Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e203131313732.roa
File:                     3138392e3230362e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          No+gzYTQbcwJP/FW3o8Wz5NJcxMIBfCqulQvn3hk5iw=
Subject key identifier:   94:FA:CF:FD:C9:B2:95:8A:54:0B:31:1C:F3:F8:39:79:1D:B2:5E:1A
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       89B07149758E7FEC0AA6FBC015AF4D3D58732C
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:51 +0000
ROA not before:           Tue 04 Feb 2025 18:47:51 +0000
ROA not after:            Tue 03 Feb 2026 18:52:51 +0000
asID:                     11172
IP address blocks:        189.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:b0:71:49:75:8e:7f:ec:0a:a6:fb:c0:15:af:4d:3d:58:73:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:51 2025 GMT
            Not After : Feb  3 18:52:51 2026 GMT
        Subject: CN=94FACFFDC9B2958A540B311CF3F839791DB25E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:60:53:2e:b4:8d:61:ab:8d:93:a8:81:c6:
                    5f:18:24:4e:0c:5d:c4:1b:e9:51:a7:a3:f3:d8:a4:
                    3b:e2:4a:87:5b:62:81:5b:7f:d8:08:40:15:fc:c1:
                    d7:2d:eb:f5:73:7d:40:57:97:56:5f:1b:74:f5:f6:
                    38:06:60:15:b8:f5:6c:29:1f:43:60:d8:d8:06:b0:
                    61:01:4e:f1:1a:76:3b:43:31:95:83:03:51:d1:83:
                    c0:35:d5:d5:fd:07:60:dd:3f:48:2b:a2:fb:8e:dd:
                    6a:b4:05:02:82:7d:51:18:30:54:ae:ba:1d:23:f1:
                    3c:93:61:c5:46:16:da:85:7f:d4:f7:3d:30:60:95:
                    1d:a1:29:63:98:5b:85:e2:43:91:40:e7:ce:7c:7f:
                    c4:03:7c:ed:15:ec:fc:bd:55:06:f6:9e:87:03:42:
                    3a:4a:2c:93:5c:95:65:9f:e3:68:2d:b8:c1:0f:29:
                    f6:e3:01:7c:87:00:dc:ba:dd:0e:6d:5e:4c:ff:27:
                    f6:29:6b:0c:a3:90:a3:b5:c4:10:0d:e8:c4:cd:1f:
                    16:57:df:78:43:78:27:c7:2a:22:95:d8:2c:f7:1e:
                    58:26:88:60:d2:e0:2b:12:37:3d:a6:9d:0d:a3:95:
                    c3:f5:52:64:5d:9e:70:37:4a:1c:de:d6:35:e4:73:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FA:CF:FD:C9:B2:95:8A:54:0B:31:1C:F3:F8:39:79:1D:B2:5E:1A
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:02:07:6c:a7:4e:35:f7:2f:f0:35:17:f3:92:3d:87:e8:
         1e:3f:7f:b3:9f:14:99:8d:49:26:0a:ac:6a:22:cc:75:15:3c:
         ed:60:5b:02:e0:48:b6:e1:82:9d:9f:02:29:69:0e:81:da:9c:
         48:65:61:95:e7:19:2e:17:f1:4b:49:fc:9e:74:1c:df:b3:55:
         a2:b4:3d:6c:a0:32:87:46:14:61:5a:4e:de:7c:a2:c1:1f:03:
         17:56:7e:f8:73:da:50:10:92:6e:bb:b7:90:6b:ff:d5:fb:bd:
         7f:4f:89:9f:c2:bc:6d:28:e4:da:8e:29:bd:d3:dc:10:ab:e6:
         33:20:65:b4:1d:c2:34:38:97:ec:d4:a3:6e:cf:37:5e:21:6b:
         81:2f:a3:63:9f:61:1f:f8:64:74:c1:a4:36:08:46:68:e8:c3:
         18:df:4d:5a:f9:95:4a:58:93:de:95:e6:c4:99:93:5f:6a:9c:
         7b:a7:3c:25:65:95:88:50:5c:cd:54:1c:9e:e6:74:bc:6a:49:
         ce:cb:ed:47:f4:75:0c:ce:76:d6:bd:cb:9e:fd:ba:c0:5a:ad:
         05:df:f1:d2:3d:ad:c7:15:f8:c8:8b:eb:77:79:3f:54:fa:f2:
         76:10:06:d0:d1:77:c6:97:df:7b:e5:69:90:2f:2c:56:d5:b5:
         ae:d3:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:23 2025 by rpki-client