Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34332e302f32342d3234203d3e20323639393739.roa
File:                     3138372e302e34332e302f32342d3234203d3e20323639393739.roa (raw, json)
Hash identifier:          4jikO/9QpgsPDdhH02ShWtq2aDTMov07xUI+kc0Ie9g=
Subject key identifier:   88:5F:55:40:71:46:11:28:FD:6D:CB:78:30:F1:0F:B9:80:41:24:20
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       7410AC2FB4E3B95C043702760B46601A3AE8B318
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34332e302f32342d3234203d3e20323639393739.roa
Signing time:             Tue 07 Jan 2025 14:45:00 +0000
ROA not before:           Tue 07 Jan 2025 14:40:00 +0000
ROA not after:            Tue 06 Jan 2026 14:45:00 +0000
asID:                     269979
IP address blocks:        187.0.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:ac:2f:b4:e3:b9:5c:04:37:02:76:0b:46:60:1a:3a:e8:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  7 14:40:00 2025 GMT
            Not After : Jan  6 14:45:00 2026 GMT
        Subject: CN=885F554071461128FD6DCB7830F10FB980412420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:ef:4b:63:5b:91:bb:f3:55:ae:f9:00:96:
                    cd:8f:2c:8b:cf:b5:40:ca:59:99:23:64:4d:fe:93:
                    8f:e2:4e:77:1f:b5:ab:3e:e6:c4:e7:9b:4d:eb:46:
                    6e:25:86:5b:e6:bf:f4:04:44:bc:c6:99:e1:6f:1c:
                    d4:4f:5f:45:28:16:b7:50:0b:5e:25:ea:0d:2c:ad:
                    c8:00:1c:de:b9:01:f2:1b:8b:74:7b:d9:85:07:cc:
                    ad:64:04:52:8f:71:bf:0f:64:bd:87:ba:ca:e8:2c:
                    c5:26:ef:94:b1:da:ea:d7:69:bb:b1:96:81:2f:48:
                    72:62:c5:b9:8c:a0:c0:73:33:27:67:df:d5:40:70:
                    0b:9f:38:07:eb:34:28:8f:5f:92:f5:29:4d:50:a2:
                    68:ee:0b:99:62:df:77:49:db:89:e2:34:24:06:87:
                    8b:90:38:3b:21:90:c0:e1:28:96:57:5f:66:98:2e:
                    32:bc:aa:d6:93:95:de:e3:2c:71:e9:26:3b:60:97:
                    86:c5:5e:d9:06:a0:cf:43:3d:90:3c:4f:e4:0c:25:
                    9d:24:35:81:6b:d8:b5:4d:f8:6b:9a:56:4a:f1:bd:
                    ee:e4:7c:2c:66:ca:df:0a:d1:92:8a:77:fa:4d:de:
                    aa:94:83:a6:91:16:d9:46:7c:03:9d:72:3a:93:75:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5F:55:40:71:46:11:28:FD:6D:CB:78:30:F1:0F:B9:80:41:24:20
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34332e302f32342d3234203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:da:41:ad:f2:9e:e4:c6:22:9e:f3:a4:04:f0:3e:82:c9:
         f6:ac:c3:6a:fa:47:d1:2f:12:3f:4f:65:85:d9:a7:39:14:87:
         68:37:be:36:3c:04:3f:5b:4a:55:a9:7d:d2:ed:29:23:89:ae:
         d6:f6:4a:05:cb:f8:1b:1d:dd:1f:e6:a8:9c:9c:88:38:32:8e:
         c3:9f:a7:ca:e5:29:5f:ec:ce:94:b5:9d:6e:67:0d:2c:9a:00:
         39:6b:22:cd:27:d9:25:fa:ad:be:a6:92:8e:76:81:c7:51:fc:
         03:14:ef:61:48:be:c7:02:81:bd:73:1e:da:b8:a5:7e:f0:41:
         66:7d:4d:e4:24:f4:b3:01:59:9b:80:fb:57:9c:0a:24:5e:40:
         0b:6e:36:8a:e9:91:42:ac:a8:eb:22:cf:e6:1e:7d:ff:aa:05:
         4e:7e:f4:3f:d7:1f:b7:a1:60:29:59:5a:4e:a6:9e:88:72:83:
         7b:0d:19:48:3c:98:88:0d:14:9b:47:a1:17:ff:88:f1:74:27:
         f5:54:88:b6:60:e1:22:1e:b0:76:5f:c7:79:02:5a:94:e0:5f:
         15:81:ca:66:06:69:e8:c8:d9:6c:6e:a8:b9:0e:2a:49:13:fe:
         b3:2e:69:51:5b:69:4a:1a:67:01:8b:2a:7e:bc:18:e2:48:6e:
         bc:d0:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:26 2025 by rpki-client