Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B5F881241B842BB25A6D577AAF6D6E6487EB0E425D017149973C22B5BB90A05/0/3139322e3138382e35352e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35352e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          Q8Ock9t8BN1rrT4Ij8HFMmLAGkRO/I7lu0Si+d9PwPY=
Subject key identifier:   35:1A:F8:7B:85:05:50:17:F6:45:CE:B5:8D:C0:64:A5:04:DE:A9:B1
Certificate issuer:       /CN=9D418C079A552FF8E3477C5B6E605EF6EE1A9414
Certificate serial:       47868C5439B53665969DEA20847F67EF3D68B16A
Authority key identifier: 9D:41:8C:07:9A:55:2F:F8:E3:47:7C:5B:6E:60:5E:F6:EE:1A:94:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D418C079A552FF8E3477C5B6E605EF6EE1A9414.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B5F881241B842BB25A6D577AAF6D6E6487EB0E425D017149973C22B5BB90A05/0/3139322e3138382e35352e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:54:12 +0000
ROA not before:           Tue 04 Feb 2025 18:49:12 +0000
ROA not after:            Tue 03 Feb 2026 18:54:12 +0000
asID:                     61468
IP address blocks:        192.188.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B5F881241B842BB25A6D577AAF6D6E6487EB0E425D017149973C22B5BB90A05/0/9D418C079A552FF8E3477C5B6E605EF6EE1A9414.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B5F881241B842BB25A6D577AAF6D6E6487EB0E425D017149973C22B5BB90A05/0/9D418C079A552FF8E3477C5B6E605EF6EE1A9414.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D418C079A552FF8E3477C5B6E605EF6EE1A9414.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:86:8c:54:39:b5:36:65:96:9d:ea:20:84:7f:67:ef:3d:68:b1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D418C079A552FF8E3477C5B6E605EF6EE1A9414
        Validity
            Not Before: Feb  4 18:49:12 2025 GMT
            Not After : Feb  3 18:54:12 2026 GMT
        Subject: CN=351AF87B85055017F645CEB58DC064A504DEA9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:ae:cf:8c:47:99:17:33:5c:ad:6c:f9:cf:
                    36:11:f9:5e:6f:53:ae:e1:9f:c1:b2:27:db:3b:32:
                    72:94:8a:0c:66:7e:0f:2f:bc:d2:df:af:82:17:12:
                    77:cb:05:73:ca:73:27:c2:42:b6:b9:c1:1e:73:0c:
                    9b:c4:bc:22:56:e7:67:83:ce:87:90:ed:81:7d:31:
                    e4:53:69:c2:9b:39:f9:80:0d:c6:fe:56:7c:ec:ce:
                    9d:10:b9:17:71:50:5d:08:81:f5:40:d3:d1:76:ee:
                    16:ef:d8:02:6a:fc:1f:29:7f:9e:10:39:aa:c8:31:
                    a3:b0:b3:8f:6b:df:96:4f:56:d0:ce:e9:a8:e6:52:
                    bd:a9:27:e3:9b:03:d5:5a:79:3b:5c:12:45:ee:dd:
                    51:0d:60:9c:53:73:51:92:4d:9f:ad:3d:12:3a:9b:
                    44:31:cd:46:eb:e7:5a:4a:50:92:1d:6e:b7:8c:65:
                    e8:fc:fd:27:d3:56:b7:22:24:c0:8c:8b:b3:15:4a:
                    9c:a2:8b:5d:af:b2:b7:1e:c7:0b:ce:f0:65:26:9d:
                    b5:f3:2d:8c:c4:c6:4d:4d:ec:12:db:a9:21:5c:e3:
                    e5:87:85:a0:b5:bb:80:05:d2:7d:ba:db:25:24:30:
                    06:28:49:6e:f2:2c:c6:18:1e:88:cb:a0:65:e0:a2:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:F8:7B:85:05:50:17:F6:45:CE:B5:8D:C0:64:A5:04:DE:A9:B1
            X509v3 Authority Key Identifier:
                keyid:9D:41:8C:07:9A:55:2F:F8:E3:47:7C:5B:6E:60:5E:F6:EE:1A:94:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B5F881241B842BB25A6D577AAF6D6E6487EB0E425D017149973C22B5BB90A05/0/9D418C079A552FF8E3477C5B6E605EF6EE1A9414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D418C079A552FF8E3477C5B6E605EF6EE1A9414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B5F881241B842BB25A6D577AAF6D6E6487EB0E425D017149973C22B5BB90A05/0/3139322e3138382e35352e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:ba:7f:df:ed:d9:2c:03:58:0e:6d:ae:9c:b1:da:7d:cc:
         0f:3c:f1:33:3d:54:ab:65:d5:30:ba:7b:5f:ac:67:86:e1:ae:
         0d:6f:77:8a:49:e9:c3:c5:ee:29:ed:ca:85:0c:e9:9a:2f:f4:
         01:51:e7:50:92:69:77:71:21:c6:7c:3b:a8:90:6b:09:5c:08:
         3f:b6:63:7d:4d:5f:5b:c8:6e:55:4a:c2:7c:ab:7a:4c:4b:50:
         6e:ba:93:f2:9b:5c:11:d6:9a:a5:06:fc:04:19:71:02:c1:65:
         06:34:09:20:cc:ea:90:ab:52:82:4c:ef:74:82:b3:9b:79:ab:
         4f:57:fb:d5:ee:50:2a:ce:8a:a4:18:21:2e:3e:04:d4:46:26:
         f8:85:7a:6d:53:bf:f4:58:14:51:00:97:95:be:1e:99:15:2b:
         12:e4:7a:40:40:07:dd:38:dd:1a:25:80:6f:5a:3b:4b:ea:04:
         f1:4b:70:b5:c6:3a:0c:a1:10:a9:e6:2c:3e:6a:90:e5:e8:ed:
         4d:c2:b1:f7:ba:c2:43:3f:3a:16:b7:22:94:54:94:5c:aa:85:
         cf:1e:d2:a7:cd:dd:5e:97:a9:87:c3:90:7f:6a:cb:67:c9:4f:
         3f:3d:6e:d7:30:70:b9:27:21:89:23:5a:7b:59:59:1f:5f:a4:
         a3:b5:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:15 2025 by rpki-client