Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/3139312e39382e3231362e302f32312d3234203d3e20323633323139.roa
File:                     3139312e39382e3231362e302f32312d3234203d3e20323633323139.roa (raw, json)
Hash identifier:          O3MQcFZPgYmpPZyK5l3h3G7OCuAOcNPwRChYojOBKK0=
Subject key identifier:   E2:34:9F:4C:56:AF:48:DD:4B:A0:67:1A:2C:D5:4C:6C:E6:4E:E3:3A
Certificate issuer:       /CN=32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5
Certificate serial:       39066B44A68DE2330FD7222372C0D55B6615FA6C
Authority key identifier: 32:12:39:28:A9:60:2F:65:F7:BB:4E:2F:B1:1B:F6:F3:BB:3B:F4:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/3139312e39382e3231362e302f32312d3234203d3e20323633323139.roa
Signing time:             Tue 04 Feb 2025 18:38:27 +0000
ROA not before:           Tue 04 Feb 2025 18:33:27 +0000
ROA not after:            Tue 03 Feb 2026 18:38:27 +0000
asID:                     263219
IP address blocks:        191.98.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:06:6b:44:a6:8d:e2:33:0f:d7:22:23:72:c0:d5:5b:66:15:fa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5
        Validity
            Not Before: Feb  4 18:33:27 2025 GMT
            Not After : Feb  3 18:38:27 2026 GMT
        Subject: CN=E2349F4C56AF48DD4BA0671A2CD54C6CE64EE33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:64:8f:e9:38:ee:fa:b6:43:ef:e5:53:05:
                    8b:68:81:5d:ed:6c:08:70:7b:eb:98:38:d4:b1:c1:
                    15:d3:b7:84:2a:42:f1:39:9e:b5:d3:29:8b:ea:cb:
                    ef:81:25:cf:c0:14:3a:63:6a:d7:e5:1e:ac:bd:94:
                    0b:23:a8:72:00:d3:c4:ab:08:40:5e:22:31:9c:b9:
                    2a:b9:a0:31:f2:ea:39:17:2e:8c:63:6a:37:92:18:
                    8b:b1:0b:64:d0:a9:c9:a5:5c:da:92:54:3a:05:35:
                    6e:b7:be:9d:ab:20:56:63:1b:e8:0c:5c:5a:94:2f:
                    bb:b7:c1:93:13:f7:18:1d:b2:70:33:e9:a4:74:f9:
                    0c:e5:82:4e:30:8e:3e:d6:f8:81:6a:0a:e7:bf:2c:
                    ef:a3:b9:5f:70:fc:a0:cc:12:a4:34:d1:71:9e:a7:
                    50:df:e5:1f:10:4b:5b:47:67:54:5f:cc:77:36:a3:
                    0b:67:dd:81:b2:19:a8:6f:49:a6:6e:67:9a:3b:b7:
                    54:d3:be:8e:6f:33:c3:e6:0e:79:5b:19:20:55:2b:
                    78:85:56:3b:a5:fa:68:ea:51:4c:48:ce:37:40:30:
                    5c:c6:76:d2:7b:7c:1d:6e:0e:f2:20:fa:26:7f:a4:
                    8f:b8:6c:32:67:e2:f7:9b:61:90:31:2a:81:8f:cd:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:34:9F:4C:56:AF:48:DD:4B:A0:67:1A:2C:D5:4C:6C:E6:4E:E3:3A
            X509v3 Authority Key Identifier:
                keyid:32:12:39:28:A9:60:2F:65:F7:BB:4E:2F:B1:1B:F6:F3:BB:3B:F4:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/3139312e39382e3231362e302f32312d3234203d3e20323633323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:71:bc:6a:e1:61:55:e0:96:4c:91:3d:0a:3b:ae:cd:13:
