Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa
File:                     3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa (raw, json)
Hash identifier:          EZI/8b9Vw6Y82OLsZr/uk/KvsPhxwpfVwW/Osh9ViFI=
Subject key identifier:   91:7F:CC:17:36:14:F4:56:5A:BC:B8:CA:1B:D9:CE:09:69:18:2A:6B
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       7607B6E070A8DD7E679FD2126B296199AA5FA121
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa
Signing time:             Mon 07 Apr 2025 16:14:08 +0000
ROA not before:           Mon 07 Apr 2025 16:09:08 +0000
ROA not after:            Mon 06 Apr 2026 16:14:08 +0000
asID:                     265787
IP address blocks:        192.141.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:07:b6:e0:70:a8:dd:7e:67:9f:d2:12:6b:29:61:99:aa:5f:a1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Apr  7 16:09:08 2025 GMT
            Not After : Apr  6 16:14:08 2026 GMT
        Subject: CN=917FCC173614F4565ABCB8CA1BD9CE0969182A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:a5:79:2f:19:1e:7c:9c:8a:82:1a:de:9f:
                    3f:7b:dc:20:57:56:20:7d:a3:fe:5b:64:1e:f9:c5:
                    da:aa:cb:f1:f2:ae:fb:80:68:80:fd:71:0b:18:02:
                    a9:92:f5:97:a8:f4:3f:d0:6e:3a:b2:d8:23:33:d3:
                    df:1f:f0:e2:9d:e2:40:d4:e5:30:3e:7f:9d:10:0b:
                    6d:f2:40:7b:c3:58:08:4f:13:f9:13:36:cb:9d:d5:
                    d1:12:3f:47:1c:27:62:c8:21:a4:ca:41:8c:9e:fc:
                    f9:9e:9f:44:1f:9e:55:a2:0c:3b:61:11:2e:f3:21:
                    30:30:48:52:05:13:21:90:63:40:9e:ef:20:13:d2:
                    5e:b3:f1:e1:e1:bf:88:8c:ac:6a:e3:c2:53:b7:dc:
                    74:8a:8b:fd:67:bd:5a:40:39:de:61:a4:bc:64:39:
                    81:ad:f8:7a:ea:5a:c5:5b:08:7f:b5:00:9f:ba:b6:
                    5d:60:18:4b:cc:14:c4:d8:67:65:85:21:6a:b8:d6:
                    11:b3:bc:ac:e6:91:90:db:a5:ec:68:40:84:48:67:
                    d6:53:1a:42:bc:00:86:33:35:33:2f:e4:66:94:dd:
                    ac:7b:81:b1:7b:51:bd:2e:f6:46:5d:4b:5a:28:49:
                    c0:ae:90:77:b0:42:d9:af:95:1c:ff:07:2e:eb:2d:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7F:CC:17:36:14:F4:56:5A:BC:B8:CA:1B:D9:CE:09:69:18:2A:6B
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:b8:8b:b7:df:93:1d:53:41:af:2e:75:ff:40:5b:a4:99:
         a9:48:70:15:ad:1b:cb:34:f8:f9:a8:a9:c7:fa:0c:e7:a1:57:
         c0:aa:a2:5b:9a:6c:ec:04:94:2c:18:fc:17:aa:82:d0:ec:ee:
