Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e3139322e33322e302f31392d3234203d3e203237393834.roa
File:                     3138312e3139322e33322e302f31392d3234203d3e203237393834.roa (raw, json)
Hash identifier:          mW0sqLDmIiyBQSol1ygQbsBVyKTOhpFYYQFbL2LoUFs=
Subject key identifier:   92:CF:10:F4:7D:2A:40:61:CD:81:41:F7:CA:26:8A:22:3D:4E:E6:82
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       6B611A8D325C2C936E0C3CE5891EE9A6FD5D0769
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e3139322e33322e302f31392d3234203d3e203237393834.roa
Signing time:             Tue 04 Feb 2025 18:04:57 +0000
ROA not before:           Tue 04 Feb 2025 17:59:57 +0000
ROA not after:            Tue 03 Feb 2026 18:04:57 +0000
asID:                     27984
IP address blocks:        181.192.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:61:1a:8d:32:5c:2c:93:6e:0c:3c:e5:89:1e:e9:a6:fd:5d:07:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Feb  4 17:59:57 2025 GMT
            Not After : Feb  3 18:04:57 2026 GMT
        Subject: CN=92CF10F47D2A4061CD8141F7CA268A223D4EE682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:0c:56:26:c8:31:d2:e8:17:0a:1e:92:e4:
                    d7:94:df:79:84:42:57:42:23:a6:a7:fa:2c:2f:d6:
                    bb:85:47:98:d5:3a:32:c3:da:bb:f7:4e:54:19:1a:
                    5b:80:5b:d1:dc:32:05:d2:f3:d4:c6:7d:9f:46:4a:
                    0f:18:d5:2b:d1:f9:bd:69:da:df:14:d7:22:d7:a7:
                    c1:38:80:29:64:7d:b0:27:14:2d:91:29:b1:e7:f5:
                    c7:94:62:6a:d6:60:a3:f6:d3:cc:7c:0d:fc:61:e8:
                    72:92:74:15:48:9e:45:e8:f1:72:78:8d:56:b5:92:
                    49:82:c9:76:e9:8d:3f:f4:7f:4c:2b:1e:8c:b6:b6:
                    55:34:a0:3d:a8:60:64:27:df:12:8f:af:20:7a:b7:
                    dd:1e:00:ca:01:55:92:44:c5:5f:1e:15:1e:f1:20:
                    8c:b3:c0:ff:e7:dd:88:4b:bc:6a:7e:76:19:40:c7:
                    66:c8:46:52:61:51:6e:29:3d:92:ee:50:38:04:dd:
                    94:17:41:67:bf:cc:09:3b:bb:e3:b7:46:99:2c:93:
                    2d:be:52:d8:71:c7:42:3b:1e:bb:83:ce:2b:f4:d0:
                    e1:ad:3b:6e:b5:dd:7b:71:fc:d2:b3:f8:1d:ed:c5:
                    65:50:db:2b:5a:bd:a6:07:0a:c1:f7:83:6d:06:fe:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:10:F4:7D:2A:40:61:CD:81:41:F7:CA:26:8A:22:3D:4E:E6:82
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e3139322e33322e302f31392d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:71:fd:05:e5:16:2d:2f:f1:8c:0b:bf:d3:4e:f9:cb:01:f5:
         7a:75:f6:54:58:81:27:20:91:58:d6:37:bd:09:ad:06:9b:8a:
         58:3b:98:4c:ba:f1:bc:35:41:81:08:82:eb:1f:a6:af:38:1c:
         aa:5f:3b:94:e5:de:b6:e8:cd:49:96:03:73:62:49:fa:f6:44:
         5a:cf:32:d7:67:65:74:5b:2c:f1:80:c7:1f:42:49:05:31:5f:
         de:68:18:03:d2:2d:d6:e4:ba:a3:4e:ad:93:25:cb:4c:56:47:
         13:80:bd:41:eb:75:d8:86:79:91:2f:48:d1:28:e8:87:13:25:
         25:e9:8f:21:9a:ed:3d:a1:2f:c5:ce:b6:72:a4:da:20:f2:bb:
         d1:51:e8:74:f1:07:0d:9d:a1:31:50:0e:36:11:34:b0:90:0f:
         20:2c:72:3f:8c:79:0f:c9:d2:5a:96:48:07:ef:d6:40:15:22:
         57:fd:93:49:28:a2:77:3c:60:18:6b:ea:4f:3b:f8:1d:18:79:
         a3:53:b1:f0:3c:a8:69:7f:3a:84:5a:b2:e2:d4:49:c1:a7:0d:
         bd:d7:ff:dd:31:39:ec:06:fb:1f:d2:74:55:ec:3f:a2:ab:72:
         3f:e4:83:8f:c3:be:75:11:69:15:99:a6:38:40:9a:eb:61:50:
         f4:5c:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:41:36 2025 by rpki-client