Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3133322e3235352e3230382e302f32322d3234203d3e20323634363335.roa
File:                     3133322e3235352e3230382e302f32322d3234203d3e20323634363335.roa (raw, json)
Hash identifier:          b6ewDq/vuccmEB6OzSE6dIn5eKr2Kom/+LT0oIj48yY=
Subject key identifier:   C0:5D:D8:AC:41:E6:B6:5B:D2:26:7D:A8:1C:D6:23:58:ED:CB:07:5E
Certificate issuer:       /CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
Certificate serial:       192499304FF8B527D77F5838C1EBC893D9333CFD
Authority key identifier: 59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3133322e3235352e3230382e302f32322d3234203d3e20323634363335.roa
Signing time:             Tue 04 Feb 2025 20:07:45 +0000
ROA not before:           Tue 04 Feb 2025 20:02:45 +0000
ROA not after:            Tue 03 Feb 2026 20:07:45 +0000
asID:                     264635
IP address blocks:        132.255.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:24:99:30:4f:f8:b5:27:d7:7f:58:38:c1:eb:c8:93:d9:33:3c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
        Validity
            Not Before: Feb  4 20:02:45 2025 GMT
            Not After : Feb  3 20:07:45 2026 GMT
        Subject: CN=C05DD8AC41E6B65BD2267DA81CD62358EDCB075E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:a5:46:22:e5:1c:01:ce:85:84:f1:59:d8:
                    d8:8b:78:c5:2a:dc:d7:3b:9a:ca:61:09:20:52:1b:
                    38:be:bc:0d:c4:de:cc:62:f7:02:99:fd:41:bc:ec:
                    f9:8a:f5:54:e1:d7:64:b9:e4:4e:e9:db:6d:2a:7c:
                    33:83:26:37:e3:ec:46:f0:76:5f:a0:ae:bd:27:d7:
                    c2:cd:99:61:2c:85:a4:47:29:19:fa:f8:2f:f1:51:
                    ea:48:42:9a:ad:a2:c0:15:07:21:19:17:75:e4:9a:
                    64:9e:79:bb:77:46:d3:16:e3:da:c5:0a:a7:91:b8:
                    1f:91:03:83:15:10:96:11:bd:1c:1a:8d:2b:54:5b:
                    a2:0c:9c:62:81:c3:3d:4d:d3:57:46:a6:d0:73:ba:
                    b3:f0:a6:b1:ce:96:75:2f:24:c8:23:c5:05:cf:c9:
                    43:6b:20:64:b2:d0:51:f8:de:45:6e:43:9c:80:d4:
                    a3:29:3a:01:61:0e:f6:ca:1e:85:ae:1d:b3:8b:e9:
                    bd:ea:ab:34:66:24:3f:8a:97:8a:b1:18:18:83:88:
                    d3:25:0c:47:51:51:58:79:85:24:3b:ed:ba:00:0e:
                    53:59:75:13:5f:3d:76:0f:83:87:15:e2:3c:7f:43:
                    dc:26:ba:5b:78:20:3d:34:1f:c7:b0:c6:22:ee:93:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5D:D8:AC:41:E6:B6:5B:D2:26:7D:A8:1C:D6:23:58:ED:CB:07:5E
            X509v3 Authority Key Identifier:
                keyid:59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3133322e3235352e3230382e302f32322d3234203d3e20323634363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:24:7c:67:b8:69:d0:2e:10:cd:cf:f9:cb:cb:0c:55:07:
         b6:e9:23:13:c8:99:5a:8e:fb:8a:82:19:fe:25:9d:14:29:f8:
         fe:25:f1:7d:fc:fa:5d:66:8b:79:b5:29:17:6f:66:39:09:94:
         58:90:85:6d:e1:b1:4e:52:44:2e:93:0b:42:72:00:67:41:b0:
         97:79:89:2c:83:aa:ab:0f:ba:09:2b:d4:8f:90:e0:04:61:fd:
         bb:87:14:40:f0:3d:e8:d8:6e:8d:68:67:35:77:85:3e:e2:a3:
         a3:3f:94:16:5a:ae:94:a3:cb:bc:d6:2b:fc:89:65:6a:c1:13:
         4d:1b:18:a7:2d:0f:6d:4c:91:09:ca:aa:dc:05:0f:81:aa:39:
         85:0b:5c:85:9d:3c:04:87:43:e6:db:73:fc:b5:c5:f2:15:0c:
         64:eb:38:e1:ad:e1:13:d9:5f:e3:d1:4f:a0:82:35:71:eb:81:
         bb:55:08:14:79:ce:02:5c:42:93:95:d4:5c:95:6c:2e:1a:d0:
         3b:a9:ec:18:ac:bc:18:96:ae:19:02:a5:bd:5b:d3:61:80:fd:
         ff:4c:e1:51:d3:90:53:c9:89:1d:a7:8b:ce:34:74:f5:fe:64:
         c3:11:52:82:11:46:8e:67:e5:50:f6:4d:05:b8:fc:73:eb:54:
         68:89:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:31:06 2025 by rpki-client