Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203139393035.roa
File:                     3133322e3139312e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          ZOwPVtSZd9LqcXNlMzIiUZA/oDcJcIjuCwkpF0fuuQA=
Subject key identifier:   7C:15:49:EB:94:64:B3:00:37:7F:83:E1:0B:9B:F1:37:69:5A:61:0C
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       DB9F6E226B8C5B4CCBE6114A7CCFC30506E743
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:18:02 +0000
ROA not before:           Tue 04 Feb 2025 18:13:02 +0000
ROA not after:            Tue 03 Feb 2026 18:18:02 +0000
asID:                     19905
IP address blocks:        132.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            db:9f:6e:22:6b:8c:5b:4c:cb:e6:11:4a:7c:cf:c3:05:06:e7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:02 2025 GMT
            Not After : Feb  3 18:18:02 2026 GMT
        Subject: CN=7C1549EB9464B300377F83E10B9BF137695A610C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:cd:69:71:22:ff:49:e9:c5:06:57:b9:e2:
                    6b:81:e0:58:2f:4a:02:dc:30:cc:24:dc:d1:3b:f9:
                    0c:b4:7c:49:d9:20:70:16:c2:37:40:e7:c0:9b:04:
                    5f:06:5f:c6:b7:23:39:c8:7c:5d:68:89:b8:a9:97:
                    ed:13:13:e2:76:02:6b:c1:c1:b0:81:b5:1b:af:d9:
                    4a:8c:ac:e9:8c:54:ee:94:04:7c:19:08:39:c3:7e:
                    ce:eb:2f:f0:8c:f2:2e:0a:48:3e:f4:0a:1d:12:49:
                    3a:17:4b:63:33:35:47:9f:3c:67:52:cf:d0:cf:ce:
                    8a:f5:f7:84:77:e6:cd:76:5f:ec:97:98:e4:26:4b:
                    d9:36:fe:07:7f:ab:a1:2d:93:1f:82:74:72:68:7d:
                    c9:8c:e2:62:d3:47:95:2f:a3:c2:f6:c0:98:69:54:
                    d5:63:d4:d2:b9:d2:69:9a:ff:24:29:75:42:81:11:
                    6c:bd:18:b4:91:83:93:e3:7b:87:b4:7a:96:07:f1:
                    68:dd:f2:6e:71:12:eb:32:07:b2:ce:fe:bb:c8:59:
                    a7:d8:0f:1d:a7:80:81:f7:16:57:fd:2b:0b:d8:8d:
                    dc:b3:45:de:6b:d7:63:51:b2:ba:bb:58:df:05:db:
                    ec:0a:51:32:20:a9:dd:0c:6d:6f:58:cc:79:d6:57:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:49:EB:94:64:B3:00:37:7F:83:E1:0B:9B:F1:37:69:5A:61:0C
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:1a:34:e6:e4:c6:f5:20:40:cf:86:9a:24:66:a1:2d:ba:
         7a:c7:69:57:8e:8a:16:ae:c1:cc:23:05:0d:f5:43:28:54:0b:
         37:fe:e3:89:41:bb:39:98:c5:bc:fa:55:1c:74:98:70:23:0f:
         7f:af:f6:84:7f:3c:a2:a9:4e:2f:91:6a:ab:51:2e:00:1d:09:
         85:4b:9f:ed:cd:56:32:b3:13:72:d6:14:24:19:bc:02:3b:25:
         1f:e4:df:4f:93:5a:5b:fb:1a:a9:2c:ac:a3:21:7f:d6:d3:3a:
         6c:b6:b8:3f:ce:b1:b4:4c:08:39:7b:94:6d:97:94:f1:62:0b:
         13:8e:6f:fa:16:4e:cb:61:dd:eb:bc:c8:ee:ba:3e:e9:d2:9e:
         44:91:fa:e4:7c:13:cc:f1:98:a3:2e:79:68:6d:97:e5:be:99:
         61:96:23:53:10:58:5e:6c:b5:e8:d6:05:b8:56:81:90:98:4c:
         05:41:48:b6:46:39:46:d3:ff:b9:c3:ed:ee:06:57:70:61:28:
         36:5e:bd:8b:a9:d0:4e:a0:36:18:6d:28:3b:94:d3:ac:9b:78:
         c1:ad:2d:26:c5:aa:5d:eb:4c:21:50:c2:4e:bb:5d:3f:25:7d:
         20:04:f6:17:16:68:c1:45:1a:cc:d9:79:e6:e4:9f:27:5f:7e:
         4d:d5:02:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:55 2025 by rpki-client