         2e:98:ba:9d:06:13:f7:0c:1d:00:e1:47:14:3f:4a:99:57:77:
         71:e9:18:e3:8d:3d:26:e4:5b:cf:67:d3:5a:54:5d:a4:29:d5:
         6b:37:8d:f6:64:0d:a9:8c:17:24:1c:a1:c3:75:8e:da:af:f8:
         ac:1b:4e:dd:0e:19:62:3c:ef:cd:1d:46:f3:94:b4:54:43:54:
         06:b7:30:46:10:68:f7:af:9a:ee:56:c6:f7:5c:7e:cc:a6:6b:
         19:82:d4:cd:b0:85:0c:66:ee:da:8b:81:11:23:05:de:08:70:
         17:27:91:50:25:38:91:4e:2e:3b:07:13:da:9b:35:20:ba:7d:
         c9:79:6a:0c:43:b9:fc:b4:35:9d:bd:09:dc:8c:89:5f:5f:4f:
         13:1a:a3:c6:59:61:3c:63:21:95:1d:90:f9:03:63:f9:fc:dc:
         8f:93:2f:71:cf:d5:8f:6c:cd:19:4e:b6:47:b5:72:e4:36:80:
         76:d5:c8:b8:26:80:b0:0b:ce:ce:c4:ca:03:1b:e4:49:00:9b:
         aa:a6:98:f1:e3:4b:6e:c8:67:c1:fa:83:e5:27:a5:d5:72:61:
         73:90:45:96:1e:fa:55:b6:98:c4:75:6e:f3:c1:5f:9d:68:0e:
         a1:54:d1:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOQZrRKaN4jMP1yIjcsDVW2YV+mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxMjM5MjhBOTYwMkY2NUY3QkI0RTJGQjExQkY2RjNC
QjNCRjRCNTAeFw0yNTAyMDQxODMzMjdaFw0yNjAyMDMxODM4MjdaMDMxMTAvBgNV
BAMTKEUyMzQ5RjRDNTZBRjQ4REQ0QkEwNjcxQTJDRDU0QzZDRTY0RUUzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1GSP6Tju+rZD7+VTBYtogV3t
bAhwe+uYONSxwRXTt4QqQvE5nrXTKYvqy++BJc/AFDpjatflHqy9lAsjqHIA08Sr
CEBeIjGcuSq5oDHy6jkXLoxjajeSGIuxC2TQqcmlXNqSVDoFNW63vp2rIFZjG+gM
XFqUL7u3wZMT9xgdsnAz6aR0+Qzlgk4wjj7W+IFqCue/LO+juV9w/KDMEqQ00XGe
p1Df5R8QS1tHZ1RfzHc2owtn3YGyGahvSaZuZ5o7t1TTvo5vM8PmDnlbGSBVK3iF
Vjul+mjqUUxIzjdAMFzGdtJ7fB1uDvIg+iZ/pI+4bDJn4vebYZAxKoGPzVFNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4jSfTFavSN1LoGcaLNVMbOZO4zowHwYDVR0j
BBgwFoAUMhI5KKlgL2X3u04vsRv287s79LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjk5NkU3NzdCNEI0MzNEMEQxNkJDMzQyQTIzMTlDODRG
MTFBOTY5Q0E3OUJFRDNFQjUxNDJFNTI1QUU0N0M1LzAvMzIxMjM5MjhBOTYwMkY2
NUY3QkI0RTJGQjExQkY2RjNCQjNCRjRCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjEyMzkyOEE5NjAyRjY1RjdC
QjRFMkZCMTFCRjZGM0JCM0JGNEI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY5OTZFNzc3QjRCNDMzRDBEMTZCQzM0MkEyMzE5Qzg0RjExQTk2OUNB
NzlCRUQzRUI1MTQyRTUyNUFFNDdDNS8wLzMxMzkzMTJlMzkzODJlMzIzMTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDv2LY
MA0GCSqGSIb3DQEBCwUAA4IBAQBadHG8auFhVeCWTJE9CjuuzRMumLqdBhP3DB0A
4UcUP0qZV3dx6RjjjT0m5FvPZ9NaVF2kKdVrN432ZA2pjBckHKHDdY7ar/isG07d
DhliPO/NHUbzlLRUQ1QGtzBGEGj3r5ruVsb3XH7MpmsZgtTNsIUMZu7ai4ERIwXe
CHAXJ5FQJTiRTi47BxPamzUgun3JeWoMQ7n8tDWdvQncjIlfX08TGqPGWWE8YyGV
HZD5A2P5/NyPky9xz9WPbM0ZTrZHtXLkNoB21ci4JoCwC87OxMoDG+RJAJuqppjx
40tuyGfB+oPlJ6XVcmFzkEWWHvpVtpjEdW7zwV+daA6hVNGB
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client