Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa
File:                     3135382e39372e36342e302f31392d3233203d3e2033363430.roa (raw, json)
Hash identifier:          P3kMOF9oRcAJ3oJBFP1yo/Ap6qOesIBJrQdnE8tkGzE=
Subject key identifier:   42:82:1C:50:4D:EE:AA:04:A9:11:2D:BE:09:A8:78:C0:1E:83:55:72
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       292BD726C583CA565150C61020C1420552939B39
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa
Signing time:             Tue 04 Feb 2025 20:03:12 +0000
ROA not before:           Tue 04 Feb 2025 19:58:12 +0000
ROA not after:            Tue 03 Feb 2026 20:03:12 +0000
asID:                     3640
IP address blocks:        158.97.64.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 22:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2b:d7:26:c5:83:ca:56:51:50:c6:10:20:c1:42:05:52:93:9b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Feb  4 19:58:12 2025 GMT
            Not After : Feb  3 20:03:12 2026 GMT
        Subject: CN=42821C504DEEAA04A9112DBE09A878C01E835572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:45:3a:13:a2:ad:44:a2:42:4b:bc:85:b9:
                    63:12:81:96:5e:b5:91:1a:a2:35:18:ec:99:0e:61:
                    51:9f:d7:3f:b2:92:b3:10:df:3b:3f:5b:3d:b2:be:
                    1a:90:6c:7e:b8:0f:6b:74:02:dd:09:88:e7:aa:c1:
                    13:e6:19:6c:d2:18:df:fb:bc:d7:9d:4c:c7:1e:d5:
                    d8:be:61:66:9e:b8:15:08:bc:c0:e6:6f:1f:29:35:
                    71:4e:a0:32:2b:29:33:09:ef:be:9b:3b:4c:aa:b8:
                    f6:e0:3c:b6:0d:95:ae:3a:8b:cc:a6:f4:96:cb:c1:
                    c8:3c:c1:c2:b2:69:bf:71:97:ff:4d:50:9d:49:49:
                    74:92:ee:c3:e2:2c:58:fa:f2:84:ba:b9:77:4a:da:
                    85:5d:0d:d4:71:b5:fa:95:f3:eb:da:50:18:21:fa:
                    a5:71:d8:05:0a:ec:2e:81:aa:03:83:d0:8a:ae:f4:
                    de:bd:38:be:f3:2e:47:3c:a7:2d:25:d0:12:53:7b:
                    86:ca:ce:2d:7b:a7:e7:10:d2:bc:4a:f0:2e:04:6a:
                    0c:ef:00:e2:83:0d:b0:29:92:13:47:7b:b2:47:37:
                    fd:61:ff:b1:4e:64:3e:bc:0e:a4:76:fa:71:1c:bc:
                    49:2d:7a:2d:d6:e0:0a:4a:39:8a:e0:58:5d:3b:00:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:82:1C:50:4D:EE:AA:04:A9:11:2D:BE:09:A8:78:C0:1E:83:55:72
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:3a:c1:4a:f5:7d:0e:75:d3:6b:d5:d3:1d:6b:c3:9a:53:
         db:df:7a:ad:05:da:09:9d:b7:e0:33:f2:be:e1:3e:cf:24:6c:
         5f:d8:d7:ff:87:5d:52:ba:0d:94:2d:87:43:14:e2:b0:30:c1:
         20:d8:4a:b1:bd:e3:e3:9f:a0:ac:3f:89:8e:52:3a:8c:62:6f:
         68:0b:d7:f6:c6:7a:4f:5e:4c:ac:e9:87:84:0b:7d:94:98:12:
         ac:9b:b2:a1:87:20:53:6f:20:df:a9:bd:07:7e:9a:69:ef:92:
         cb:b2:7c:3a:8b:35:d1:51:5b:5b:6b:98:88:07:64:3f:53:23:
         28:f7:d0:aa:8f:97:9b:39:1f:b4:54:4c:89:2c:8a:63:46:af:
         5d:a8:77:7b:e4:7c:2e:0f:c9:09:c5:eb:f7:b2:46:a9:89:b9:
         d6:fc:b1:6c:81:6c:9a:ae:cd:c4:ac:4e:a9:7a:2f:b7:df:24:
         2f:ce:a2:3f:d0:9e:03:de:c2:77:76:6e:55:82:3c:36:03:1f:
         59:27:47:b1:a9:00:dd:2c:d1:5b:d0:00:17:66:e6:f6:bb:5c:
         a8:c8:cf:e5:11:ec:44:ed:c9:b1:da:03:71:ea:8c:f1:d2:29:
         a5:67:47:23:50:44:33:85:a7:c4:66:c8:ba:e5:c3:65:47:e1:
         e9:f3:cd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:01 2025 by rpki-client