Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
File:                     3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier:          4xaI6IFygqk06xWyPKQvOXCxU1hvITvgeyXXPByfSvA=
Subject key identifier:   FF:A2:B7:17:8D:8F:6C:61:07:E9:FB:81:7C:8B:F0:DB:8E:29:63:F6
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       77A24F2B72C0A67DF8EE3799B8AA08D52BAF05E0
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:18:11 +0000
ROA not before:           Tue 04 Feb 2025 18:13:11 +0000
ROA not after:            Tue 03 Feb 2026 18:18:11 +0000
asID:                     19905
IP address blocks:        132.251.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:4f:2b:72:c0:a6:7d:f8:ee:37:99:b8:aa:08:d5:2b:af:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:11 2025 GMT
            Not After : Feb  3 18:18:11 2026 GMT
        Subject: CN=FFA2B7178D8F6C6107E9FB817C8BF0DB8E2963F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:45:4c:56:96:be:18:c4:7e:37:52:68:d5:
                    88:c0:55:a1:56:92:1d:d2:58:18:67:0c:ab:7b:9e:
                    1f:fe:17:6d:9e:67:47:17:51:e9:8f:de:dd:ee:75:
                    fe:f5:d7:40:65:90:ab:33:f7:51:23:d3:c5:0b:e2:
                    12:ef:0e:86:60:ff:02:95:8c:28:f3:e5:21:f0:60:
                    ee:09:93:69:f5:fd:bf:b4:94:12:a7:a6:5d:9a:25:
                    31:d9:b4:25:e0:89:8b:a9:d4:86:98:c4:27:e9:1d:
                    9b:98:32:37:d6:a1:b6:2c:13:ff:46:4f:68:ec:a0:
                    e1:7f:d8:2c:78:56:9d:a0:5d:d9:d9:18:ec:d5:6f:
                    db:21:0d:f5:e7:e9:12:9a:00:50:da:99:ee:6a:e3:
                    3c:55:2c:4b:00:2e:16:41:08:0e:6e:b2:dc:33:c4:
                    d9:ab:b5:24:db:68:59:9a:5e:68:b9:92:c4:03:a5:
                    31:a3:32:0c:24:e1:c3:62:b6:a5:1d:a4:54:98:da:
                    99:1f:9c:bf:66:44:36:59:43:5a:14:ca:6f:66:43:
                    61:b1:8e:44:05:00:2c:fa:05:06:6d:3e:55:91:25:
                    62:ba:c0:ca:64:d1:f2:32:e0:2e:ea:4a:76:5b:46:
                    d4:a3:5c:4d:50:c1:9d:81:ef:60:14:11:9e:f1:e4:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A2:B7:17:8D:8F:6C:61:07:E9:FB:81:7C:8B:F0:DB:8E:29:63:F6
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:9d:a3:65:c8:0a:22:a9:1b:c3:df:ac:c2:b4:e6:48:e1:e3:
         5f:72:58:69:14:7a:a8:1c:94:75:da:bc:ae:cb:da:bb:9b:34:
         3d:d0:8c:9e:e0:66:b5:0d:51:9e:5e:af:51:99:0d:c2:61:16:
         c4:ca:85:7a:a4:98:c5:c3:44:30:5b:00:e9:8c:89:40:19:d7:
         74:cb:66:ac:e2:7d:40:81:89:a8:58:85:85:4e:43:8d:6e:13:
         93:72:cf:6d:b9:df:4d:6b:be:e2:80:a8:3e:47:b1:25:38:e5:
         d7:e2:c2:b4:e3:a7:9f:f9:7c:55:6c:12:a5:92:bc:6b:35:71:
         bd:aa:ef:93:1e:65:75:32:fb:6b:47:1a:64:78:68:34:c3:a8:
         09:78:c0:0f:b4:80:57:21:1e:be:95:db:d9:1e:b8:42:1d:fc:
         bd:f4:4d:55:49:88:52:f7:f5:e6:f9:fb:27:c9:6c:98:00:a9:
         9d:9a:9b:24:51:7c:49:24:66:b8:f8:d8:20:0c:b0:97:f3:cf:
         8c:26:3e:71:3c:37:f2:03:76:f5:d6:07:b9:c6:e6:a1:ec:87:
         e3:bd:91:a6:8e:f1:7b:b8:b0:60:e4:da:d1:75:d8:9a:e6:81:
         5f:a4:f7:43:6b:7d:b0:7e:ba:67:b0:26:98:f9:c4:1f:21:e2:
         c0:35:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:34 2025 by rpki-client