Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
File:                     3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa (raw, json)
Hash identifier:          koYyhtRf+y1BqnVn5dMqU/eH6hsz6Ya0lj38asS3wAw=
Subject key identifier:   69:52:79:A5:72:B2:77:2F:B0:D9:E6:5A:B3:1A:19:62:5C:08:81:DD
Certificate issuer:       /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial:       0459F84BF58ACE4E2101011897AEB79F90BCC907
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
Signing time:             Tue 04 Feb 2025 18:28:46 +0000
ROA not before:           Tue 04 Feb 2025 18:23:46 +0000
ROA not after:            Tue 03 Feb 2026 18:28:46 +0000
asID:                     265771
IP address blocks:        128.201.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:59:f8:4b:f5:8a:ce:4e:21:01:01:18:97:ae:b7:9f:90:bc:c9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
        Validity
            Not Before: Feb  4 18:23:46 2025 GMT
            Not After : Feb  3 18:28:46 2026 GMT
        Subject: CN=695279A572B2772FB0D9E65AB31A19625C0881DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:ee:e7:e2:b1:4f:25:a3:5e:94:b7:1a:2d:
                    fa:86:55:08:ef:3d:de:d1:15:b1:a5:fe:34:63:fd:
                    1b:22:cf:b1:2d:aa:3a:16:dd:3e:a1:6f:f9:25:b8:
                    99:68:cf:21:6b:2e:b0:66:f4:5a:ee:e1:e2:7e:8e:
                    97:b9:2a:20:3c:e3:31:68:06:88:08:aa:27:c9:64:
                    d7:7a:17:98:0f:14:38:f0:f5:bd:5d:d5:03:39:a0:
                    63:1c:cc:38:6a:d1:87:fd:3b:6a:11:5b:56:d6:9a:
                    cf:06:ab:f2:4b:91:4d:91:74:15:55:c8:ea:b4:a0:
                    26:4f:34:c2:90:86:5a:ed:e6:1d:52:55:60:f7:4b:
                    a2:55:6e:33:19:b8:1b:81:2d:48:fd:81:b3:1f:24:
                    d6:9e:06:f9:35:53:df:c8:fc:1e:e2:25:07:fc:fa:
                    68:c5:b9:35:36:01:54:34:57:61:f9:39:74:35:e5:
                    7c:da:1e:a2:45:b3:73:df:ed:52:83:63:ab:40:28:
                    d1:3f:19:28:b7:76:43:2e:d6:18:3d:25:9b:48:ec:
                    59:12:96:ec:7c:75:05:2b:3b:cc:82:98:c9:a3:fc:
                    bf:89:4a:ca:28:01:b2:da:c6:f6:b3:70:6b:c5:86:
                    8f:4e:99:e8:84:80:5b:dd:6c:40:62:70:2a:e5:bb:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:79:A5:72:B2:77:2F:B0:D9:E6:5A:B3:1A:19:62:5C:08:81:DD
            X509v3 Authority Key Identifier:
                keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:9c:7a:e9:34:a9:7f:04:eb:51:2e:58:a3:88:6e:9e:22:
         7f:be:26:a5:49:7c:e5:d6:48:e7:fd:9e:52:a1:d9:3d:c3:af:
         98:7e:f7:1b:45:31:9b:e9:32:36:55:93:ae:34:b8:08:26:5e:
         59:7c:bb:60:85:31:9a:2d:05:df:d0:fc:67:a3:a6:26:9d:8b:
         db:43:ae:3e:c0:7f:a8:b8:27:d0:17:3a:0c:ef:2c:51:76:be:
         37:30:f4:3f:a8:78:cb:01:c1:0c:4d:63:71:bb:ae:f2:33:c7:
         07:ae:12:bf:e5:ea:35:91:ce:68:a5:32:ea:10:64:3c:cc:10:
         8d:c7:b5:1d:ed:63:0a:03:83:02:77:35:ed:c4:e9:e0:53:b4:
         ee:9c:86:a9:21:d1:17:33:79:c7:e6:bd:67:c4:68:6a:3e:61:
         44:ee:d7:47:9c:9b:f1:15:49:45:b8:83:a5:9f:64:82:d6:5d:
         dc:fe:67:9d:b2:1c:24:d7:a4:b1:44:c0:81:23:23:1b:b6:6a:
         6d:b3:3d:07:7f:7e:61:fc:73:ee:35:de:9a:aa:43:7e:fa:aa:
         28:91:ba:59:a0:42:08:7e:f1:4e:f5:61:ef:4e:78:f7:9d:dd:
         8c:4c:e5:6d:84:44:44:90:1e:cc:c3:28:df:df:c3:ac:ce:10:
         8c:33:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client