Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa
File:                     3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa (raw, json)
Hash identifier:          DkJZKN/42EL5TGi2hYWww1jpsUe2JTW3WjqZ2y7R6RY=
Subject key identifier:   0D:5B:A2:90:0E:91:6F:ED:8D:29:40:DA:11:04:DB:17:51:99:EB:3E
Certificate issuer:       /CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF
Certificate serial:       737F1D4EF56EA7999690A55739BB1C3A2FAC2D06
Authority key identifier: DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa
Signing time:             Tue 04 Feb 2025 20:06:31 +0000
ROA not before:           Tue 04 Feb 2025 20:01:31 +0000
ROA not after:            Tue 03 Feb 2026 20:06:31 +0000
asID:                     263691
IP address blocks:        198.49.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7f:1d:4e:f5:6e:a7:99:96:90:a5:57:39:bb:1c:3a:2f:ac:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF
        Validity
            Not Before: Feb  4 20:01:31 2025 GMT
            Not After : Feb  3 20:06:31 2026 GMT
        Subject: CN=0D5BA2900E916FED8D2940DA1104DB175199EB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:09:f1:e5:ae:73:49:26:71:57:ab:47:36:
                    d1:13:b4:a0:0e:9b:fa:6c:53:20:f4:77:17:4b:b6:
                    6b:0d:d5:58:7f:9f:c2:ed:cc:43:82:97:31:4d:52:
                    a1:5b:ef:85:b5:40:5a:75:e5:d3:58:39:10:1b:31:
                    88:37:f6:57:95:11:11:8b:2b:01:8d:c7:dc:0c:09:
                    07:c2:0b:33:8a:b5:56:82:c8:b5:a6:eb:5a:be:0c:
                    d8:9f:fd:68:34:88:b5:36:8b:e5:b3:12:64:2f:fa:
                    44:63:22:28:d0:63:bc:40:a1:ae:ed:c2:dc:77:7a:
                    4c:8a:ba:4f:da:55:66:95:cf:f7:5c:dc:eb:a5:59:
                    e9:4e:35:32:42:c5:7e:d7:35:96:a9:74:fb:50:67:
                    e7:02:66:c2:b0:4b:58:5f:73:ca:dc:12:7a:c9:ac:
                    5c:75:15:3e:44:8d:64:55:b8:9e:b4:de:bc:e0:8b:
                    26:50:7a:51:bb:b1:66:0b:c2:8a:31:d5:0a:9f:6b:
                    0c:f4:c5:93:16:e9:2e:27:66:5b:ba:ff:ce:b1:6e:
                    6d:42:3f:75:34:ef:51:21:c3:94:a2:bf:12:66:2c:
                    d8:7b:1a:db:e5:ae:d2:9f:72:b9:df:23:cf:91:4b:
                    38:0b:eb:ed:6c:d5:9d:c6:08:40:e3:ff:6e:13:45:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:A2:90:0E:91:6F:ED:8D:29:40:DA:11:04:DB:17:51:99:EB:3E
            X509v3 Authority Key Identifier:
                keyid:DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:03:81:d5:eb:01:c3:66:15:6d:03:b2:6d:94:40:ae:7b:
         41:fd:0e:ee:83:e0:6a:fc:c1:78:5f:56:ce:21:3f:1e:f0:2a:
         de:56:93:6e:ae:80:ad:81:e0:e6:12:06:ae:80:0c:60:6f:89:
         2b:42:b9:17:ca:fe:93:82:dd:12:38:f5:e7:dd:17:65:e8:46:
         f1:e5:84:fd:f2:b2:e4:71:6d:c5:1c:f8:7f:2b:3b:fd:a6:f7:
         bc:5b:47:05:e1:b8:05:70:ef:65:c2:a9:8e:b2:d9:93:84:80:
         0b:5c:92:09:8a:ba:bb:54:2f:de:62:c6:cf:14:1a:81:a6:8b:
         23:fa:c3:f0:42:88:52:82:7a:24:6b:29:ab:c5:26:9a:8d:6f:
         ac:0a:45:d0:5e:e0:21:a4:5b:76:a6:0f:b2:34:c1:a9:25:4f:
         09:bf:f9:c9:d2:71:7f:ca:49:88:4d:b5:c7:e4:3d:c7:a0:e9:
         70:b2:64:41:80:91:d2:72:5b:24:cb:a0:17:da:4d:2b:96:14:
         3a:fa:8a:2f:3e:d1:53:0a:77:db:61:c5:33:4d:e1:41:0c:86:
         48:4e:1c:aa:fd:70:4a:23:4b:ef:cf:d2:00:40:c7:bf:a3:c2:
         1d:8f:ea:25:a6:80:a9:89:0a:38:9e:1a:e2:fa:fd:9e:7f:bf:
         84:32:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:11 2025 by rpki-client