Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232392e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3232392e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          maj5JVV9NZPtaHfKE+0BPqwR5ts4wKgHs09LGli5ENQ=
Subject key identifier:   5E:D8:DA:B0:09:5F:C5:C2:B6:45:03:57:D8:87:71:65:4F:B9:84:CD
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       7510A6B2CA381712D050D5A0B5531C84C1C02421
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232392e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:49 +0000
ROA not before:           Tue 04 Feb 2025 18:01:49 +0000
ROA not after:            Tue 03 Feb 2026 18:06:49 +0000
asID:                     18734
IP address blocks:        189.202.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:10:a6:b2:ca:38:17:12:d0:50:d5:a0:b5:53:1c:84:c1:c0:24:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:49 2025 GMT
            Not After : Feb  3 18:06:49 2026 GMT
        Subject: CN=5ED8DAB0095FC5C2B6450357D88771654FB984CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:a6:ee:3a:ff:31:45:d7:c0:ed:72:da:31:
                    83:69:c8:cc:d0:51:da:40:b9:c6:d7:8f:e7:b2:2c:
                    26:4c:d1:d1:3f:05:6d:74:b5:1f:80:4b:9c:2c:f0:
                    06:54:b3:ab:21:d4:74:01:5b:a7:e0:d2:06:8e:81:
                    40:b8:8d:46:49:12:37:42:ad:32:39:fc:fc:1e:bd:
                    92:f7:ca:76:68:57:38:35:d4:82:1c:03:d0:70:48:
                    e3:5b:c9:1f:39:c8:ec:a4:73:1f:f2:4e:f9:02:16:
                    a8:fa:2f:1a:7c:2b:1a:fc:9c:4a:b7:b3:15:5f:ed:
                    57:92:dc:d9:f7:1d:01:04:bd:5b:5c:66:7d:d9:6f:
                    46:6e:14:c4:f7:90:37:b1:8a:c1:1a:45:a3:e9:b0:
                    f9:9f:ae:3a:b1:33:6a:45:3d:a8:6e:0c:90:1c:ac:
                    da:a7:d5:08:ba:f1:60:36:27:70:29:da:14:b8:a3:
                    a4:8d:c5:c8:66:e0:1d:53:bc:23:e6:16:f9:98:7e:
                    4d:7d:11:0a:ad:70:b8:8f:8d:a9:8e:cc:ef:df:0d:
                    9c:df:9d:f3:d8:8f:9b:2f:30:c1:7b:3f:de:bb:47:
                    7f:25:47:90:67:6d:44:cd:32:1f:2f:af:84:67:88:
                    b5:59:e4:bd:74:98:e1:9b:de:fa:65:9e:34:dc:b5:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D8:DA:B0:09:5F:C5:C2:B6:45:03:57:D8:87:71:65:4F:B9:84:CD
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232392e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:af:53:67:b3:10:5b:84:37:82:99:2a:53:67:f4:ce:40:81:
         15:0e:1f:c3:30:03:60:c9:58:cf:f7:8c:35:28:bf:47:4c:e6:
         f7:0b:6f:57:3c:80:44:1a:de:99:89:c7:89:91:0b:c2:a3:2b:
         c8:7f:09:68:70:2f:1c:5e:25:7c:cd:72:7f:aa:9e:8b:ec:3c:
         31:e4:ae:97:bd:52:d0:51:19:99:2f:06:9a:e9:d7:8d:32:ae:
         02:77:fb:e3:21:0a:2a:8d:89:aa:fe:c8:6c:3b:93:50:19:e3:
         7b:5b:2d:a4:bc:fa:55:eb:92:85:86:7f:3c:e8:9f:57:f5:eb:
         47:f1:08:57:54:12:98:6f:21:df:c1:02:a0:c2:65:f3:6a:30:
         9b:f7:8b:dc:96:3d:40:27:43:93:97:35:91:db:a9:e2:71:c9:
         63:ba:ba:c5:cc:68:12:c5:38:24:88:e2:d7:0d:6c:7c:be:21:
         14:47:b0:85:7e:e7:17:37:21:fe:66:9e:2a:b2:39:82:36:f8:
         37:76:5b:fb:78:67:2a:ae:c1:6e:b2:2f:0c:c7:f8:95:46:ac:
         9a:1f:75:2c:cc:01:e4:51:61:73:9e:a7:af:51:ae:7a:3c:5a:
         02:55:bb:6c:ad:f9:68:e3:c9:3d:10:45:6c:42:59:25:dd:14:
         05:91:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:13 2025 by rpki-client