Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e2037343138.roa
File:                     3139312e3131322e302e302f31342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          dHBLLb9ct+JmkCO8mrGspk3ffrYC5ykVZNasdZd5sTw=
Subject key identifier:   A9:B1:2A:98:07:6B:A8:79:7C:39:65:25:A6:97:63:24:B4:4E:ED:31
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       30BD5E0070C5B6F7FA44AD6A58E42C4A57D23051
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:18 +0000
ROA not before:           Tue 05 Mar 2024 17:47:18 +0000
ROA not after:            Tue 04 Mar 2025 17:52:18 +0000
asID:                     7418
IP address blocks:        191.112.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bd:5e:00:70:c5:b6:f7:fa:44:ad:6a:58:e4:2c:4a:57:d2:30:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:18 2024 GMT
            Not After : Mar  4 17:52:18 2025 GMT
        Subject: CN=A9B12A98076BA8797C396525A6976324B44EED31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:34:68:da:51:b3:02:68:16:19:5a:57:e7:
                    5f:55:5e:c9:41:88:03:94:c6:f5:a9:d9:c7:3a:c6:
                    22:bf:49:30:4e:5e:75:e5:3e:72:0c:d8:b3:4b:7f:
                    80:e5:31:36:1c:a2:76:41:b5:e5:b9:28:b9:94:e7:
                    77:9a:da:ff:54:13:d4:cf:6b:c9:01:91:fc:fc:02:
                    5d:b7:a0:25:be:16:e8:1f:16:dc:44:d0:6a:6a:d8:
                    d7:0d:cb:8e:82:f1:88:4f:bc:b2:2c:3d:30:80:5b:
                    29:09:c4:9b:ed:67:e4:f3:64:52:7e:75:3c:b1:e2:
                    0e:be:07:60:97:d2:9a:d4:ab:88:9f:42:7b:e4:ad:
                    f2:80:c0:2a:e2:ba:de:d8:c0:f4:b9:66:41:5e:72:
                    57:70:03:45:75:95:59:b9:99:21:14:40:49:d2:ce:
                    84:5d:5a:da:cb:05:0a:40:6f:2f:76:21:0f:3e:a5:
                    2a:00:12:6f:8e:49:24:c6:1c:01:56:cf:36:b3:8b:
                    d9:bd:0c:77:31:f4:86:2b:aa:9b:4e:48:1c:5e:11:
                    f0:bd:82:a5:d9:e9:a5:37:f0:34:d3:7c:91:a8:cf:
                    1f:51:43:45:36:3e:5b:72:f3:29:14:02:d3:3c:df:
                    ae:5b:56:9c:60:63:a5:3d:48:f7:f3:c9:a3:68:e2:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B1:2A:98:07:6B:A8:79:7C:39:65:25:A6:97:63:24:B4:4E:ED:31
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         52:22:e6:d5:57:f0:e5:bc:2e:bf:41:e3:3f:24:12:16:71:b8:
         fe:bf:56:fb:1b:98:2c:8d:b1:2e:4e:12:36:53:26:be:29:59:
         b8:10:5b:74:48:ff:d8:bb:9d:da:32:df:2f:66:2f:93:a5:f9:
         42:37:3f:e2:7e:9b:a4:e4:8f:d7:a3:52:eb:7c:a0:a7:71:6b:
         55:d8:55:af:f2:2c:20:b3:a4:f4:64:ef:4c:96:7e:52:d5:b6:
         f3:54:a7:11:79:5d:f2:b1:f0:15:2c:cb:32:aa:d2:34:ab:cf:
         08:68:05:3d:07:03:f6:d4:84:ec:d8:d8:33:bf:29:1e:d8:59:
         0c:4b:64:1f:af:7f:ed:42:81:93:96:6c:1f:f0:26:5c:87:47:
         b4:ae:75:37:95:fb:46:41:5f:27:81:4f:74:23:c3:bc:8e:c4:
         f5:64:02:15:c3:5e:b3:93:fd:42:c5:4a:58:c2:aa:51:d5:08:
         89:b6:95:fa:92:2f:7f:fc:4c:1f:4e:b9:4c:d8:a6:32:7f:2b:
         09:e7:0f:c7:b8:75:5a:75:a9:fc:38:b7:ec:1e:38:1e:55:c4:
         c0:40:0f:03:ad:03:35:7e:2b:1e:78:ae:11:d2:2e:b0:a4:45:
         f7:b8:c2:fb:e6:e3:26:8f:80:2e:54:57:39:84:19:49:01:bd:
         7a:bf:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:11 2024 by rpki-client on console-fra.rpki-client.org