Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34312e302f32342d3234203d3e20323639393739.roa
File:                     3138372e302e34312e302f32342d3234203d3e20323639393739.roa (raw, json)
Hash identifier:          ONHGVZnQvaYiH/mMBk7aWymt8GM9k3neC78hKSWp8Vo=
Subject key identifier:   C3:0E:FC:3B:74:5C:3D:0B:58:8B:FF:2A:9C:F6:04:6F:DF:C9:21:F1
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       4E680098D61A95C1FF938D719B7B019CEA3706DF
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34312e302f32342d3234203d3e20323639393739.roa
Signing time:             Tue 07 Jan 2025 14:45:00 +0000
ROA not before:           Tue 07 Jan 2025 14:40:00 +0000
ROA not after:            Tue 06 Jan 2026 14:45:00 +0000
asID:                     269979
IP address blocks:        187.0.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:68:00:98:d6:1a:95:c1:ff:93:8d:71:9b:7b:01:9c:ea:37:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  7 14:40:00 2025 GMT
            Not After : Jan  6 14:45:00 2026 GMT
        Subject: CN=C30EFC3B745C3D0B588BFF2A9CF6046FDFC921F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:fc:e7:af:48:c2:6f:ac:ea:65:0d:a0:b1:
                    13:83:1c:f0:e0:27:51:aa:88:96:2c:be:a4:43:69:
                    3f:78:25:b6:e4:13:3f:dd:2f:6b:a6:7b:86:04:28:
                    f7:dd:cc:b2:87:a3:a3:93:74:d2:71:fe:6d:13:f0:
                    42:88:b3:69:ab:be:69:90:11:51:97:f4:53:a6:74:
                    72:42:c1:32:79:4e:0f:6e:24:b8:93:3f:54:3c:07:
                    fd:38:22:dc:68:82:7e:ad:ef:df:cb:00:f1:6a:e3:
                    81:fe:35:22:fb:82:63:5c:8e:59:92:9b:7c:41:97:
                    87:6a:86:e3:e3:11:8b:87:c1:70:b2:30:f6:36:b1:
                    45:ad:fb:10:60:6d:05:b7:9d:88:5d:0d:3d:6a:b0:
                    3a:0b:a1:b1:92:5a:7b:29:e9:fb:4e:c5:33:25:3d:
                    6a:0a:37:1f:00:77:02:3d:70:4b:70:34:55:27:6f:
                    3e:83:9e:cb:a9:25:ad:b0:61:0b:8e:c1:54:f2:af:
                    b2:51:53:d7:78:2b:72:49:dd:98:49:fc:5f:c8:a2:
                    cc:70:b8:53:d6:2b:77:a8:5d:c3:97:9e:89:2d:8d:
                    25:72:b8:9e:cc:b1:73:3b:d8:c9:a4:3c:a4:86:42:
                    df:bf:55:ef:6b:00:61:26:97:4a:82:77:33:d6:13:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:FC:3B:74:5C:3D:0B:58:8B:FF:2A:9C:F6:04:6F:DF:C9:21:F1
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34312e302f32342d3234203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:b7:cd:2a:cc:2b:61:84:e5:30:ec:b9:c6:f0:84:0c:dc:
         84:c6:36:6d:a9:60:64:db:67:79:f9:c7:42:9a:ef:2d:cb:57:
         55:db:9b:0c:00:ba:e9:d2:54:50:09:32:77:61:42:25:ae:d8:
         4a:6e:8d:a3:8a:9d:e0:ac:58:5e:63:b6:ed:73:94:f5:e5:6c:
         ba:e1:21:34:b7:4e:6a:ca:3e:8d:02:f2:09:4b:1a:c4:a1:e5:
         cd:ef:6a:01:ef:3f:80:eb:8c:eb:98:f4:03:7b:98:5c:9b:8c:
         ea:89:b0:95:27:e1:1e:fb:3b:54:ad:0b:1b:b9:eb:4e:93:d0:
         d0:3d:e1:8d:4f:e6:7a:58:4a:f9:c8:8f:69:80:2d:f2:46:03:
         13:50:25:84:4a:1e:36:b7:41:a3:e7:1b:e4:25:ee:dc:dc:d7:
         9c:02:ea:f5:1c:54:37:da:a8:14:2e:f8:c0:43:a8:1e:80:4f:
         46:0b:cb:10:5a:78:e8:85:15:de:d8:47:56:2d:fc:a9:6a:4e:
         99:a6:06:9e:d4:95:46:f6:24:85:08:b6:c3:28:14:2b:03:18:
         b8:53:ed:57:e5:ad:62:73:70:6c:e8:db:1b:6b:1c:61:db:58:
         21:19:76:09:f3:1a:ef:d1:a9:1c:43:65:79:47:b3:e5:4a:b4:
         b8:5d:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:16 2025 by rpki-client