Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e302e302f31392d3234203d3e203332303938.roa
File:                     3138372e3235312e302e302f31392d3234203d3e203332303938.roa (raw, json)
Hash identifier:          Jf60PYaMjxPpYMwt+rPaTa1OJem2lJ3GoziFkCkqCCo=
Subject key identifier:   45:74:2F:FA:18:C5:71:2A:D5:20:C6:D1:7B:AF:C3:7C:E4:CD:CB:EF
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       312A0D6E4557D57FF1C756931F6E73FA6313B400
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e302e302f31392d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:05 +0000
ROA not before:           Tue 04 Feb 2025 18:43:05 +0000
ROA not after:            Tue 03 Feb 2026 18:48:05 +0000
asID:                     32098
IP address blocks:        187.251.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:0d:6e:45:57:d5:7f:f1:c7:56:93:1f:6e:73:fa:63:13:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:05 2025 GMT
            Not After : Feb  3 18:48:05 2026 GMT
        Subject: CN=45742FFA18C5712AD520C6D17BAFC37CE4CDCBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:e7:d0:01:6f:c3:03:95:f3:d7:11:67:0c:
                    c0:af:29:0f:7c:bd:07:11:cf:00:15:75:2e:d6:eb:
                    24:0e:45:89:a4:24:16:b5:76:4d:fe:9f:81:ac:61:
                    da:ae:54:ee:73:4b:2b:2e:d2:2d:78:a8:43:24:ea:
                    73:ae:85:ab:6c:89:f2:aa:17:80:85:37:7a:02:4c:
                    e1:56:09:34:66:80:a2:ea:b0:b1:48:4a:f7:50:a6:
                    1c:cc:c3:5f:74:4d:58:25:da:3c:f1:33:e7:93:c3:
                    6c:a0:38:72:7a:21:0d:59:34:43:0f:c6:2c:16:26:
                    4d:d0:cf:fd:e0:fd:38:e7:a8:dd:0c:0d:7d:d8:d4:
                    ac:24:cf:35:e3:e4:aa:a1:08:8c:f1:2a:46:a9:a8:
                    29:9b:90:90:62:76:9c:7d:2d:64:50:45:f8:ed:13:
                    11:b1:9e:fa:a3:60:d0:ed:e5:33:f7:6e:25:ca:b2:
                    5b:b9:7e:65:ec:97:00:90:5b:fb:14:b4:6e:51:df:
                    09:c7:56:41:3e:32:86:a5:99:49:c5:69:2b:d2:b7:
                    94:a1:09:32:fb:ca:ad:39:32:df:18:03:04:50:29:
                    4b:0a:ab:00:87:dd:dc:0e:77:9f:6b:9f:a0:63:0d:
                    b7:b5:44:ba:b6:b5:11:42:d8:a7:d3:4e:3f:9e:a6:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:2F:FA:18:C5:71:2A:D5:20:C6:D1:7B:AF:C3:7C:E4:CD:CB:EF
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e302e302f31392d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:33:38:64:1e:f2:58:a2:ad:38:86:66:1a:b0:8d:ee:cf:b1:
         f9:e9:f3:2b:e6:03:7d:0e:91:47:c4:f8:a9:9a:10:ef:1a:57:
         b1:ae:e2:23:7a:f1:79:f0:3b:7a:bc:90:5e:e9:a4:09:cb:e5:
         db:48:e8:72:e0:99:b9:d1:14:5e:8e:f9:32:a2:4e:e3:c7:99:
         a0:7b:7e:72:ab:38:6d:14:51:b5:89:cc:a0:bf:10:e8:f4:e9:
         9d:70:5f:37:7b:e3:0f:41:35:9f:9a:d5:62:ca:40:93:75:f5:
         ca:05:b6:3f:bd:48:9d:9f:33:50:61:cd:71:29:52:b6:e2:9f:
         08:a9:5d:d1:69:11:75:af:9c:0a:43:4b:ab:f9:c9:05:30:9c:
         57:a3:5e:2a:9a:47:13:74:17:bb:57:b5:c1:26:fc:97:7d:0d:
         90:67:8e:81:87:96:d0:c0:01:58:16:7a:58:1f:3a:7b:91:99:
         f7:fc:87:04:53:6b:b7:37:43:51:6e:ce:45:c5:9b:ca:17:cc:
         45:99:7e:b9:73:10:d6:5d:eb:cb:d7:4d:d4:20:6f:53:10:86:
         94:07:ed:24:9e:30:a3:8a:31:28:42:95:c1:05:94:33:fd:d6:
         a3:ad:c7:29:60:8e:fd:8b:fd:d9:27:fe:25:db:10:2e:e6:38:
         97:60:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:57 2025 by rpki-client