Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/3139362e32392e36342e302f31392d3234203d3e203131393437.roa
File:                     3139362e32392e36342e302f31392d3234203d3e203131393437.roa (raw, json)
Hash identifier:          fwEwwaDpBRhk6kuomNxRC16OwKD0HHMOOLw+73rDPSg=
Subject key identifier:   B8:F4:A4:E8:97:BA:81:45:32:45:45:77:54:52:37:8A:37:76:4E:E6
Certificate issuer:       /CN=C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF
Certificate serial:       01D0336D9BD374B55818F32218FFB59492C1FC11
Authority key identifier: C9:32:6C:6B:28:11:6F:80:18:3E:CC:EA:2C:C3:E9:6F:26:D5:AF:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/3139362e32392e36342e302f31392d3234203d3e203131393437.roa
Signing time:             Tue 04 Feb 2025 18:28:24 +0000
ROA not before:           Tue 04 Feb 2025 18:23:24 +0000
ROA not after:            Tue 03 Feb 2026 18:28:24 +0000
asID:                     11947
IP address blocks:        196.29.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d0:33:6d:9b:d3:74:b5:58:18:f3:22:18:ff:b5:94:92:c1:fc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF
        Validity
            Not Before: Feb  4 18:23:24 2025 GMT
            Not After : Feb  3 18:28:24 2026 GMT
        Subject: CN=B8F4A4E897BA8145324545775452378A37764EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:e4:7e:7c:7f:78:22:e1:a7:52:e1:f0:16:
                    26:b9:f9:e6:e3:ae:0c:25:0a:a8:58:c5:90:44:a0:
                    8f:9b:93:32:bd:7b:bc:08:cd:e6:7a:0b:17:58:95:
                    34:6e:31:01:b2:d2:67:08:38:b3:d5:d4:4d:f4:93:
                    df:20:96:c9:bc:52:d5:ca:db:a8:36:78:e7:2e:10:
                    e2:23:e3:44:06:9c:14:4a:e3:29:22:f3:03:ef:73:
                    56:f1:43:33:ed:4f:2c:6d:f1:04:b8:66:fb:7b:81:
                    9e:b0:ef:06:5c:21:cd:b4:c0:28:8d:e4:7d:90:26:
                    0b:db:19:cf:06:bd:08:64:7c:a9:8c:e5:27:af:a3:
                    31:e0:c0:60:24:be:59:f5:de:e6:c3:81:31:12:34:
                    43:1c:7d:af:07:e3:ab:51:2e:b1:b4:4a:cc:23:13:
                    8b:37:88:d6:a2:79:0e:b6:8f:03:0f:c1:3e:7e:7e:
                    46:56:c6:45:c8:f2:9b:10:b0:e3:9e:d6:0f:29:ac:
                    92:b2:78:e2:5d:d3:d5:9f:db:eb:2a:ef:45:88:29:
                    1b:d7:d0:5c:f6:3e:cc:03:ea:7e:20:c5:4e:bd:30:
                    15:4e:fc:8f:76:85:fa:88:70:f1:5e:81:76:1e:65:
                    8f:20:39:31:07:8d:8b:36:b9:2a:51:2b:a9:f3:d4:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:A4:E8:97:BA:81:45:32:45:45:77:54:52:37:8A:37:76:4E:E6
            X509v3 Authority Key Identifier:
                keyid:C9:32:6C:6B:28:11:6F:80:18:3E:CC:EA:2C:C3:E9:6F:26:D5:AF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/3139362e32392e36342e302f31392d3234203d3e203131393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.29.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cd:6b:a2:ae:f9:f8:66:b8:6d:70:a4:8a:f1:70:5b:05:5d:c7:
         dd:25:20:1b:6e:70:6c:69:91:3a:0d:d5:d8:a9:df:3b:04:11:
         9a:62:8d:78:66:0a:b8:be:54:ee:78:96:1e:92:6e:66:c9:20:
         7b:16:0c:1f:93:db:10:c8:8d:72:65:ab:5c:0d:9c:9c:87:40:
         40:58:78:19:15:6f:b8:85:79:a8:c8:de:93:45:f2:c1:9e:1a:
         3f:ac:00:9f:8d:a6:04:ca:d4:7b:d0:02:b2:e5:5b:3d:0c:6c:
         b2:30:03:c6:e8:77:a1:4d:e2:71:24:04:1c:97:57:be:bc:af:
         9f:32:93:a6:37:1b:b1:bc:28:5f:9c:f2:45:dc:56:df:6a:bb:
         e3:c3:37:e1:bf:5b:2a:c3:0d:fa:79:93:ba:69:66:6c:f2:45:
         1c:c4:cd:68:17:49:21:db:74:50:62:76:e8:cf:38:6c:47:9f:
         0b:86:a8:c7:58:37:f5:f5:5c:e0:d8:14:11:55:9f:5c:c4:0c:
         7e:5a:18:63:1d:be:99:5d:56:ff:63:39:41:c4:4d:7d:ba:57:
         e9:6f:7b:ea:a2:63:32:7d:93:38:54:a2:49:0b:90:b4:c2:37:
         2b:7d:79:cd:56:4d:63:a6:b7:aa:f9:41:74:8d:68:eb:2e:01:
         98:e3:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:11 2025 by rpki-client