Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/3139312e39372e38382e302f32312d3234203d3e20323633323132.roa
File:                     3139312e39372e38382e302f32312d3234203d3e20323633323132.roa (raw, json)
Hash identifier:          fL1NUnoLCYpO3gILu9xIitUU/F7FjLMaeSRijtGeZkQ=
Subject key identifier:   0D:84:BA:5C:C9:1F:A3:47:85:D7:34:AA:F1:E8:3E:05:A0:2B:C3:35
Certificate issuer:       /CN=AFBD0215C0EE827E1DDF72219656649845EB2918
Certificate serial:       4C4FF5D2219B7C2C99BD6FB142CA25E98B437434
Authority key identifier: AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/3139312e39372e38382e302f32312d3234203d3e20323633323132.roa
Signing time:             Tue 04 Feb 2025 18:51:06 +0000
ROA not before:           Tue 04 Feb 2025 18:46:06 +0000
ROA not after:            Tue 03 Feb 2026 18:51:06 +0000
asID:                     263212
IP address blocks:        191.97.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4f:f5:d2:21:9b:7c:2c:99:bd:6f:b1:42:ca:25:e9:8b:43:74:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBD0215C0EE827E1DDF72219656649845EB2918
        Validity
            Not Before: Feb  4 18:46:06 2025 GMT
            Not After : Feb  3 18:51:06 2026 GMT
        Subject: CN=0D84BA5CC91FA34785D734AAF1E83E05A02BC335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:d2:7c:95:04:db:b0:d6:6c:a4:18:3a:bf:
                    ab:b0:83:67:ee:0f:11:97:22:76:7b:3a:9f:53:4e:
                    f2:97:78:64:87:b3:65:f5:22:8b:ca:7d:ac:1d:44:
                    a5:84:c2:de:4e:a6:16:3b:de:bc:f9:12:bd:55:70:
                    78:03:4f:8b:55:b8:bd:01:5d:28:3a:27:bc:2b:7a:
                    c8:87:bb:45:55:17:c4:ba:a0:53:6e:43:0b:27:25:
                    9d:7c:7d:84:60:48:4c:c9:a5:86:f2:2e:c7:da:ae:
                    b0:53:53:4d:7e:dc:08:f7:ae:f8:fa:ec:c1:d2:02:
                    ac:10:ee:d0:c0:39:41:d5:31:8a:d6:3f:fe:90:52:
                    6b:b3:cc:81:98:7e:64:3f:92:4e:8f:a4:d0:87:e9:
                    1b:8a:f2:c8:d7:be:9a:0f:65:23:ee:da:e2:e8:ff:
                    ba:75:68:9d:54:0c:52:58:89:57:2e:06:26:0e:80:
                    4c:4d:02:10:a4:0a:8e:dc:ec:1b:ed:c7:4e:6e:71:
                    34:7b:b0:06:34:41:07:0b:ab:3c:65:ca:a7:01:c7:
                    6e:8c:7c:98:5c:f8:d5:4b:ee:b6:23:05:36:6e:a2:
                    4b:5e:82:92:bb:46:cd:d4:bd:16:f5:52:85:f8:62:
                    c4:2f:bc:28:10:0a:72:7e:26:b6:a4:6e:6a:b1:60:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:BA:5C:C9:1F:A3:47:85:D7:34:AA:F1:E8:3E:05:A0:2B:C3:35
            X509v3 Authority Key Identifier:
                keyid:AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/3139312e39372e38382e302f32312d3234203d3e20323633323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:55:03:62:72:84:d8:fe:17:28:66:eb:7f:ac:a1:fb:c3:
         c1:d0:da:9d:e3:53:be:92:0c:f6:39:c5:3b:91:61:db:45:01:
         c8:18:7a:f4:70:a1:3f:53:c6:fc:ec:3b:dc:19:b2:92:f2:5a:
         8e:e7:f2:b3:59:ba:1e:3b:4e:71:ae:ed:94:15:81:e1:b0:2f:
         4c:d0:44:06:ed:0c:b3:9a:e0:39:9d:38:bb:66:c4:0c:eb:a5:
         c2:9a:c6:95:fb:c6:b6:16:f4:68:e1:e0:5f:05:d8:36:36:e0:
         79:6b:05:92:96:43:2a:39:9a:cf:b5:13:0c:38:eb:4a:17:d4:
         06:b6:18:aa:cf:0a:fc:b7:4e:be:68:1f:8f:0a:2f:25:8f:93:
         4c:1d:59:12:88:bd:d3:3c:dd:29:cc:72:7e:7d:7b:fe:27:90:
         c2:5b:b2:4d:ff:d1:f8:82:6e:5f:b1:6f:1a:68:db:89:27:b4:
         63:f4:aa:a7:c0:0e:9f:13:27:51:da:60:29:d8:f6:85:c9:d2:
         c3:0f:9d:01:1c:1b:ac:5f:07:bd:ab:ae:9b:d8:33:1a:c6:24:
         55:6d:6a:70:f8:1f:22:b5:c1:9c:66:0a:17:e6:72:b7:9b:91:
         72:59:31:74:1f:9d:c2:90:63:47:55:3a:4b:58:c0:b8:98:f9:
         51:dd:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:16 2025 by rpki-client