3Sso=
Subject key identifier:   A6:72:EF:4B:A5:8E:03:AF:52:B2:D2:E7:26:6E:81:AC:55:C4:9A:0E
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       48E2C997E14EB767F70B1E4475CF2950A5777E96
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232382e302f32342d3234203d3e203238353438.roa
Signing time:             Tue 04 Feb 2025 18:06:46 +0000
ROA not before:           Tue 04 Feb 2025 18:01:46 +0000
ROA not after:            Tue 03 Feb 2026 18:06:46 +0000
asID:                     28548
IP address blocks:        189.202.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e2:c9:97:e1:4e:b7:67:f7:0b:1e:44:75:cf:29:50:a5:77:7e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:46 2025 GMT
            Not After : Feb  3 18:06:46 2026 GMT
        Subject: CN=A672EF4BA58E03AF52B2D2E7266E81AC55C49A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:15:87:fa:50:d8:1b:82:b7:82:41:04:a5:
                    e0:a3:b9:bf:49:10:f2:da:05:72:8f:a5:12:fa:48:
                    1f:3a:11:bc:25:77:58:34:18:a3:80:50:00:58:7b:
                    91:1a:53:b9:e7:1b:59:e4:c1:8d:39:0b:15:7f:b9:
                    e3:bb:bd:24:53:83:31:8e:5d:35:21:d0:c8:6f:aa:
                    ed:25:97:b1:5d:8e:e5:b5:cc:e9:23:d6:0a:e6:dc:
                    49:94:29:71:d4:92:c3:dd:5b:0f:71:0c:2b:5e:1b:
                    81:85:d1:a2:25:3f:24:ee:6d:02:e6:bb:c2:3e:ce:
                    06:8e:21:2d:12:03:e6:b2:64:7b:db:21:8b:52:47:
                    a1:b8:2f:2d:08:08:92:62:7c:7a:c7:89:12:1a:74:
                    2c:17:d8:31:f9:0c:e6:51:b0:0d:10:a7:8d:53:38:
                    58:7f:47:36:df:37:a9:cc:a4:2a:1d:73:b6:3c:57:
                    dd:0a:23:ea:6f:e0:27:ca:bb:46:55:0c:d1:15:6d:
                    4f:7a:9a:b1:f7:bb:86:24:3e:29:f4:ad:30:a8:61:
                    32:d1:65:04:23:c6:ce:79:f2:d4:b2:d2:1e:38:ee:
                    a6:2b:be:53:06:18:96:86:54:43:38:e1:8a:69:ce:
                    05:00:95:2e:06:a3:9a:68:0e:b3:84:d0:6c:bf:20:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:72:EF:4B:A5:8E:03:AF:52:B2:D2:E7:26:6E:81:AC:55:C4:9A:0E
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232382e302f32342d3234203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:0d:74:ad:d3:ee:2b:fc:db:4d:9c:1f:0d:ce:ce:4a:14:
         81:a2:f3:63:62:29:d3:74:dc:d0:38:4f:22:c7:b4:cc:2e:13:
         a9:eb:f3:a2:9a:c8:2f:05:81:03:38:85:0f:64:f0:03:3c:ec:
         7d:98:1a:dc:14:7f:dc:3a:4a:b5:60:01:27:38:e3:da:4c:52:
         ca:7a:da:8b:81:b8:88:23:51:52:9e:13:0e:1f:fd:9e:93:6b:
         81:c6:33:43:b6:f0:f5:19:eb:48:96:6e:b4:58:4f:69:34:68:
         88:f2:d7:af:3f:4d:53:60:95:a8:5d:34:18:0d:c9:50:ec:b6:
         dd:f3:ba:12:d8:0f:d9:02:fc:0d:41:60:31:f1:fd:e8:ec:05:
         8a:26:23:91:d5:ac:84:e2:f8:6d:dc:4b:e8:af:a6:61:fb:1c:
         1e:31:93:a8:dc:b9:41:b7:1c:c0:2d:53:a4:f6:6c:b6:d5:95:
         3d:a2:6f:51:aa:76:d4:20:2e:a1:fc:33:c5:42:8f:af:38:38:
         ff:3c:56:20:ff:99:17:1e:1e:bc:44:2a:98:c3:76:9e:11:36:
         2a:6a:5e:51:48:c0:e4:a3:a3:7e:b4:c9:49:4e:52:ad:e8:08:
         0a:8d:9d:f0:70:f2:d4:59:bb:3a:54:90:4d:43:35:b4:f4:49:
         99:c1:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:57 2025 by rpki-client