Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa
File:                     3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (raw, json)
Hash identifier:          lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=
Subject key identifier:   D9:E7:88:70:24:A2:56:D4:9A:D6:14:92:8E:B1:83:43:0B:2E:9F:73
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       5E697E08E934A90BD45B76F5D90720AE50AB93C3
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa
Signing time:             Tue 04 Feb 2025 18:23:24 +0000
ROA not before:           Tue 04 Feb 2025 18:18:24 +0000
ROA not after:            Tue 03 Feb 2026 18:23:24 +0000
asID:                     265794
IP address blocks:        192.141.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:69:7e:08:e9:34:a9:0b:d4:5b:76:f5:d9:07:20:ae:50:ab:93:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Feb  4 18:18:24 2025 GMT
            Not After : Feb  3 18:23:24 2026 GMT
        Subject: CN=D9E7887024A256D49AD614928EB183430B2E9F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:cf:56:5e:3b:06:e2:ad:63:a0:86:fc:16:
                    45:80:d2:ec:59:be:38:f8:56:68:4e:95:a9:84:94:
                    db:59:95:6c:08:9d:10:6e:2e:71:57:38:56:98:85:
                    f4:3e:30:c8:4e:bc:ff:22:28:d1:01:92:9e:27:38:
                    0f:cc:35:e8:2b:59:f6:5b:f3:b1:f6:b2:01:44:d5:
                    9f:5a:00:25:f7:d4:f4:96:c9:ff:a2:71:8c:a3:ad:
                    14:dc:80:5b:8a:84:e8:0d:cb:e4:8e:c1:52:73:16:
                    03:4a:d8:86:50:9d:da:e1:41:bc:f3:11:bb:f4:34:
                    c9:36:2f:4e:41:1b:75:e0:dc:92:8f:32:43:59:87:
                    a4:cc:a0:7d:da:87:06:a4:85:5c:2f:f3:82:45:69:
                    d8:dd:ae:db:9c:61:45:ae:43:ed:cc:de:45:1e:fd:
                    8d:73:19:21:c0:bd:e9:af:b7:05:eb:76:12:1a:1f:
                    0a:4a:9c:b4:da:a4:c9:96:61:6e:87:eb:93:0d:62:
                    eb:4c:65:51:41:0a:29:54:42:41:53:fb:78:87:7c:
                    5b:be:c0:3f:c4:91:65:c2:54:99:74:82:0c:35:8c:
                    5e:ee:81:89:66:55:08:9a:90:12:be:c8:47:4f:1b:
                    3a:57:11:1c:85:f3:ed:43:90:b0:09:11:5e:e7:e0:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E7:88:70:24:A2:56:D4:9A:D6:14:92:8E:B1:83:43:0B:2E:9F:73
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:dc:2b:01:93:e7:c5:68:57:32:77:a8:f6:8a:fb:f3:ba:
         6a:37:f4:6f:52:eb:00:f2:e3:72:bf:08:44:67:87:3b:27:72:
         8d:9e:82:17:02:d0:9d:07:f0:6b:d2:94:2f:a5:98:2a:82:28:
         41:0b:44:cf:d7:25:42:d2:6b:97:90:40:f8:79:2d:4b:98:3e:
         ac:24:af:0c:0b:29:ef:9d:1d:a3:83:b2:d8:ac:c6:38:68:36:
         b2:c3:45:7a:a4:4b:1b:1f:fa:d0:06:fa:a6:a5:a8:40:42:5f:
         e5:f3:b6:84:f9:80:9f:e7:75:48:39:25:37:d0:04:b4:35:80:
         40:a3:0f:36:f2:0e:43:50:3c:af:95:a9:3c:19:c5:a7:3f:fc:
         c8:f7:e7:ba:42:a6:8e:db:f4:e4:c6:f0:4b:9d:4a:78:93:7d:
         62:bc:6e:b5:9d:36:94:d7:d4:be:f5:8d:d7:c1:63:57:30:fb:
         10:41:1e:94:67:59:99:51:7e:e5:2a:db:d7:70:cf:0a:84:f6:
         d8:b3:9c:14:6f:d3:8e:57:f6:4d:51:de:2e:07:e8:56:e0:7d:
         f7:7b:ed:11:07:8f:3c:f5:43:e3:32:a4:4f:43:3c:d4:d3:74:
         ec:2a:6c:66:7c:50:a0:7d:95:3e:60:03:cd:02:45:fa:39:50:
         74:07:d5:ee
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXml+COk0qQvUW3b12QcgrlCrk8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy
MTlGNTlCNTAeFw0yNTAyMDQxODE4MjRaFw0yNjAyMDMxODIzMjRaMDMxMTAvBgNV
BAMTKEQ5RTc4ODcwMjRBMjU2RDQ5QUQ2MTQ5MjhFQjE4MzQzMEIyRTlGNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2U89WXjsG4q1joIb8FkWA0uxZ
vjj4VmhOlamElNtZlWwInRBuLnFXOFaYhfQ+MMhOvP8iKNEBkp4nOA/MNegrWfZb
87H2sgFE1Z9aACX31PSWyf+icYyjrRTcgFuKhOgNy+SOwVJzFgNK2IZQndrhQbzz
Ebv0NMk2L05BG3Xg3JKPMkNZh6TMoH3ahwakhVwv84JFadjdrtucYUWuQ+3M3kUe
/Y1zGSHAvemvtwXrdhIaHwpKnLTapMmWYW6H65MNYutMZVFBCilUQkFT+3iHfFu+
wD/EkWXCVJl0ggw1jF7ugYlmVQiakBK+yEdPGzpXERyF8+1DkLAJEV7n4N2hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2eeIcCSiVtSa1hSSjrGDQwsun3MwHwYDVR0j
BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD
MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB
MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE
QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz
RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzMxMzkzMjJlMzEzNDMxMmUzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwI0r
MA0GCSqGSIb3DQEBCwUAA4IBAQBNI9wrAZPnxWhXMneo9or787pqN/RvUusA8uNy
vwhEZ4c7J3KNnoIXAtCdB/Br0pQvpZgqgihBC0TP1yVC0muXkED4eS1LmD6sJK8M
CynvnR2jg7LYrMY4aDayw0V6pEsbH/rQBvqmpahAQl/l87aE+YCf53VIOSU30AS0
NYBAow828g5DUDyvlak8GcWnP/zI9+e6QqaO2/TkxvBLnUp4k31ivG61nTaU19S+
9Y3XwWNXMPsQQR6UZ1mZUX7lKtvXcM8KhPbYs5wUb9OOV/ZNUd4uB+hW4H33e+0R
B4889UPjMqRPQzzU03TsKmxmfFCgfZU+YAPNAkX6OVB0B9Xu
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:13 2025 by rpki-client