Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa
File:                     3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (raw, json)
Hash identifier:          diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=
Subject key identifier:   CB:C7:01:44:17:02:93:2D:DC:76:FA:01:63:A0:A6:44:13:28:82:D9
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       502907667E9F68690E40B1FAE0FC9AE9EDEF4BD0
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa
Signing time:             Tue 04 Feb 2025 18:23:24 +0000
ROA not before:           Tue 04 Feb 2025 18:18:24 +0000
ROA not after:            Tue 03 Feb 2026 18:23:24 +0000
asID:                     265794
IP address blocks:        192.141.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:29:07:66:7e:9f:68:69:0e:40:b1:fa:e0:fc:9a:e9:ed:ef:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Feb  4 18:18:24 2025 GMT
            Not After : Feb  3 18:23:24 2026 GMT
        Subject: CN=CBC701441702932DDC76FA0163A0A644132882D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:56:89:a9:83:f4:ba:08:19:7f:67:d9:06:
                    cb:9e:37:1c:24:e5:73:2b:cd:10:4f:dd:ed:d4:58:
                    d4:e4:2a:fe:4a:81:e1:7f:8c:99:45:db:2a:54:10:
                    e1:f9:81:b2:47:71:d5:54:a2:f3:52:3a:64:ae:ae:
                    7e:02:c7:47:61:97:d4:a7:79:54:ed:87:32:60:1e:
                    39:db:a3:4e:bd:ae:c1:58:8f:51:4b:b7:4e:94:50:
                    69:a9:33:7e:d4:0c:db:9e:10:06:0b:60:f0:0c:58:
                    06:e2:ab:5d:7a:4d:e7:d8:3e:1a:50:af:bc:45:27:
                    2d:44:a0:e5:43:67:c4:a8:81:15:09:44:05:80:03:
                    7d:81:cd:1a:81:c6:fd:1f:fb:61:0e:58:d4:24:0c:
                    bc:fa:92:8e:1f:fc:66:cc:c6:de:e7:2b:5c:2c:f1:
                    25:82:16:bd:7f:31:f3:11:be:73:9e:99:76:65:03:
                    e1:0e:90:b4:a8:f1:d5:db:78:e9:e1:ef:a2:ef:e2:
                    36:ad:7e:e4:40:32:41:a1:97:1d:d3:bd:f1:cc:98:
                    59:7c:ef:b1:ca:ce:d1:51:b3:f1:86:f5:2c:df:71:
                    d5:71:3f:4d:13:80:29:d2:e4:85:0b:45:73:7c:ad:
                    eb:90:6a:cf:bd:37:b9:86:eb:28:8b:06:ff:56:54:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:01:44:17:02:93:2D:DC:76:FA:01:63:A0:A6:44:13:28:82:D9
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:6b:2f:54:cf:da:5b:8b:53:db:e7:35:a6:ae:a6:18:dd:
         21:94:c2:17:f1:45:a7:c8:e5:f5:78:36:f2:2a:66:ff:b0:a3:
         7e:85:08:2f:3e:26:95:f4:16:75:c1:52:d5:17:b6:54:cf:fe:
         19:76:5f:a7:50:2d:8b:74:ce:61:9d:a3:d8:78:8b:4e:6a:47:
         3e:33:9b:ad:3a:51:1e:81:ad:67:83:05:ac:7e:3d:8e:f7:3b:
         16:93:ee:e8:a0:c0:d0:a4:9b:d9:4d:5a:56:b0:8d:36:b9:dd:
         8e:9b:e3:17:55:e9:71:f7:f1:70:a0:40:69:50:4b:5d:fa:29:
         50:ba:c2:5a:98:ac:da:de:3d:1b:e9:6d:4b:d5:0b:f2:0e:65:
         a3:bb:bb:3a:5c:cd:08:ea:85:81:47:f2:5f:6a:1f:17:01:41:
         e6:5a:2f:27:9a:b9:b0:36:09:2b:bc:5b:75:98:7f:a5:0b:21:
         42:01:81:12:94:b3:f3:aa:8c:78:f6:5d:3b:e1:b9:f8:f9:95:
         81:5a:68:45:c2:4f:de:ca:8e:e5:76:29:71:9c:d2:3b:03:11:
         9c:77:fc:e2:60:d4:8b:09:f1:a3:67:25:75:45:1a:8c:6c:20:
         0f:96:f1:1d:e2:26:86:61:44:f8:2f:45:63:0d:54:0c:08:d7:
         82:4b:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:04 2025 by rpki-client