Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/3138392e3132362e382e302f32332d3234203d3e20323639393536.roa
File:                     3138392e3132362e382e302f32332d3234203d3e20323639393536.roa (raw, json)
Hash identifier:          I/gk+B444wXuYtFOjWeYNMYpxpLoCJA+c6rczG46qFw=
Subject key identifier:   B1:0B:E5:B7:AA:A8:FE:EF:EC:A2:42:C8:9D:A0:B3:E8:77:82:F2:E8
Certificate issuer:       /CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC
Certificate serial:       432E89C7F340C1D0B8E4DB29EBF00B818CD9034C
Authority key identifier: 23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/3138392e3132362e382e302f32332d3234203d3e20323639393536.roa
Signing time:             Tue 04 Feb 2025 18:42:25 +0000
ROA not before:           Tue 04 Feb 2025 18:37:25 +0000
ROA not after:            Tue 03 Feb 2026 18:42:25 +0000
asID:                     269956
IP address blocks:        189.126.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2e:89:c7:f3:40:c1:d0:b8:e4:db:29:eb:f0:0b:81:8c:d9:03:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC
        Validity
            Not Before: Feb  4 18:37:25 2025 GMT
            Not After : Feb  3 18:42:25 2026 GMT
        Subject: CN=B10BE5B7AAA8FEEFECA242C89DA0B3E87782F2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:08:24:d3:08:b6:44:ed:d8:d4:37:41:e6:
                    01:71:88:9f:c5:f4:1d:e2:42:5a:87:d5:47:4c:12:
                    e3:d3:ac:72:68:b1:aa:8a:fb:61:30:c8:e9:fe:03:
                    2e:54:8c:79:cf:ac:4b:01:19:c3:80:5e:e8:ad:36:
                    c9:f6:3c:90:88:39:56:8a:0c:00:b1:43:ac:83:ff:
                    c1:06:5e:43:38:61:b3:2f:3a:11:31:5b:16:42:80:
                    27:0f:44:7d:6b:a7:b1:46:c6:57:31:9d:db:8e:16:
                    94:19:a5:54:37:8c:04:b8:ca:fc:98:cb:02:78:89:
                    4b:34:45:56:b0:46:17:d9:93:3b:f1:2e:b1:d0:83:
                    dc:bd:1b:ac:c8:01:42:16:cd:34:6c:fe:b5:d7:af:
                    d1:b9:56:6b:a4:39:01:8a:70:83:05:44:52:8f:07:
                    8d:de:dc:21:df:9b:c6:9f:1e:4b:3b:f8:b0:6b:bf:
                    59:2d:ea:53:1a:10:89:a5:e6:c5:4d:b7:6d:f3:2e:
                    88:71:fe:db:c2:12:d1:5d:ef:de:24:e2:68:a8:75:
                    bf:63:35:68:34:3e:bf:42:f3:f1:fb:7a:ca:34:0c:
                    eb:d0:4c:f5:e7:d7:a5:f3:c2:94:88:19:3e:31:5a:
                    ef:d1:f1:81:d6:c0:98:2f:e5:31:1a:a6:c6:0d:83:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:E5:B7:AA:A8:FE:EF:EC:A2:42:C8:9D:A0:B3:E8:77:82:F2:E8
            X509v3 Authority Key Identifier:
                keyid:23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/3138392e3132362e382e302f32332d3234203d3e20323639393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:60:19:67:76:92:88:70:bf:69:55:04:a0:7d:73:64:38:74:
         5f:21:9a:1e:3d:6c:f1:8c:7b:59:81:e1:2b:b9:f6:89:35:3b:
         c5:a7:82:c3:dd:23:e7:8b:45:7d:b8:dc:52:ee:ce:b8:6b:9b:
         78:d3:86:c0:a8:fa:7f:1a:68:5c:91:8f:07:bb:02:ed:97:51:
         30:11:9e:d6:c9:57:51:2a:da:4e:01:30:87:fe:5f:af:65:98:
         9c:86:e7:e2:c0:8e:79:9d:67:42:c3:a6:cc:8c:66:21:d7:4c:
         44:b4:3e:dc:9b:49:5e:db:95:c8:0c:19:b6:27:94:8e:33:b6:
         93:36:4d:0a:6f:3b:d6:ff:75:fe:12:a1:e1:21:e3:67:05:7c:
         84:09:eb:08:b6:8f:d3:1e:d5:42:91:89:8e:93:e0:f2:7c:c2:
         22:ed:8c:b5:47:82:66:af:82:a4:e7:0a:6a:c6:ee:96:e9:84:
         33:ca:7c:30:92:87:f0:ba:c2:b1:e8:66:2a:7f:dc:cf:72:7b:
         d8:e0:7e:ca:47:04:22:62:a6:41:6a:dc:80:df:70:8a:b4:0e:
         96:aa:84:3e:7d:22:d8:55:0d:81:ee:ab:80:a9:35:85:68:c2:
         c4:1b:b5:e5:4d:4f:9e:c9:d4:09:25:3b:61:9e:6a:ba:16:b2:
         32:01:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:31 2025 by rpki-client