Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
File:                     3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier:          kKUBwkJ+BWPujWt865GWLwzL+bWkWpX0RyQPTZAHCCM=
Subject key identifier:   F9:45:AD:67:2F:40:9F:BA:C9:37:90:94:70:8F:45:05:61:BD:88:EB
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       5B6E17F3390757A6F29BCBADBCE0F85A9B33D4E6
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:42 +0000
ROA not before:           Tue 04 Feb 2025 18:01:42 +0000
ROA not after:            Tue 03 Feb 2026 18:06:42 +0000
asID:                     18734
IP address blocks:        189.204.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:17:f3:39:07:57:a6:f2:9b:cb:ad:bc:e0:f8:5a:9b:33:d4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:42 2025 GMT
            Not After : Feb  3 18:06:42 2026 GMT
        Subject: CN=F945AD672F409FBAC9379094708F450561BD88EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:10:c3:55:c0:2e:b8:6d:a4:39:67:6b:19:
                    81:7e:92:28:04:87:8a:f3:c6:58:a2:e0:59:b9:2a:
                    87:a8:ff:57:06:aa:df:0d:71:81:c2:8d:f7:dd:07:
                    69:93:a3:1a:a0:48:17:7f:f0:c3:8f:54:b7:a2:49:
                    2f:1c:49:6e:1e:d0:ef:81:44:ad:63:5e:fa:20:be:
                    73:c4:18:38:fe:36:7a:65:ac:e9:1c:f1:07:21:c0:
                    cf:af:98:28:2b:25:cc:8a:57:6b:13:32:ce:59:ae:
                    9f:77:5c:4e:05:4d:3f:21:e6:dc:58:65:14:3c:c9:
                    fb:0f:62:47:7a:a3:f5:bf:4b:88:5d:5d:63:ea:42:
                    7f:72:18:4f:72:64:ac:cb:0d:95:74:34:d2:a0:5a:
                    d0:e4:52:a7:59:66:8f:e4:b0:93:94:1b:02:54:f0:
                    30:3c:24:f7:32:4a:43:94:d8:da:83:b9:ed:1a:27:
                    7c:7e:6b:bd:7e:32:5b:7b:85:b6:0c:a4:86:eb:71:
                    8e:6e:29:06:ef:72:54:60:84:03:a7:c5:c3:33:be:
                    7d:ae:3f:0b:09:05:4c:14:34:ee:b1:64:fd:30:c3:
                    74:42:d1:ad:67:c9:99:c7:7c:52:44:15:f8:13:ab:
                    31:bf:cf:6e:4b:a7:1e:d3:c6:94:4a:f8:b2:47:3a:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:AD:67:2F:40:9F:BA:C9:37:90:94:70:8F:45:05:61:BD:88:EB
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:11:6e:08:c8:a5:a7:63:15:4c:cb:13:89:7e:78:f4:58:
         1f:62:21:6f:30:d5:5d:2e:42:25:19:6e:74:88:b1:cc:46:7e:
         6d:65:05:86:d6:b9:ce:7d:00:c1:71:8f:fb:19:64:33:dc:fb:
         3c:d4:11:f8:1f:58:67:8e:01:49:8c:5d:28:19:e1:9a:e3:8c:
         cb:f1:94:78:c6:a3:6d:63:fa:70:96:36:da:66:a9:76:d1:58:
         b7:7a:57:24:de:9e:47:a0:c9:20:8e:ec:f3:7c:b4:0f:ab:9d:
         37:97:75:f8:63:1a:6e:ea:fa:f5:75:78:28:27:5a:01:2c:4c:
         81:ba:af:fe:53:c0:91:b0:f3:73:23:56:c5:58:e7:a0:d5:a1:
         7b:6e:1e:ab:11:9b:fb:57:c9:7c:16:ce:5b:6e:2c:7c:15:44:
         4f:cf:a1:78:f6:f5:10:89:98:c6:89:5b:18:bf:6d:d7:58:bd:
         63:32:d2:e4:02:53:1e:20:b2:30:b3:ac:59:a6:34:59:90:dd:
         b8:35:52:84:dc:88:2a:4f:dd:bc:56:aa:5a:fc:00:a4:e9:7f:
         55:f1:44:fa:ac:64:c2:38:d8:03:25:9f:50:81:e7:fd:83:4b:
         c8:5d:36:81:60:9b:2b:17:5c:13:d1:f5:70:ca:86:a3:74:71:
         f5:55:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:43:27 2025 by rpki-client