Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa
File:                     3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa (raw, json)
Hash identifier:          t2eJPdFHZRhoKleN5CKtJ94zPz3JEv405E6NOMJMj0c=
Subject key identifier:   FF:0D:BA:13:CD:66:5E:B1:61:43:F8:55:70:2D:A0:E1:FF:58:88:C1
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       36F30DFC44E2FA8E4901F568709D9145D072C003
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:52:48 +0000
ROA not before:           Tue 04 Feb 2025 18:47:48 +0000
ROA not after:            Tue 03 Feb 2026 18:52:48 +0000
asID:                     6503
IP address blocks:        192.207.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f3:0d:fc:44:e2:fa:8e:49:01:f5:68:70:9d:91:45:d0:72:c0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:48 2025 GMT
            Not After : Feb  3 18:52:48 2026 GMT
        Subject: CN=FF0DBA13CD665EB16143F855702DA0E1FF5888C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:0f:4d:3c:9a:c7:e5:ac:b2:15:a2:c2:1c:
                    2b:63:06:30:b0:da:aa:07:d3:ff:ab:44:cf:5a:9e:
                    72:f2:4b:5b:4c:bc:3f:98:7e:99:82:58:c2:0c:54:
                    d2:b6:4b:2d:ea:36:b3:f7:21:bc:d5:5b:d2:3c:98:
                    39:0a:70:66:b7:02:4a:5a:ad:e1:0b:98:a8:e7:79:
                    e6:ea:4d:36:42:c6:f9:4b:8b:8c:ac:54:38:a8:fb:
                    71:28:44:01:c9:a5:57:cc:a6:19:4f:16:f5:e3:c1:
                    af:c1:5b:4f:bb:81:58:b0:e5:9e:9d:dc:b9:31:44:
                    75:d9:3e:40:29:f8:aa:55:93:94:02:08:d4:a6:e7:
                    89:3f:2d:8b:dd:6e:c6:be:37:7b:10:b8:bf:d8:23:
                    6e:06:36:d3:ba:3b:d3:a2:a9:2e:60:1f:de:4e:47:
                    4c:53:05:e4:34:d5:da:9e:8e:14:ec:69:61:a3:87:
                    7d:49:4a:5d:59:31:11:0d:7c:bb:77:f2:31:75:d3:
                    0b:ec:53:f3:bc:e7:15:44:f6:3d:47:d3:51:52:ae:
                    79:6d:6e:83:4f:48:cf:ae:18:32:61:82:8c:5d:d7:
                    32:fa:65:94:b9:b0:78:4e:44:2f:15:9c:d1:e1:15:
                    a9:3d:01:f1:0e:1d:dc:65:03:64:e1:f4:20:56:b3:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0D:BA:13:CD:66:5E:B1:61:43:F8:55:70:2D:A0:E1:FF:58:88:C1
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:4a:37:c1:74:54:31:5c:75:e5:a5:03:71:2e:a5:00:50:0f:
         c4:87:b0:c1:d6:0c:f5:04:2e:0a:c9:ab:dd:6a:d0:8d:6e:65:
         e0:b1:42:82:69:bb:07:94:ae:06:55:de:a7:f0:ea:dc:2b:9f:
         65:2b:60:dc:b5:74:4b:8e:e9:74:0d:a2:06:8f:59:3e:79:a3:
         21:05:ab:bb:43:8e:52:68:ba:fb:ed:3b:2d:89:1c:b2:54:f0:
         37:30:77:87:98:ea:7d:cb:ac:27:2f:51:b4:4e:34:0b:00:e8:
         28:31:8a:43:ec:a5:a6:0a:6f:76:32:af:a1:6c:58:fb:0a:72:
         9b:db:fd:49:a9:a5:83:7e:fb:be:d8:29:70:0b:8e:90:26:74:
         1b:33:dc:ed:b1:55:d0:11:e8:79:74:f1:3a:02:d9:4a:c0:f3:
         b2:cb:11:78:d2:75:71:4b:67:22:b8:9c:1c:07:c7:0e:85:6b:
         a7:85:3d:55:0a:f4:fb:08:d0:af:cc:b7:84:34:63:c5:1b:7a:
         de:19:ea:74:57:06:14:b4:12:c1:0f:e6:42:44:e0:9b:da:5b:
         27:06:47:d5:db:d3:42:c0:ae:a0:29:f8:42:be:c5:b0:fd:c2:
         59:45:1f:53:f4:60:c2:e2:27:f5:5f:1b:64:8c:20:75:62:78:
         80:16:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:11 2025 by rpki-client