Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32322d3234203d3e203139333733.roa
File:                     3138372e3139312e38302e302f32322d3234203d3e203139333733.roa (raw, json)
Hash identifier:          Uf6B1IZWP8LcHFXbM7KnSrwjJsp6KNYPhgEnLj+MAWs=
Subject key identifier:   DD:7C:7B:F2:87:E8:4F:F8:2F:A1:F0:F8:61:7A:5A:78:6F:FE:57:68
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       2DA12A81E6141DB3F529DCDD94309AA60E81BA98
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32322d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:03 +0000
ROA not before:           Sun 16 Feb 2025 06:35:03 +0000
ROA not after:            Sun 15 Feb 2026 06:40:03 +0000
asID:                     19373
IP address blocks:        187.191.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a1:2a:81:e6:14:1d:b3:f5:29:dc:dd:94:30:9a:a6:0e:81:ba:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:03 2025 GMT
            Not After : Feb 15 06:40:03 2026 GMT
        Subject: CN=DD7C7BF287E84FF82FA1F0F8617A5A786FFE5768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0f:1b:4a:51:d1:b7:eb:09:08:d2:35:70:45:
                    00:fd:74:0a:96:e2:0f:74:fb:31:d5:a5:fd:d0:e8:
                    cd:73:14:9d:6f:32:6e:58:03:13:12:72:46:71:21:
                    de:e5:5c:02:8b:a6:b5:12:c6:c0:05:81:9d:48:87:
                    aa:bc:71:14:36:f7:03:9c:06:09:a1:cc:f3:c0:50:
                    08:5e:02:2a:50:47:aa:15:3c:0c:12:e7:62:24:d6:
                    35:ae:c0:f1:1e:e1:76:74:fe:e4:ac:34:a4:87:47:
                    1f:b6:52:b4:c3:fe:e6:e1:36:9d:12:90:f8:bc:3e:
                    dd:2e:d7:38:c8:47:87:f3:d2:a5:88:60:8d:8c:f9:
                    ff:63:68:e0:e6:e4:a0:50:b8:7b:ec:5a:82:c6:ef:
                    26:cb:31:fb:e8:79:1f:7d:6a:45:53:de:96:88:9b:
                    56:bc:58:eb:a1:bb:b0:51:3b:4b:d6:bb:53:b9:b5:
                    21:fb:41:7e:ee:11:c1:d8:32:6c:a4:50:74:14:01:
                    3c:30:3c:3a:83:1f:a8:d9:54:79:57:0c:b5:80:63:
                    ef:32:ca:8a:49:b9:b8:81:7b:fe:f7:98:b4:44:f5:
                    8e:38:50:4a:b9:ea:da:99:c8:36:59:bc:73:8b:8f:
                    07:43:01:36:e7:7d:3c:d3:68:9e:91:b9:6b:8c:a8:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7C:7B:F2:87:E8:4F:F8:2F:A1:F0:F8:61:7A:5A:78:6F:FE:57:68
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32322d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.191.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:e5:0e:e8:f5:ed:f9:b0:14:d6:95:33:81:7a:a9:1a:b1:d1:
         1a:11:ac:c0:35:bb:82:d6:66:2f:a3:a1:a1:f1:d8:ac:61:56:
         e9:8f:d8:a2:5b:d5:e2:07:b0:94:b4:1c:d1:75:ff:46:37:b5:
         0d:9b:1a:7c:18:dc:c4:f0:1e:16:15:52:0a:2f:ac:f4:bb:ae:
         b5:ee:17:5f:ef:7c:2c:0b:d9:a8:52:b1:98:f1:88:55:e6:1c:
         75:b2:3f:46:b5:ae:19:62:d6:09:f4:02:47:1d:14:8c:56:84:
         06:e5:3c:7e:3d:76:d4:98:ee:fa:80:0c:01:f8:88:4c:4f:e6:
         c4:ed:d7:a8:d0:d0:c8:43:ec:92:68:42:d4:2a:b1:4d:29:36:
         2e:43:62:b5:36:3c:e6:42:bd:6a:b4:d5:ee:31:d6:b9:09:9e:
         cf:e3:5b:15:2b:9d:d8:2e:b4:0b:dc:3f:bd:31:c1:06:29:03:
         b4:76:6d:45:95:a2:ad:62:6c:27:75:6e:90:27:4d:55:f7:ac:
         37:14:9e:a1:dc:df:6f:85:a4:bb:6a:93:c5:fc:f1:48:6e:64:
         b2:72:dc:45:f3:14:4f:21:2d:47:53:3b:c9:22:c3:a2:51:43:
         43:66:de:f8:1f:af:27:95:5c:d6:a9:b1:4e:cf:f8:9d:8e:f7:
         5b:87:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:45 2025 by rpki-client