Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa
File:                     3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa (raw, json)
Hash identifier:          ezkG22J89VvNvQ2p3Oe2QGQejtWta9WYDGETlfRRZbU=
Subject key identifier:   9A:FD:51:CE:20:07:FF:88:AA:94:4F:39:46:8C:02:8E:4F:4D:7F:99
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       34B2864134D4B08D3F4711EA39D193E5A6A08479
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa
Signing time:             Tue 04 Feb 2025 18:06:47 +0000
ROA not before:           Tue 04 Feb 2025 18:01:47 +0000
ROA not after:            Tue 03 Feb 2026 18:06:47 +0000
asID:                     28548
IP address blocks:        189.202.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 14:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b2:86:41:34:d4:b0:8d:3f:47:11:ea:39:d1:93:e5:a6:a0:84:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:47 2025 GMT
            Not After : Feb  3 18:06:47 2026 GMT
        Subject: CN=9AFD51CE2007FF88AA944F39468C028E4F4D7F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:73:eb:0f:5b:7a:bb:82:f7:60:7f:1f:be:64:
                    e9:6e:be:86:9e:1d:31:fe:5c:7f:2d:16:36:bb:6b:
                    f0:94:20:03:54:35:93:c6:f4:00:00:f1:b2:71:e9:
                    13:d4:cb:2a:83:97:9c:e0:af:61:c4:64:29:fb:0d:
                    c7:5b:0b:ca:c4:b1:18:a2:2d:a3:8b:13:e6:cc:d4:
                    0c:8f:25:48:ca:90:44:cf:03:d5:2b:3b:6d:69:68:
                    d9:49:69:90:73:62:27:0d:9e:41:d0:c9:33:b5:c8:
                    12:79:86:bc:4e:a4:2c:56:b6:a9:8c:d2:b0:c9:a7:
                    87:11:0d:07:56:38:94:33:35:41:c6:78:18:ac:85:
                    8d:4c:03:92:44:f4:31:d2:dd:73:81:26:86:8e:fd:
                    02:56:9a:47:a8:27:41:4c:74:07:fe:70:8c:d9:c6:
                    d6:00:69:14:4a:aa:f8:51:81:dd:17:d0:22:32:8b:
                    f9:85:1f:d4:62:c9:a3:9c:88:5b:87:c7:ba:74:a2:
                    55:00:3f:d1:7e:45:80:b9:a7:2e:43:ee:83:8a:ed:
                    cd:81:4f:7c:b7:b8:2a:6d:a6:c8:61:3f:69:0b:b6:
                    8c:63:3a:3a:44:8d:bf:95:b2:2e:3f:35:27:bb:59:
                    08:37:1f:26:17:e2:b1:19:d9:8e:eb:7f:1b:82:e1:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FD:51:CE:20:07:FF:88:AA:94:4F:39:46:8C:02:8E:4F:4D:7F:99
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:80:a2:39:71:19:fe:a8:f5:99:cf:70:87:28:a3:db:2d:63:
         d9:4b:5b:d7:fe:b0:07:71:cd:5f:44:31:9d:06:da:2f:02:b1:
         b0:d5:b4:da:4a:c9:b8:f7:6f:93:bf:47:22:11:82:5b:4b:fd:
         94:22:ba:11:db:aa:6c:b9:db:07:f3:81:56:23:d6:85:a8:cc:
         e5:35:96:f6:70:82:32:bd:4b:0b:f9:44:76:38:5d:93:f9:74:
         76:14:be:f1:50:7c:3f:29:0e:e3:bb:b8:60:8d:dc:bc:4a:d7:
         ce:3d:a1:85:6f:a1:a1:0a:01:28:40:6d:d3:de:e8:a2:f6:ca:
         18:36:72:6c:90:c2:15:6a:d3:90:cd:dc:14:e8:43:9c:01:69:
         b6:c9:08:cd:75:48:03:1f:96:d0:c0:26:bb:0b:c2:a4:87:82:
         ce:e6:b5:98:8a:a7:da:46:31:22:c6:c7:82:05:39:2f:0a:67:
         19:16:4e:14:e6:53:15:cf:9c:87:23:de:52:21:64:4f:65:c1:
         1c:15:64:a4:49:f1:31:3d:ef:3a:b6:c4:65:00:16:a6:4d:de:
         97:1b:cb:4e:2e:f3:b0:87:e1:1e:80:3c:87:83:31:b0:37:38:
         b3:2a:bb:91:c5:2d:90:1a:5a:23:f7:cb:a6:8c:98:b5:94:8e:
         85:14:ce:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:00:58 2025 by rpki-client