Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa
File:                     3139322e38342e31322e302f32342d3234203d3e2033363430.roa (raw, json)
Hash identifier:          vwxOtcrbbA5/chktIHzzEoGGa3brK8x+mIC9EJtgbjQ=
Subject key identifier:   4F:55:C0:60:C5:79:20:28:13:C1:32:96:66:17:BB:26:83:52:F1:3C
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       39A64E23A6961B2A2F0200FE1F6C117896551E40
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa
Signing time:             Tue 04 Feb 2025 20:03:13 +0000
ROA not before:           Tue 04 Feb 2025 19:58:13 +0000
ROA not after:            Tue 03 Feb 2026 20:03:13 +0000
asID:                     3640
IP address blocks:        192.84.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:4e:23:a6:96:1b:2a:2f:02:00:fe:1f:6c:11:78:96:55:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Feb  4 19:58:13 2025 GMT
            Not After : Feb  3 20:03:13 2026 GMT
        Subject: CN=4F55C060C579202813C132966617BB268352F13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:b6:a5:84:12:be:17:8f:fa:cc:ad:46:04:
                    6c:66:26:e6:21:ac:f5:0e:a1:3b:d7:9c:80:1e:35:
                    1d:a7:95:19:ae:83:8b:ad:a5:d2:b4:9f:2b:e0:37:
                    27:bc:b9:e6:f4:5e:42:07:8a:3a:e2:ec:ca:e4:7d:
                    a7:ed:e7:73:3b:9a:e3:43:4b:4b:01:36:12:1c:72:
                    82:19:4f:09:84:a0:83:45:56:97:16:8d:ac:03:77:
                    ff:57:22:9a:1b:d9:b6:84:80:dd:fe:c2:6d:31:14:
                    26:b8:b3:ce:61:d5:47:53:19:52:0d:4d:35:7b:38:
                    3b:83:d4:54:fd:f1:02:e2:ef:30:83:95:4c:a7:27:
                    dc:e0:b2:1f:f4:67:e4:05:15:3f:8d:8c:0f:82:5b:
                    ad:4b:ee:87:19:86:83:5d:e5:a7:96:46:65:25:17:
                    d6:2d:5e:19:ae:0c:75:51:a3:a8:4a:ca:4b:25:24:
                    8f:6d:4b:63:27:78:14:ff:fa:15:21:35:fb:bb:e1:
                    29:c7:dc:0e:1c:96:f9:3c:f0:a1:dc:59:fe:28:93:
                    31:1d:4f:4b:05:0a:fe:6e:50:aa:0c:63:23:8d:9c:
                    10:5c:6d:0f:ec:6a:4c:cb:a2:5d:6f:a4:2e:15:55:
                    96:a2:28:1e:a8:c4:58:27:36:a5:27:ad:18:7c:6b:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:C0:60:C5:79:20:28:13:C1:32:96:66:17:BB:26:83:52:F1:3C
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ec:9d:aa:11:2c:67:8f:9b:41:0b:0e:1a:34:21:8a:b3:0e:
         fc:a9:68:b6:91:8a:97:66:2a:27:d9:c0:f4:67:7a:f5:3f:7f:
         ca:11:cb:f6:88:30:68:95:f9:69:1c:e0:1f:4b:6e:c8:e9:6a:
         e5:92:26:87:1c:00:71:fa:56:b5:ad:3f:28:b8:1d:83:73:60:
         99:59:fa:31:ab:df:5f:cd:56:b4:65:21:35:5c:b6:9a:50:ab:
         48:63:be:ff:45:0c:63:a9:86:f1:80:1b:b1:e2:ba:cf:48:b2:
         f2:4a:69:cd:0f:b4:a6:33:f9:54:b8:11:df:b5:90:4a:08:9d:
         c0:2c:d7:ce:a8:9d:9d:1b:fd:33:de:b9:07:02:7d:4e:ff:90:
         e4:50:87:e6:02:90:eb:30:4b:32:15:a0:f7:b3:7a:23:2e:cf:
         dc:a4:63:4e:ee:ac:5d:0e:ce:bb:ca:94:fb:f5:53:33:7a:41:
         ce:b4:33:95:3b:5c:9b:e2:57:95:f5:8b:c7:85:21:20:71:05:
         61:76:d4:cd:91:45:40:1e:20:e9:be:23:ee:8a:86:c7:88:83:
         cd:68:6a:40:f7:48:5d:93:a7:c3:79:04:f0:b8:99:16:53:60:
         90:84:31:de:e8:b5:a5:5e:1b:c3:8a:01:54:d3:4e:78:cc:30:
         97:46:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:02 2025 by rpki-client