Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa
File:                     3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa (raw, json)
Hash identifier:          UPPCS+OcnZR2OX36lSII10nhd39Kcnp9Tn1M48U2Ug4=
Subject key identifier:   14:73:36:B3:EE:05:99:FE:E6:DC:9D:A5:E1:94:92:ED:30:29:C5:B1
Certificate issuer:       /CN=4C78CC976DFE47B81477BCC595C469015140DEDB
Certificate serial:       72ED4616735775F6431CACD667FF53E55756EAC7
Authority key identifier: 4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa
Signing time:             Sun 18 May 2025 23:30:00 +0000
ROA not before:           Sun 18 May 2025 23:25:00 +0000
ROA not after:            Sun 17 May 2026 23:30:00 +0000
asID:                     55082
IP address blocks:        128.201.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 23:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ed:46:16:73:57:75:f6:43:1c:ac:d6:67:ff:53:e5:57:56:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C78CC976DFE47B81477BCC595C469015140DEDB
        Validity
            Not Before: May 18 23:25:00 2025 GMT
            Not After : May 17 23:30:00 2026 GMT
        Subject: CN=147336B3EE0599FEE6DC9DA5E19492ED3029C5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:70:89:68:80:2c:6b:43:d9:1a:1c:2e:58:
                    29:57:f4:77:e1:a7:86:31:e4:4b:e4:09:bb:1d:7d:
                    ac:39:58:ea:04:00:91:16:67:e2:d7:6d:54:6c:66:
                    33:8e:5d:77:de:a9:d3:1a:a3:6d:ad:32:8e:06:af:
                    8d:bf:fb:3e:40:05:f3:9f:41:85:0d:b8:52:24:6f:
                    a0:79:57:94:3f:a7:2e:9a:5a:fa:92:54:af:cd:e8:
                    d5:e3:82:fc:0e:b3:c9:07:40:09:d1:4a:c0:03:2f:
                    38:f6:ed:d7:20:d8:78:4f:2b:c1:0a:4a:d2:41:23:
                    e6:2f:18:9b:b5:40:e1:52:5e:15:74:ea:f7:a9:db:
                    ea:b8:35:b9:dc:ae:3d:bc:54:f8:e4:93:17:f7:1c:
                    ed:0b:d1:af:0b:91:59:36:cf:82:87:ec:ce:10:2f:
                    ae:54:df:66:0e:42:81:13:9f:59:7b:c4:50:e9:de:
                    fa:14:5a:fc:a1:36:ea:3d:de:0c:5b:9a:65:4c:5b:
                    f3:51:6a:88:52:13:f5:84:01:f8:c6:c9:8c:eb:58:
                    09:15:c4:84:42:c7:aa:76:37:48:26:f3:3e:e8:bd:
                    4f:95:d9:e3:5f:57:b7:a8:0f:75:23:29:39:40:d2:
                    20:f0:8a:f0:dc:eb:85:0d:51:c4:53:cc:49:8a:67:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:36:B3:EE:05:99:FE:E6:DC:9D:A5:E1:94:92:ED:30:29:C5:B1
            X509v3 Authority Key Identifier:
                keyid:4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:c4:63:47:ee:58:a0:3d:d4:9d:bf:9b:38:7c:cc:8c:42:
         e1:ee:bb:a3:00:0e:8f:73:c5:c8:3b:ca:2f:d3:e2:c4:85:b7:
         de:d4:32:f9:37:a2:df:70:31:e4:75:ee:13:1e:ec:b1:dc:f3:
         1b:c2:f9:00:e0:3b:36:54:ef:20:3b:55:ee:80:fa:5e:5f:0c:
         87:c6:a6:e1:77:db:2f:57:56:92:29:b5:f3:80:3d:71:9f:ca:
         72:2a:65:1d:24:bd:af:9c:6b:2c:b0:9e:34:04:ad:3f:fc:dd:
         62:17:92:df:c6:39:02:a7:10:eb:9f:ef:c9:97:54:e2:d2:03:
         0a:78:81:f0:b5:2c:ab:a9:9a:14:de:e6:e2:b2:36:70:e1:bb:
         39:2d:02:a1:48:6e:bf:5b:2f:b3:02:01:0d:4b:2f:8a:49:30:
         be:8d:62:b9:61:d7:33:6c:73:f4:24:a1:73:84:66:b4:4a:e7:
         fd:b9:8f:ad:bd:fb:a4:9a:a5:b6:7b:0e:c0:c2:33:6d:4e:b0:
         82:3e:d9:af:6d:c6:1d:b8:e6:77:bf:41:92:e8:0e:ab:15:78:
         f7:18:56:50:14:75:7b:67:b3:75:ee:c8:9f:f6:1f:57:5a:a7:
         af:56:88:9a:96:e5:e2:59:1f:8d:b5:c6:ef:f0:3b:a8:44:e5:
         98:af:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:48 2025 by rpki-client