Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32322d3232203d3e20323639393739.roa
File:                     3138372e302e34302e302f32322d3232203d3e20323639393739.roa (raw, json)
Hash identifier:          NafRq7/fqU+ilRjnLFQV3VpamyLdG40cd933vStEtnk=
Subject key identifier:   9F:8C:E4:F7:7E:0B:44:D9:9C:58:A1:3A:B7:84:80:A3:E9:FB:E8:D9
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       25FEF8FDA96D86B4A7B6EFB87B77BD9E00BB8224
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32322d3232203d3e20323639393739.roa
Signing time:             Tue 07 Jan 2025 14:45:02 +0000
ROA not before:           Tue 07 Jan 2025 14:40:02 +0000
ROA not after:            Tue 06 Jan 2026 14:45:02 +0000
asID:                     269979
IP address blocks:        187.0.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:f8:fd:a9:6d:86:b4:a7:b6:ef:b8:7b:77:bd:9e:00:bb:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  7 14:40:02 2025 GMT
            Not After : Jan  6 14:45:02 2026 GMT
        Subject: CN=9F8CE4F77E0B44D99C58A13AB78480A3E9FBE8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:c1:50:18:d9:79:e4:fa:f0:59:ce:f4:62:
                    17:0d:33:37:86:ba:d4:bb:01:c6:ac:b9:9f:5a:72:
                    35:d0:19:39:38:cd:7f:86:b7:8c:01:cc:17:45:91:
                    b2:5a:f5:31:df:4f:7e:f2:97:3b:16:f6:6b:e7:0a:
                    62:6c:76:3e:eb:aa:82:e5:b5:9e:e8:5e:71:c6:ba:
                    15:92:73:a8:76:4c:c3:14:71:05:e1:3b:bc:71:47:
                    f0:b2:ae:92:be:45:d8:16:aa:f9:da:d9:1c:d9:46:
                    47:aa:71:2e:53:38:6c:81:eb:34:42:8e:74:90:b5:
                    f2:11:99:8d:e1:2d:e3:e2:0d:8e:c8:75:63:d3:2b:
                    90:28:82:5a:6b:3d:18:75:b3:b2:a7:97:c6:39:c8:
                    59:fc:65:b6:75:24:e9:6b:a6:67:76:bf:ea:7e:0c:
                    84:76:9f:bd:d6:19:ff:9e:d4:96:1e:a7:c7:f9:df:
                    de:23:7f:84:30:ec:70:b3:cb:ab:d2:f3:9c:da:e4:
                    e3:eb:5e:37:c7:6b:2a:d3:13:74:d1:78:14:bf:ed:
                    1f:a3:0e:18:71:14:1e:da:ef:e9:36:f7:9c:6b:32:
                    e4:1c:f0:81:6d:48:e0:18:14:15:fa:03:8c:12:b2:
                    f7:f7:d1:99:34:ea:e5:6d:14:d5:73:e9:62:78:3b:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:E4:F7:7E:0B:44:D9:9C:58:A1:3A:B7:84:80:A3:E9:FB:E8:D9
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32322d3232203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:f7:5f:59:bb:79:42:21:ca:04:62:08:4d:d7:23:72:f5:
         33:ce:ad:60:cf:bb:10:b7:85:95:cd:87:86:18:f9:95:11:43:
         93:93:28:4b:7c:aa:c2:f8:67:56:8f:12:09:d7:94:c1:e3:1f:
         07:60:29:25:57:6e:92:14:ee:e5:81:86:d9:c0:c1:2a:1e:4c:
         4e:05:b3:25:51:52:93:95:5b:aa:dd:97:1d:f0:3b:9d:94:91:
         6f:81:17:1e:e8:e2:e1:4c:81:1e:38:16:17:b0:30:be:41:77:
         b1:cf:57:75:c1:07:d1:5c:5b:3d:c5:e4:2b:5f:1a:91:bc:4c:
         e1:f3:e2:4a:02:a4:00:99:47:3a:94:a1:0d:12:e8:f5:9e:d1:
         ad:85:8f:a2:88:61:b9:09:01:fa:6f:0e:41:05:e3:0c:13:4d:
         3d:71:f7:5b:a2:fa:00:39:7e:e5:18:fc:5b:48:ba:04:80:fe:
         80:06:d7:9a:df:14:f6:41:17:b2:bb:17:d8:7a:03:e9:46:a2:
         da:73:61:e1:ba:46:8b:f5:8a:0e:11:c7:b1:34:f0:48:e5:0f:
         06:5a:ff:ff:40:03:5e:d3:fd:68:49:7a:08:35:bc:3f:78:80:
         08:3d:d8:c4:ec:7d:e9:d1:3f:69:ac:6f:e1:35:1d:9b:00:88:
         fc:f9:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:16 2025 by rpki-client