Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3136342e302f32332d3233203d3e20323635353431.roa
File:                     3138392e3230342e3136342e302f32332d3233203d3e20323635353431.roa (raw, json)
Hash identifier:          3PhOJ1XZhcrnO7sxOOu8gCjsjC58h9FrPxuaa0DX98c=
Subject key identifier:   20:D3:69:35:9A:17:94:D4:52:8B:96:F1:0A:5C:F3:25:E6:FD:02:C4
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       6A792D7A103D7ACDBCEA7235B0FEC4E48CC3EB85
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3136342e302f32332d3233203d3e20323635353431.roa
Signing time:             Tue 04 Feb 2025 18:06:47 +0000
ROA not before:           Tue 04 Feb 2025 18:01:47 +0000
ROA not after:            Tue 03 Feb 2026 18:06:47 +0000
asID:                     265541
IP address blocks:        189.204.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:79:2d:7a:10:3d:7a:cd:bc:ea:72:35:b0:fe:c4:e4:8c:c3:eb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:47 2025 GMT
            Not After : Feb  3 18:06:47 2026 GMT
        Subject: CN=20D369359A1794D4528B96F10A5CF325E6FD02C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:d6:02:de:6e:68:c4:db:ab:d5:4f:d1:fa:
                    fd:18:69:24:36:f2:3f:68:c7:b3:83:3c:56:f5:e2:
                    62:6e:6e:dd:7d:28:66:4c:8b:63:67:dd:dd:aa:b5:
                    7f:b0:29:d5:79:12:a5:0c:07:74:77:d7:9d:0c:d5:
                    8b:14:34:c9:8e:72:d7:0f:68:80:3e:24:6b:22:c4:
                    25:75:93:78:f3:f8:7c:0a:a0:ef:9c:94:77:d3:56:
                    5f:f8:af:f2:47:ff:e0:b2:7c:9c:b0:d6:0e:4a:8c:
                    29:84:01:0d:e3:59:98:18:ea:9d:de:45:fc:b5:74:
                    14:9d:b1:97:8f:0f:a8:4c:5f:9c:a2:74:ae:55:5e:
                    e3:d0:74:f4:08:18:12:48:b1:1f:31:3b:20:e6:77:
                    00:e8:db:6b:b7:c4:42:07:d5:c8:1d:e1:03:75:8e:
                    1b:bb:1a:c4:75:95:37:b3:b5:c5:8a:74:b5:e1:0a:
                    9d:af:ca:44:44:77:a3:7c:77:89:c6:e6:15:f8:ea:
                    1d:aa:1b:af:ca:9a:16:b9:ed:5f:10:39:f2:ef:05:
                    4f:4d:3c:be:a3:a8:68:72:71:5e:31:06:c8:6e:15:
                    b2:48:7f:33:3e:79:55:dd:fa:ce:71:31:7f:2f:c4:
                    ec:99:cc:1f:a4:a8:d5:69:b6:e1:55:9c:b6:90:40:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:69:35:9A:17:94:D4:52:8B:96:F1:0A:5C:F3:25:E6:FD:02:C4
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3136342e302f32332d3233203d3e20323635353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:f6:f9:4b:5f:67:90:57:2c:26:2d:d0:60:58:03:e0:3a:
         6f:2f:85:f8:2a:5b:3c:1a:a4:b3:56:90:9a:e2:4a:6b:31:4a:
         48:48:24:43:ca:21:0b:0a:46:bc:10:7a:3d:e7:1f:a1:4f:e9:
         40:fe:2e:5b:be:81:91:e2:59:fc:4f:12:3e:ae:f6:14:24:22:
         5d:b7:b7:95:df:02:28:95:f8:bf:cc:81:fc:df:21:51:70:96:
         1f:08:26:2b:71:85:b6:47:46:3c:0e:9e:15:a3:23:7b:22:38:
         6a:f5:9a:2e:cb:bf:69:b0:02:6a:0d:d9:51:97:91:8b:c4:f4:
         cc:62:6f:90:a4:3f:cb:6e:cb:60:13:55:aa:57:f4:a3:7d:e7:
         b5:80:f4:f0:9c:12:7e:92:2b:38:56:74:9b:e1:2a:2a:c9:e6:
         30:05:ad:75:fe:e5:56:43:1b:c9:1c:d8:fe:6e:57:32:f3:23:
         55:e8:b7:e8:ca:c7:61:20:8c:84:ca:0d:2c:92:0c:77:1b:4b:
         92:13:37:25:42:a0:b0:0d:44:70:57:e2:3f:89:6d:8e:26:5c:
         82:ab:8b:28:06:7e:e6:ce:55:40:84:44:b6:77:67:0b:d6:6e:
         01:bf:92:fa:30:ca:c5:bb:2f:89:b1:8d:41:bc:ca:32:ad:98:
         6b:a1:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:40 2025 by rpki-client