Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36332e302f32342d3234203d3e20323639393931.roa
File:                     3139312e3130322e36332e302f32342d3234203d3e20323639393931.roa (raw, json)
Hash identifier:          HC4mNhF2Uoi31Kowtaaqiva7Jvy9Rfe9BJqYVc7mxyM=
Subject key identifier:   0D:5C:73:19:AF:9A:8B:AB:20:53:3B:6F:C7:76:49:62:7D:8D:0E:45
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       50BE73ABB16CDFDB38194F755F25804E51CF2BF3
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36332e302f32342d3234203d3e20323639393931.roa
Signing time:             Tue 04 Feb 2025 18:41:09 +0000
ROA not before:           Tue 04 Feb 2025 18:36:09 +0000
ROA not after:            Tue 03 Feb 2026 18:41:09 +0000
asID:                     269991
IP address blocks:        191.102.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:be:73:ab:b1:6c:df:db:38:19:4f:75:5f:25:80:4e:51:cf:2b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Feb  4 18:36:09 2025 GMT
            Not After : Feb  3 18:41:09 2026 GMT
        Subject: CN=0D5C7319AF9A8BAB20533B6FC77649627D8D0E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:35:8a:37:77:b5:c5:5e:95:a1:42:54:f6:
                    e7:54:4e:49:92:eb:98:82:c9:f3:fb:0e:5c:58:42:
                    87:3c:fc:fe:50:b5:64:fc:1a:b5:52:64:a5:40:6b:
                    db:30:ce:c6:62:cd:ed:1c:5b:3e:46:d0:2d:9b:e0:
                    ac:e4:fa:7e:9e:6b:25:7a:74:e1:ad:08:af:4f:15:
                    6e:21:c4:46:20:14:3d:b4:53:a4:a9:a6:b7:af:ad:
                    ed:89:ab:be:69:41:73:bd:20:eb:4b:1a:ca:54:f3:
                    72:82:94:35:78:76:a7:b9:37:f5:74:81:5e:49:9f:
                    96:36:5a:9e:a4:d8:b5:d4:cc:6d:45:4b:2b:f1:8c:
                    7a:f4:1a:d9:97:a3:53:3a:a7:6d:fa:69:32:75:e3:
                    9b:ee:62:2d:5f:62:d2:cc:c4:8d:b6:61:77:ba:ce:
                    2a:11:33:7d:a3:83:67:03:4b:a1:2d:4c:92:cb:07:
                    5d:aa:53:bc:4b:8b:2d:57:b2:35:82:13:cf:49:a9:
                    96:d0:35:73:62:c2:d8:d1:1b:43:a2:48:4e:01:89:
                    64:f3:d4:0e:d0:4d:f4:15:59:e3:7b:8e:0d:22:12:
                    cc:37:c8:ab:66:f1:75:47:0a:e9:92:54:92:18:e9:
                    31:c1:9c:91:41:c5:3a:4b:9b:14:39:c6:7e:4f:fa:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:73:19:AF:9A:8B:AB:20:53:3B:6F:C7:76:49:62:7D:8D:0E:45
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36332e302f32342d3234203d3e20323639393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:c6:2e:17:e0:b0:07:08:1a:be:80:b3:33:24:89:c7:c3:
         01:4b:f6:c9:4d:47:64:7b:23:3f:86:e2:65:f6:c9:5a:7e:f5:
         95:4b:10:48:ec:ff:2c:e4:a8:e4:05:fc:39:da:c7:75:af:a2:
         3f:63:07:5d:a0:c8:e6:6c:1f:c4:c4:9c:92:67:4c:85:cd:fb:
         59:8e:b9:f8:0a:65:79:dc:db:05:b5:31:7d:ff:7b:fc:1a:78:
         63:24:10:9d:4c:23:25:30:3f:7b:8d:11:dd:e9:d2:4a:ba:4c:
         59:5a:bd:a1:2d:0d:dd:58:ed:bc:31:50:94:74:ae:ac:1d:16:
         b7:63:94:d0:3a:af:94:b8:7e:2f:bb:04:5b:20:58:e9:79:d6:
         44:59:d6:e5:9a:b2:a1:71:83:02:f3:95:95:ec:4a:8b:2d:a1:
         93:70:c6:c6:ba:db:d4:4b:20:9b:d4:73:8b:d9:b0:18:ea:f3:
         be:5e:51:19:0b:8c:62:ec:e0:cc:82:46:ac:bc:77:20:2d:d5:
         b1:60:59:3a:9e:70:75:89:e1:21:b3:9e:86:a9:50:98:b9:48:
         e0:d7:dc:d6:34:b1:bb:cc:7f:4e:04:81:3a:3f:f4:98:65:87:
         c5:06:04:83:36:a3:dc:9c:20:39:19:a2:a3:17:04:2b:37:bd:
         7a:be:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:05 2025 by rpki-client