Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3138372e34392e3234382e302f32312d3234203d3e20323632313834.roa
File:                     3138372e34392e3234382e302f32312d3234203d3e20323632313834.roa (raw, json)
Hash identifier:          9PH4FX2oHQfhZRMCKFZR9daV+dPvwdfjNJa8AmotFy8=
Subject key identifier:   A6:C2:0E:E3:BB:00:27:54:EA:02:FF:3A:5F:9E:09:74:74:79:6C:83
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       46D81C29D47CC4B7EA85E40FB623CBE72B9C2317
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3138372e34392e3234382e302f32312d3234203d3e20323632313834.roa
Signing time:             Tue 04 Feb 2025 19:56:42 +0000
ROA not before:           Tue 04 Feb 2025 19:51:42 +0000
ROA not after:            Tue 03 Feb 2026 19:56:42 +0000
asID:                     262184
IP address blocks:        187.49.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d8:1c:29:d4:7c:c4:b7:ea:85:e4:0f:b6:23:cb:e7:2b:9c:23:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Feb  4 19:51:42 2025 GMT
            Not After : Feb  3 19:56:42 2026 GMT
        Subject: CN=A6C20EE3BB002754EA02FF3A5F9E097474796C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:cd:b8:d4:24:93:df:84:e4:de:e2:49:17:
                    36:ef:1f:16:03:36:21:af:51:54:52:22:0e:78:8d:
                    a4:c0:00:df:ed:39:e4:f3:bf:20:97:69:bf:94:46:
                    57:6a:65:2c:fc:c4:e6:48:9d:4a:85:64:79:42:e2:
                    ea:a3:48:8f:c4:3b:42:1a:0c:f2:f4:69:15:52:08:
                    17:d9:bb:82:8c:16:81:7b:40:9b:ce:39:fe:7e:08:
                    18:b4:a4:34:14:02:86:d3:0c:39:d7:1f:d8:8a:1d:
                    1f:cd:5d:8a:f0:02:f6:0c:1f:6f:c3:6d:35:00:ed:
                    90:8c:59:8c:09:ea:ec:27:ff:4f:46:f2:72:1f:09:
                    8e:77:d7:b6:ad:97:b3:bd:01:c4:bd:92:1e:a1:3e:
                    f6:a4:01:cb:10:8f:28:8c:ad:db:cf:70:89:a1:d0:
                    4d:44:de:31:c7:43:68:30:71:60:a5:a5:7b:5e:4c:
                    e0:67:81:80:7f:76:bc:53:a8:ab:f6:ab:ba:aa:68:
                    5b:09:d7:9a:9b:8d:78:39:8f:3f:0a:27:06:aa:8a:
                    28:99:24:8f:e6:e3:02:0a:0f:c3:7d:8a:df:f9:43:
                    4e:ca:a0:08:f1:a5:51:d7:35:bf:b6:28:b8:11:35:
                    50:08:00:35:d9:7a:4c:72:3c:1c:79:d8:4c:63:0c:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C2:0E:E3:BB:00:27:54:EA:02:FF:3A:5F:9E:09:74:74:79:6C:83
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3138372e34392e3234382e302f32312d3234203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:13:55:03:65:c0:4f:c1:dc:81:ed:05:a2:57:a7:b1:fc:
         e6:2a:41:6f:9f:59:91:0d:bd:54:a2:28:22:5d:80:27:20:00:
         ee:f6:80:5e:74:0d:58:98:13:41:2d:c1:10:90:97:14:36:f6:
         63:11:a3:f2:42:51:b1:f3:d6:e5:9e:24:ee:38:0e:1a:9d:fa:
         9d:50:6c:6e:26:cd:cf:f8:24:80:5a:3a:08:50:62:a1:28:fc:
         37:63:93:d2:92:72:37:a6:7e:a3:f8:f8:80:71:c3:48:0a:e7:
         78:ea:05:31:a3:b9:78:d3:22:14:2e:b8:22:66:b1:c4:8e:10:
         9f:83:13:93:99:ed:51:17:c1:75:5a:62:ec:b1:fa:9f:83:fc:
         bf:d7:a8:99:91:13:45:04:a0:02:ec:37:23:9e:ec:71:97:5f:
         ff:8a:4c:c3:b6:cf:90:a4:a7:08:d9:a7:e2:8d:6a:f4:2b:5d:
         67:2f:52:dd:78:82:33:81:99:ca:97:22:6d:52:d0:65:7c:d7:
         a2:95:eb:68:29:a0:00:44:4c:1e:e3:c9:fc:5b:b2:0a:b0:43:
         d1:af:bb:97:6f:24:47:d0:7a:67:85:cf:bd:c5:3c:bc:b4:72:
         ea:b3:74:35:6f:39:2c:a5:24:59:d6:18:29:2e:e8:b6:18:b9:
         39:7f:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:18 2025 by rpki-client