         d8:72:5f:a5:5a:a8:2f:a4:e7:ea:1a:43:40:96:5e:19:23:c0:
         b8:11:2d:f5:a2:45:70:39:3e:ae:8f:58:61:b5:41:a9:e0:4b:
         ed:50:52:f5:3f:54:8c:c7:c2:19:f7:b7:6c:ea:cd:d6:4b:53:
         98:67:77:30:9e:ee:5b:8c:4e:de:86:e4:c6:1a:e3:fd:b2:24:
         91:ba:d1:04:c0:88:30:39:72:6b:3e:c0:b5:90:55:16:3f:6f:
         ad:04:34:eb:bb:b8:d1:b5:81:68:84:78:82:71:35:66:90:d5:
         03:e8:0a:1a:55:2f:e6:39:b3:f1:ad:1b:e2:2c:c8:05:a0:9a:
         7e:cc:03:75:99:a2:91:06:e1:9f:fb:93:36:0a:ce:c5:61:07:
         0c:1c:92:27:44:9a:f1:02:1c:56:9b:11:bb:b2:e6:36:a9:01:
         84:c9:eb:cd:ca:af:8e:28:34:04:b5:95:6b:a0:90:11:5a:bb:
         8f:b5:7a:63:df:2d:9f:8a:0e:20:68:1a:fb:aa:90:fb:83:ad:
         0a:d8:ea:0c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdge24HCo3X5nn9ISaylhmapfoSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFNDVEOThGNDFDOUFCNzA2MUY4NEExOUMxOTA0MTRE
NUNCNEZDQTAeFw0yNTA0MDcxNjA5MDhaFw0yNjA0MDYxNjE0MDhaMDMxMTAvBgNV
BAMTKDkxN0ZDQzE3MzYxNEY0NTY1QUJDQjhDQTFCRDlDRTA5NjkxODJBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdM6V5LxkefJyKghrenz973CBX
ViB9o/5bZB75xdqqy/HyrvuAaID9cQsYAqmS9Zeo9D/Qbjqy2CMz098f8OKd4kDU
5TA+f50QC23yQHvDWAhPE/kTNsud1dESP0ccJ2LIIaTKQYye/Pmen0QfnlWiDDth
ES7zITAwSFIFEyGQY0Ce7yAT0l6z8eHhv4iMrGrjwlO33HSKi/1nvVpAOd5hpLxk
OYGt+HrqWsVbCH+1AJ+6tl1gGEvMFMTYZ2WFIWq41hGzvKzmkZDbpexoQIRIZ9ZT
GkK8AIYzNTMv5GaU3ax7gbF7Ub0u9kZdS1ooScCukHewQtmvlRz/By7rLasJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkX/MFzYU9FZavLjKG9nOCWkYKmswHwYDVR0j
BBgwFoAUfORdmPQcmrcGH4ShnBkEFNXLT8owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUIwOEVDMkFDNDQ2RTMwNEQ2MjM4MEQ5MUY5RDVCNDE0
QTY0Njg4NEI4RkZGOUExMzAyNzFCQzkyM0QxNTI5LzAvN0NFNDVEOThGNDFDOUFC
NzA2MUY4NEExOUMxOTA0MTRENUNCNEZDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Q0U0NUQ5OEY0MUM5QUI3MDYx
Rjg0QTE5QzE5MDQxNEQ1Q0I0RkNBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FCMDhFQzJBQzQ0NkUzMDRENjIzODBEOTFGOUQ1QjQxNEE2NDY4ODRC
OEZGRjlBMTMwMjcxQkM5MjNEMTUyOS8wLzMxMzkzMjJlMzEzNDMxMmUzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwI0k
MA0GCSqGSIb3DQEBCwUAA4IBAQBa97iLt9+THVNBry51/0BbpJmpSHAVrRvLNPj5
qKnH+gznoVfAqqJbmmzsBJQsGPwXqoLQ7O7Ycl+lWqgvpOfqGkNAll4ZI8C4ES31
okVwOT6uj1hhtUGp4EvtUFL1P1SMx8IZ97ds6s3WS1OYZ3cwnu5bjE7ehuTGGuP9
siSRutEEwIgwOXJrPsC1kFUWP2+tBDTru7jRtYFohHiCcTVmkNUD6AoaVS/mObPx
rRviLMgFoJp+zAN1maKRBuGf+5M2Cs7FYQcMHJInRJrxAhxWmxG7suY2qQGEyevN
yq+OKDQEtZVroJARWruPtXpj3y2fig4gaBr7qpD7g60K2OoM
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:08:48 2025 by rpki-client