Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          betEP4Zw891QNBDq23PsNItOcz9Owl+7wU2FnY8p+iA=
Subject key identifier:   1E:38:57:79:A0:69:38:F4:C5:E3:C1:94:47:83:EA:E7:7F:DB:F3:A8
Certificate issuer:       /CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Certificate serial:       2CA0EBD2A524ADEB697700C934EFF7B0DA62CA65
Authority key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:22:45 +0000
ROA not before:           Tue 04 Feb 2025 18:17:45 +0000
ROA not after:            Tue 03 Feb 2026 18:22:45 +0000
asID:                     27947
IP address blocks:        192.188.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a0:eb:d2:a5:24:ad:eb:69:77:00:c9:34:ef:f7:b0:da:62:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
        Validity
            Not Before: Feb  4 18:17:45 2025 GMT
            Not After : Feb  3 18:22:45 2026 GMT
        Subject: CN=1E385779A06938F4C5E3C1944783EAE77FDBF3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:7c:cc:b5:59:a0:71:e5:28:e2:cd:c8:bf:
                    45:13:1d:72:bc:68:ef:16:ce:6c:6e:b2:c7:31:de:
                    79:8a:9d:3f:60:82:52:92:08:f0:d4:01:fb:e0:06:
                    7a:55:2a:ac:0e:69:dc:20:08:e9:11:42:e1:98:2f:
                    e8:6b:1e:c4:1b:4d:0b:d0:ae:a6:80:42:c2:5b:32:
                    6d:fc:48:20:d9:42:40:94:81:d7:41:79:7e:46:ae:
                    d5:b6:88:91:92:46:5d:db:16:72:44:af:d2:d6:2e:
                    ac:0a:2b:89:04:69:c0:d7:48:bc:1f:a8:05:78:d9:
                    82:b8:a6:1a:61:0c:a5:cf:54:ba:26:63:df:29:6a:
                    44:bd:4e:25:0c:62:22:8e:73:3b:d0:40:ac:1b:31:
                    32:af:79:17:5e:1d:85:5c:9f:ce:a8:9d:4a:41:eb:
                    b4:0b:22:0a:71:cb:69:af:ed:14:85:2b:48:6b:f3:
                    50:b7:c6:71:d8:25:c0:da:fc:55:83:33:0d:e9:8a:
                    81:05:55:cc:4f:e8:0e:3d:66:79:56:f6:15:fb:41:
                    c1:8d:b5:2d:49:86:e3:b8:a4:52:90:12:8a:50:f1:
                    c3:8f:c5:84:34:35:75:57:c6:41:1d:18:18:2c:ee:
                    e2:e3:d0:d1:38:11:05:5d:b3:7a:fb:9c:75:7f:61:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:38:57:79:A0:69:38:F4:C5:E3:C1:94:47:83:EA:E7:7F:DB:F3:A8
            X509v3 Authority Key Identifier:
                keyid:D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:bd:d5:5b:06:96:b6:d9:44:b8:e4:c0:ca:f2:cb:1f:18:
         c7:dd:8d:9a:fd:12:38:83:64:59:ba:d0:9f:71:b2:a8:a0:2d:
         6a:8c:17:d2:19:bf:0d:89:ec:26:73:51:a2:83:46:c2:bd:ae:
         1c:a7:54:30:e2:1c:cb:16:00:1e:6b:5c:5b:58:b1:79:65:46:
         69:db:19:32:7c:da:bf:a6:25:73:46:6c:78:12:92:75:36:ce:
         51:88:8e:9c:e1:46:f5:6d:5f:4a:fc:62:c7:3c:85:ae:98:7f:
         bf:86:46:bf:6d:11:c5:68:eb:23:9c:44:ed:91:23:af:1f:c2:
         80:05:07:0a:5d:aa:35:56:5f:ce:1e:26:37:0a:36:4f:4f:dd:
         0a:b8:12:97:63:07:26:65:9f:b6:ef:40:73:23:da:69:ed:30:
         03:d3:54:82:7a:2d:83:8b:d6:88:87:3a:f3:77:3a:6a:34:e1:
         ca:20:dd:62:1c:f4:d4:e7:1a:a6:ad:dd:53:0e:c2:78:10:c5:
         40:11:ff:8c:5d:2e:87:ea:14:6f:86:db:39:78:77:d0:49:3f:
         0d:54:a3:25:96:b6:d1:0d:d1:0a:67:eb:9d:65:cf:cc:52:28:
         8a:f5:13:a5:65:bd:b0:6f:28:b9:ef:2f:91:c6:64:47:28:70:
         76:64:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:49 2025 by rpki-client