Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e302e302f31382d3138203d3e2033363430.roa
File:                     3135382e39372e302e302f31382d3138203d3e2033363430.roa (raw, json)
Hash identifier:          t/NsPECSNVlJogAZf2o2PSrUaWu60NZMvHkrC1OcSNc=
Subject key identifier:   56:32:64:41:B8:C0:0D:A6:80:27:20:8A:8F:60:02:A0:4E:4D:DB:8F
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       0E617CDB85AABA6BE7D39106B3012344180B02
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e302e302f31382d3138203d3e2033363430.roa
Signing time:             Tue 04 Feb 2025 20:03:13 +0000
ROA not before:           Tue 04 Feb 2025 19:58:13 +0000
ROA not after:            Tue 03 Feb 2026 20:03:13 +0000
asID:                     3640
IP address blocks:        158.97.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:61:7c:db:85:aa:ba:6b:e7:d3:91:06:b3:01:23:44:18:0b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Feb  4 19:58:13 2025 GMT
            Not After : Feb  3 20:03:13 2026 GMT
        Subject: CN=56326441B8C00DA68027208A8F6002A04E4DDB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:81:fa:28:c8:4c:ec:77:21:98:b9:74:4b:
                    b8:e8:da:91:b1:89:7f:cd:0b:e9:74:2a:23:fa:de:
                    f1:49:25:87:a1:a4:c8:13:4d:5f:b3:7e:3f:bb:63:
                    16:24:70:6b:38:04:5c:3f:c1:01:7e:0d:99:2c:51:
                    e6:e6:1d:d0:9d:b7:41:75:94:be:02:58:40:d9:60:
                    ed:ef:a3:c0:4c:4e:f2:f1:24:c7:d1:13:bb:70:ec:
                    fd:c2:f8:0a:0d:ec:cd:00:7b:8f:da:5f:8a:b3:8a:
                    60:2b:67:95:d5:db:98:8a:41:12:47:b8:b3:3c:79:
                    3b:a1:37:b2:81:a3:04:fc:78:05:d5:61:6d:02:f2:
                    5d:5f:3e:b2:e8:a8:d0:54:d2:35:a8:26:1e:de:c7:
                    1a:e8:c6:3c:47:17:1c:67:b6:93:d7:0e:ed:b7:3b:
                    ea:c4:93:6f:1d:90:ac:97:bc:21:fc:53:8c:ac:6c:
                    83:f2:6f:65:75:42:28:98:dd:0d:26:21:eb:fa:f1:
                    92:ee:56:d6:45:84:31:f5:47:46:0a:19:cd:26:bd:
                    eb:a1:5b:25:d0:3b:d7:49:eb:ec:8d:34:12:0e:84:
                    5d:11:30:7d:b2:c5:94:3a:80:9b:c4:bd:e8:d4:86:
                    da:e1:ce:d9:ef:60:cf:14:5d:2d:ef:14:1c:71:5f:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:64:41:B8:C0:0D:A6:80:27:20:8A:8F:60:02:A0:4E:4D:DB:8F
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e302e302f31382d3138203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:9d:de:72:21:1c:67:0f:33:21:fe:0f:86:41:33:f3:f3:30:
         3a:da:0b:db:7a:e8:86:d4:a0:f5:14:98:b4:8d:16:08:83:56:
         00:1e:88:62:3a:0c:17:49:81:42:71:f3:05:d5:cb:50:1d:7a:
         8f:c1:79:c8:26:91:15:99:2e:4d:ee:66:8b:d4:7e:26:1c:65:
         38:4d:84:d8:44:92:57:cb:15:e6:c3:fa:5e:17:ca:27:04:6a:
         eb:ec:72:8b:22:38:8e:8d:d9:e3:22:e9:67:96:0c:8a:5e:93:
         5c:54:ea:03:c5:93:5b:ac:9d:a6:ce:90:ff:c2:5b:50:0c:32:
         fe:1b:71:12:cb:e6:b8:b2:bb:58:52:94:99:72:6f:b6:e4:ca:
         28:ac:c3:cb:96:35:af:db:dc:f3:e4:34:d7:3b:1d:b8:ab:f5:
         d4:6a:76:05:7f:c0:5b:c0:ea:39:87:fb:49:9d:0b:02:0b:a3:
         a2:78:3f:69:16:58:e8:6e:12:5f:2f:23:34:11:c9:5c:51:2c:
         2d:90:03:05:76:a8:6e:a1:79:c3:97:ff:74:72:81:99:75:ca:
         d3:24:b3:9d:5f:7e:79:ea:86:c8:ea:d7:81:83:1f:b2:97:19:
         86:8a:0a:73:a1:44:97:c2:3c:38:00:b7:df:13:12:22:f7:8b:
         ee:c4:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:53:37 2025 by rpki-client