Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
File:                     3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa (raw, json)
Hash identifier:          w70Dy2QWWYWkTRnsZc3vRF7ogD9liqKjinPZie/94q4=
Subject key identifier:   5E:9D:9F:23:F7:F2:47:3A:80:8B:29:A2:9C:42:C9:11:52:BD:B4:8E
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       6FE78823B98699195270FB3B29E6F4228BB837AA
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:18:08 +0000
ROA not before:           Tue 04 Feb 2025 18:13:08 +0000
ROA not after:            Tue 03 Feb 2026 18:18:08 +0000
asID:                     19905
IP address blocks:        132.251.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e7:88:23:b9:86:99:19:52:70:fb:3b:29:e6:f4:22:8b:b8:37:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:08 2025 GMT
            Not After : Feb  3 18:18:08 2026 GMT
        Subject: CN=5E9D9F23F7F2473A808B29A29C42C91152BDB48E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:cf:44:05:11:db:4f:f5:2c:3e:4a:bc:7e:
                    fe:66:e3:2a:ba:0c:00:af:73:e9:48:29:da:be:3a:
                    39:96:ee:6d:c4:67:11:c2:c2:ca:24:d4:b5:80:53:
                    e9:76:c0:7c:3c:6b:d1:77:2d:f8:b9:ba:7d:c7:03:
                    65:92:f2:62:e7:3d:aa:88:3d:58:5a:56:38:8c:d1:
                    6b:cf:fb:c9:06:7b:ab:6d:11:c4:20:e6:93:d4:d0:
                    4c:10:e4:2b:f9:01:6c:e3:26:d7:0f:08:73:fa:d2:
                    9a:95:53:cd:14:f6:a8:42:b5:5c:52:87:2b:ea:2b:
                    a3:03:b7:67:01:90:50:f6:68:5c:c6:06:3c:4b:7c:
                    db:3d:14:12:5b:f0:57:a9:2f:2d:40:c5:ef:bc:9a:
                    2a:e5:ae:15:71:86:e8:f8:47:67:4b:22:aa:f2:15:
                    d5:20:c6:f1:91:29:18:60:b4:2f:f7:7d:44:2a:f4:
                    8a:d0:0b:81:bd:0b:31:d6:e0:0d:a7:d5:e1:d8:f2:
                    97:15:2a:c1:93:1e:fd:2f:cd:f2:26:ef:3e:a5:a8:
                    18:fd:97:a6:4e:9b:e3:a9:29:63:e7:d9:b8:6c:14:
                    d3:36:bd:16:3a:87:9c:ce:dc:84:d5:9b:a8:77:e7:
                    3d:04:a7:5e:fe:d6:85:26:d6:75:4a:34:20:16:39:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:9F:23:F7:F2:47:3A:80:8B:29:A2:9C:42:C9:11:52:BD:B4:8E
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:d3:12:ce:27:c0:cc:3b:cb:b4:79:a3:ab:92:cc:6c:d8:
         6e:9e:c6:ff:54:8e:a6:b6:75:73:3c:1f:ca:60:ee:bd:00:a4:
         a3:a1:9f:d9:e0:ff:34:c8:57:fa:26:41:d2:c3:97:a2:5a:6d:
         75:86:39:91:d8:28:66:cc:7b:1a:b7:bc:07:5f:22:ae:9e:f4:
         49:53:0c:78:e3:52:9a:de:6e:df:f6:fe:99:fc:30:b9:ba:c8:
         98:45:bb:df:c1:1a:87:eb:18:46:e6:4f:d5:5e:25:c2:e5:18:
         71:90:02:af:59:d2:29:b2:73:62:00:9a:f1:1d:53:13:34:08:
         33:a1:6c:f5:aa:7e:6a:3b:e6:bf:31:3c:2f:2c:38:21:87:dc:
         98:a2:3c:d6:c3:98:70:d1:0f:e6:d8:d7:cd:a2:85:b9:c7:70:
         a4:87:e3:c1:19:25:1b:3c:ee:49:c9:e9:17:2d:94:22:9d:a2:
         94:3d:63:4b:c6:46:a5:dc:36:d3:aa:6c:be:ec:4a:fb:c3:91:
         e9:07:4a:09:04:7f:34:d4:e8:bf:3e:bd:bb:9b:42:2b:cd:a6:
         86:8c:38:68:cf:29:96:37:3b:20:61:8d:fd:ac:6a:71:bb:5b:
         c7:01:ad:d0:ce:ee:7f:03:7a:29:4e:69:22:ef:7d:3a:96:78:
         ec:d1:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:07 2025 by rpki-client