Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e31312e302f32342d3234203d3e20323733313136.roa
File:                     3133322e3235352e31312e302f32342d3234203d3e20323733313136.roa (raw, json)
Hash identifier:          FDcyKkxTNRpUtM1+MDh3h8o95OP6Xj/sraLZ7Bxw7/E=
Subject key identifier:   56:CE:1C:7F:AF:4A:AC:B7:E1:D4:0C:68:A8:9B:30:4F:7C:9C:68:02
Certificate issuer:       /CN=147B7D55918A2F6911996FA0232FC4A257FC3C1B
Certificate serial:       33FF1E9FBAE83CE8D020500BB7293DEBDF8DAEFE
Authority key identifier: 14:7B:7D:55:91:8A:2F:69:11:99:6F:A0:23:2F:C4:A2:57:FC:3C:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e31312e302f32342d3234203d3e20323733313136.roa
Signing time:             Fri 25 Jul 2025 17:55:00 +0000
ROA not before:           Fri 25 Jul 2025 17:50:00 +0000
ROA not after:            Fri 24 Jul 2026 17:55:00 +0000
asID:                     273116
IP address blocks:        132.255.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ff:1e:9f:ba:e8:3c:e8:d0:20:50:0b:b7:29:3d:eb:df:8d:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147B7D55918A2F6911996FA0232FC4A257FC3C1B
        Validity
            Not Before: Jul 25 17:50:00 2025 GMT
            Not After : Jul 24 17:55:00 2026 GMT
        Subject: CN=56CE1C7FAF4AACB7E1D40C68A89B304F7C9C6802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:ba:bb:1a:4d:bd:0c:21:18:da:a6:36:0b:
                    45:1b:1a:64:21:ba:75:86:a7:16:21:5c:31:ae:7a:
                    c6:18:df:94:3e:6c:67:6c:09:8b:00:e6:6e:bb:a7:
                    d5:17:14:eb:6c:a0:c7:37:ce:ff:f9:cc:97:9b:87:
                    9b:9f:4d:47:54:9d:07:e8:8d:2b:e6:81:80:6d:61:
                    4c:4f:0a:d4:ba:1b:63:07:02:e9:5b:55:96:df:73:
                    e1:89:c3:ca:f5:6e:8c:bd:52:de:f2:c6:79:a2:38:
                    a4:09:1c:8a:33:d9:06:8c:ba:42:03:b7:cb:93:c9:
                    c5:c9:2a:25:db:f0:51:6b:c6:f8:04:7d:c9:9d:e3:
                    db:88:b8:0b:26:cf:20:64:a0:2e:64:52:cb:4b:72:
                    ac:a1:f7:a1:3b:57:ef:da:55:27:1b:c3:7a:2f:e7:
                    4d:0c:6a:51:6a:d3:7a:78:36:4a:69:bc:fb:5e:7a:
                    5c:23:4e:c5:e0:56:b6:1c:7e:09:02:c4:66:5f:b2:
                    dd:71:d4:84:1e:7c:b6:50:44:19:c4:c0:b6:b7:a8:
                    0f:1b:76:f1:d2:59:49:89:56:2f:15:28:58:38:13:
                    9a:67:af:a2:eb:bd:84:25:75:c4:3f:8a:42:de:5d:
                    b7:29:ad:72:87:38:35:f1:7b:bd:7f:61:0d:f0:f1:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:1C:7F:AF:4A:AC:B7:E1:D4:0C:68:A8:9B:30:4F:7C:9C:68:02
            X509v3 Authority Key Identifier:
                keyid:14:7B:7D:55:91:8A:2F:69:11:99:6F:A0:23:2F:C4:A2:57:FC:3C:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e31312e302f32342d3234203d3e20323733313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:dc:a4:d3:dc:ba:7f:82:bc:12:e9:02:cc:52:f3:57:77:
         c9:88:1c:cf:5b:c5:18:18:bd:e5:b1:52:0b:d2:5f:49:75:8e:
         de:60:26:a4:28:15:38:85:99:e8:7a:be:03:4d:09:e6:bb:64:
         1f:8f:84:a5:2d:f8:94:4f:60:c4:f0:67:bb:42:f8:4b:76:76:
         15:aa:63:29:fa:e2:ae:9c:70:71:cc:55:c1:b8:76:1d:8e:d6:
         2a:62:05:58:a3:b8:04:43:53:61:7a:26:46:b9:d5:27:88:62:
         f3:1c:03:5f:9a:8c:33:06:94:a1:57:e0:50:a1:9d:f3:1a:b6:
         c5:66:7d:6d:e6:ea:86:18:d9:07:4f:dc:d9:b1:6d:99:6a:63:
         1e:dc:2c:29:93:b2:16:00:73:7c:d5:1d:60:e3:f3:1d:16:71:
         ca:56:7d:2d:c1:b0:09:0a:14:d0:34:c4:b5:f9:85:e8:cb:0f:
         e8:ad:5a:79:b4:8f:ed:ea:26:09:99:07:1c:14:e2:74:62:8d:
         9b:ab:08:a8:f9:1f:6d:3c:09:a3:d5:f5:f6:44:ca:5e:bb:1e:
         6e:3b:b4:89:a1:e8:82:c4:28:13:7e:69:c3:d7:5d:c5:c4:c8:
         b0:8f:3c:36:61:7a:df:39:cd:9c:07:e9:0a:66:b1:07:d5:bf:
         1b:c0:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:28 2025 by rpki-client