Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e35362e302e302f31332d3234203d3e2036303537.roa
File:                     3136372e35362e302e302f31332d3234203d3e2036303537.roa (raw, json)
Hash identifier:          2oAEGqvBGeebwxebgBznAcf0NoAEnWfJb5rXSR5xHN8=
Subject key identifier:   F9:45:97:FA:B2:29:B4:1F:96:9D:55:10:12:91:6F:22:F2:EF:28:99
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       08D6F14C89BBEF1DB702BF50DC8B98F7985AC2CC
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e35362e302e302f31332d3234203d3e2036303537.roa
Signing time:             Tue 04 Feb 2025 20:07:17 +0000
ROA not before:           Tue 04 Feb 2025 20:02:17 +0000
ROA not after:            Tue 03 Feb 2026 20:07:17 +0000
asID:                     6057
IP address blocks:        167.56.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d6:f1:4c:89:bb:ef:1d:b7:02:bf:50:dc:8b:98:f7:98:5a:c2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Feb  4 20:02:17 2025 GMT
            Not After : Feb  3 20:07:17 2026 GMT
        Subject: CN=F94597FAB229B41F969D551012916F22F2EF2899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:e9:3f:1b:ae:33:e8:49:bf:fd:c0:53:9a:
                    cb:60:5b:f2:e2:a4:89:30:95:34:82:75:f4:44:54:
                    f5:e7:5c:e3:a1:01:96:c8:ff:4b:12:1a:53:f5:f5:
                    c1:9b:13:61:89:97:bf:ff:35:32:d8:53:65:44:d2:
                    12:e7:49:20:ce:dd:13:18:97:72:89:44:e7:57:99:
                    8e:8a:b7:cc:07:ce:9d:d3:2e:74:be:99:07:37:51:
                    cc:e7:ff:55:69:1d:01:c1:32:42:ac:1a:e6:ef:8f:
                    e4:d0:a6:be:49:8a:4c:f5:13:b7:0c:5f:43:52:7f:
                    04:46:71:4f:1e:23:85:83:8a:3f:49:3d:26:5b:fd:
                    cd:4f:85:60:2c:fe:84:fb:e5:50:ee:e9:8a:6c:f0:
                    82:d5:ac:db:99:81:70:c2:ed:34:6a:ff:14:e9:24:
                    7b:ea:71:b4:fe:6f:e4:ee:4d:15:82:5a:d3:c6:c2:
                    bf:05:03:e8:9d:9e:cd:f5:4d:5b:17:89:30:01:a0:
                    ff:ec:36:36:a1:cc:b2:5e:5f:3c:aa:d8:0e:77:6d:
                    65:be:f5:dd:4c:fc:bd:6d:fc:95:45:1a:ec:90:20:
                    af:84:6a:ba:09:cd:7d:42:58:d6:d5:b7:0b:9d:07:
                    13:e3:75:91:99:6b:08:62:18:0c:58:47:0e:f5:b5:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:97:FA:B2:29:B4:1F:96:9D:55:10:12:91:6F:22:F2:EF:28:99
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e35362e302e302f31332d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.56.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:34:1c:62:08:8b:8d:f4:71:c2:bc:d5:ed:db:8e:71:5a:
         2d:39:29:46:78:1d:63:ef:72:79:21:55:21:6f:0f:b9:26:e1:
         48:0b:0f:b6:ed:e3:34:b5:57:34:a6:ab:29:c7:62:6d:f3:4c:
         01:71:90:a4:2c:0f:f7:46:62:7c:35:22:03:c6:eb:7d:5c:c8:
         2c:2d:ad:98:6e:5d:25:e1:0e:2f:fd:8a:2e:f2:ea:dc:0e:47:
         65:00:d9:6e:eb:c4:00:0e:46:99:34:bc:2c:fd:4f:02:21:95:
         76:bc:42:cf:db:4e:db:dc:57:28:29:bb:73:d8:31:21:e8:e9:
         24:cc:09:50:f5:19:d9:6e:c4:2c:2c:06:17:a9:6a:5e:1c:e0:
         d6:41:7e:25:f8:74:5c:a6:3c:b7:c2:a7:38:af:cd:72:d9:81:
         8a:9b:e6:fa:80:d4:c0:0a:77:e4:7d:41:b7:48:f0:65:ef:81:
         94:c0:de:67:49:55:7d:ac:f5:6c:19:83:6a:cb:ab:d8:69:fb:
         77:42:2e:d2:65:bb:ee:0d:34:b6:68:f8:ea:ef:6f:59:cd:b0:
         e3:12:71:09:2d:96:b0:35:79:be:79:67:27:f6:fb:b6:e5:ce:
         fd:49:b8:f8:56:1e:2f:de:0a:9b:8f:2b:96:6b:cc:e4:89:6a:
         be:f7:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:11:25 2025 by rpki-client