Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3234203d3e203131393437.roa
File:                     3139362e33322e33322e302f31392d3234203d3e203131393437.roa (raw, json)
Hash identifier:          W6861/MFt/j/r2EAyUV4yzl05zaYGIIF9ztm3l8ocj8=
Subject key identifier:   B4:4B:49:1D:05:31:06:47:FF:D6:1C:0A:E4:11:E6:C7:30:5F:1C:B3
Certificate issuer:       /CN=E3639ACB469ACD09A9A4D97F8416716237860877
Certificate serial:       19279AE5257D7B7627B31249D5AC52A6F8FBEBFE
Authority key identifier: E3:63:9A:CB:46:9A:CD:09:A9:A4:D9:7F:84:16:71:62:37:86:08:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3234203d3e203131393437.roa
Signing time:             Tue 04 Feb 2025 18:22:35 +0000
ROA not before:           Tue 04 Feb 2025 18:17:35 +0000
ROA not after:            Tue 03 Feb 2026 18:22:35 +0000
asID:                     11947
IP address blocks:        196.32.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:27:9a:e5:25:7d:7b:76:27:b3:12:49:d5:ac:52:a6:f8:fb:eb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3639ACB469ACD09A9A4D97F8416716237860877
        Validity
            Not Before: Feb  4 18:17:35 2025 GMT
            Not After : Feb  3 18:22:35 2026 GMT
        Subject: CN=B44B491D05310647FFD61C0AE411E6C7305F1CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:e1:e3:db:19:e0:bf:88:ad:d6:d8:9a:39:
                    69:d7:1b:e8:6b:e8:9c:38:b1:22:d3:f5:4c:08:f9:
                    be:a8:eb:f5:03:07:27:c9:72:68:79:95:47:19:82:
                    7c:93:51:d7:90:75:30:55:83:87:d9:03:1f:74:60:
                    21:fe:62:68:21:14:26:39:b7:45:46:56:2d:ba:8b:
                    f5:27:50:ef:02:40:2f:06:ab:0c:f7:f9:bf:2e:45:
                    52:05:82:8e:25:c4:72:64:cd:ed:0f:1f:ae:ea:2b:
                    3b:77:3c:fc:7b:9e:4c:28:8c:2b:de:63:d1:e3:c7:
                    9a:79:e8:f1:dc:49:1c:19:c4:f6:1f:3a:10:92:6c:
                    b7:4f:b5:d1:ec:89:83:5b:c1:eb:aa:da:1a:0e:7f:
                    72:90:e7:69:b9:cd:c0:39:10:6a:42:a1:a2:13:2c:
                    d8:5c:68:93:b7:b8:38:61:00:8f:6f:80:2e:5b:24:
                    fd:5e:fd:5e:c0:6e:6a:fd:80:c0:32:19:eb:6d:d4:
                    0d:42:3e:3e:17:ce:0a:df:e5:9d:bf:97:12:fe:ac:
                    42:be:0d:6c:e1:ae:88:57:7f:13:9f:50:89:c8:ec:
                    39:7c:00:ab:29:66:9a:b0:0d:55:60:ec:08:fd:ff:
                    57:69:f2:bc:00:78:e6:36:53:d2:46:e5:ba:cd:0b:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:49:1D:05:31:06:47:FF:D6:1C:0A:E4:11:E6:C7:30:5F:1C:B3
            X509v3 Authority Key Identifier:
                keyid:E3:63:9A:CB:46:9A:CD:09:A9:A4:D9:7F:84:16:71:62:37:86:08:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3234203d3e203131393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:00:6b:01:88:66:85:40:41:31:e4:f4:5c:c8:3c:7e:68:a8:
         e7:c0:91:2e:37:17:85:3a:08:10:4e:ed:aa:91:f5:84:04:a1:
         84:8a:0f:08:01:4a:a4:d4:70:32:23:2c:43:36:f0:b9:3d:52:
         fa:64:14:05:e3:a1:aa:97:37:04:b0:7d:5d:c0:69:4f:11:79:
         81:37:b4:66:87:84:01:82:c9:d4:7c:21:63:bc:6f:26:df:3d:
         a7:99:ae:cb:a9:4a:31:bb:33:e9:a2:66:38:44:15:0c:49:d4:
         89:bd:85:5a:12:8a:ef:dc:2f:8b:72:dc:42:81:7f:8d:5c:e3:
         15:06:48:0b:16:cc:6f:82:88:77:4a:26:c6:53:37:1b:08:19:
         2a:4b:36:5e:f8:b2:45:f2:fe:3b:4f:42:9d:a3:ff:5b:03:78:
         26:26:aa:4f:93:c7:61:75:80:e1:d8:13:d4:2e:6b:85:3e:fb:
         79:2c:36:ea:19:16:f6:ca:70:c9:46:a9:dd:a9:9a:ab:ba:16:
         c5:c4:58:eb:f8:f3:ff:f7:44:18:19:6c:e9:97:50:8a:0f:ce:
         0d:a2:72:d3:bc:06:3a:86:05:01:ab:b7:af:a1:a5:c2:72:bf:
         45:fa:06:af:83:24:05:c2:c9:7f:51:6b:b9:5c:37:b2:6f:d1:
         db:cb:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:51 2025 by rpki-client