Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e302e302f31362d3234203d3e203230313931.roa
File:                     3134362e3135352e302e302f31362d3234203d3e203230313931.roa (raw, json)
Hash identifier:          lxVVyAUqaM38sLEgok8khvVc69ZzAYWviqHXbHTTD54=
Subject key identifier:   DF:BD:9D:5B:9B:DA:96:37:00:94:51:79:DC:52:BC:12:A9:05:7E:AA
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       3B9B9E2A7D3ADE9AEC6CE3E3F4A9A59E0D1F4731
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e302e302f31362d3234203d3e203230313931.roa
Signing time:             Tue 04 Feb 2025 20:08:49 +0000
ROA not before:           Tue 04 Feb 2025 20:03:49 +0000
ROA not after:            Tue 03 Feb 2026 20:08:49 +0000
asID:                     20191
IP address blocks:        146.155.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9b:9e:2a:7d:3a:de:9a:ec:6c:e3:e3:f4:a9:a5:9e:0d:1f:47:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Feb  4 20:03:49 2025 GMT
            Not After : Feb  3 20:08:49 2026 GMT
        Subject: CN=DFBD9D5B9BDA963700945179DC52BC12A9057EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:0a:88:b0:46:d8:c4:f5:2a:9b:01:2d:44:
                    09:af:21:b7:19:0f:c8:92:fa:24:ec:d9:95:48:61:
                    ff:fb:d3:79:e8:75:c1:6a:69:a6:b4:a8:b2:c9:cc:
                    ec:4b:45:21:0f:82:73:d5:82:78:d2:9a:51:80:8f:
                    c8:6c:c9:de:17:d9:60:d2:f6:53:30:d7:34:7e:ab:
                    18:be:58:c3:86:c4:dc:39:0a:99:46:1a:09:55:7e:
                    46:8f:ef:c3:18:3d:c4:5d:db:6e:7e:52:e3:81:62:
                    13:83:a7:38:7e:7d:a7:63:d4:4a:6b:af:48:45:b3:
                    b7:54:05:96:1e:ae:6e:18:db:af:a4:ae:06:c7:24:
                    bc:fc:e6:00:96:08:09:1e:40:d4:e8:54:c2:f9:3e:
                    ad:c3:21:d5:bd:76:bd:2b:ba:e7:ba:5e:c1:dc:2f:
                    74:99:aa:0d:24:ba:41:43:cf:ac:1f:c4:c2:99:55:
                    49:b2:aa:1e:c3:5d:9b:2f:e2:3d:2f:dd:3f:55:29:
                    df:ab:9d:b2:f6:07:41:12:04:25:06:ad:fd:24:95:
                    25:52:53:7f:f3:98:0d:a7:53:1b:e7:25:de:6e:56:
                    2d:81:e4:95:ee:4d:f5:40:58:57:2b:b5:6e:cc:9e:
                    2b:08:f8:51:42:59:d8:25:d1:d4:e4:3b:af:ab:f7:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BD:9D:5B:9B:DA:96:37:00:94:51:79:DC:52:BC:12:A9:05:7E:AA
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e302e302f31362d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:86:b8:1d:fa:63:f0:07:1a:4c:41:df:55:31:8b:a0:cd:17:
         33:0c:75:26:08:1b:6c:97:2f:68:41:64:61:a3:17:81:7c:1b:
         05:1d:de:d5:dc:6c:b9:5e:6d:c2:fa:49:1d:b0:b1:b0:e6:00:
         d2:dd:78:b1:8a:8a:c5:d6:47:c3:b4:1e:9f:96:2d:ee:94:9a:
         bf:0d:eb:7c:2f:32:fc:e5:3e:fa:4c:41:08:71:76:23:cc:55:
         8c:32:c3:47:76:ab:28:5d:91:97:b5:10:96:d2:3c:9f:89:61:
         03:4d:c8:43:8f:15:1c:97:f0:cc:6b:01:e5:a4:a0:67:10:37:
         57:a3:c8:e1:6a:a4:5c:2e:4b:b1:20:c4:a9:08:12:c8:ba:14:
         be:63:e6:df:44:9f:c4:a2:3a:54:82:b1:f1:79:06:24:8b:b0:
         58:b9:0f:d1:45:35:61:71:d9:29:94:94:5a:1c:38:9f:3b:98:
         c7:2b:c0:32:75:68:9e:fa:60:09:0f:c2:5d:29:58:2d:b5:0d:
         b1:b9:9f:cd:8f:ed:b5:4b:d5:a7:3a:2e:5a:3b:49:45:6d:d2:
         cd:89:3c:88:c5:30:5e:7a:5a:cd:f2:12:02:06:ff:0a:73:5c:
         f8:0d:a5:a2:ce:45:26:d7:98:51:e6:37:ab:57:b7:5d:3c:f6:
         a0:71:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:07 2025 by rpki-client