Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e3132382e302f31372d3234203d3e203532323537.roa
File:                     3138312e3139382e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier:          aVFb1WOfiuBAs4MndnoKRfQGEFc8oGivga6RZVaGnyQ=
Subject key identifier:   B0:F4:E8:9C:FA:DE:16:60:A0:D9:B0:CE:AE:30:9A:FD:2C:80:19:BA
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       43BD51008CB4620B0DFE3D6D27CBE49B2F5A0423
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e3132382e302f31372d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 18:11:14 +0000
ROA not before:           Tue 04 Feb 2025 18:06:14 +0000
ROA not after:            Tue 03 Feb 2026 18:11:14 +0000
asID:                     52257
IP address blocks:        181.198.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:51:00:8c:b4:62:0b:0d:fe:3d:6d:27:cb:e4:9b:2f:5a:04:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:14 2025 GMT
            Not After : Feb  3 18:11:14 2026 GMT
        Subject: CN=B0F4E89CFADE1660A0D9B0CEAE309AFD2C8019BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:de:80:39:85:83:e0:89:f8:83:cc:79:90:
                    16:ed:2f:fc:51:83:3b:35:ae:7c:2a:0e:af:5f:5c:
                    94:55:81:92:28:33:22:cf:ee:2c:6e:a9:1d:39:d8:
                    7e:98:21:19:84:67:bb:be:da:5f:2f:a9:d5:3d:ae:
                    65:43:c4:68:c7:bb:42:b9:9d:25:ca:c0:5c:79:ec:
                    68:21:3a:62:65:e0:14:02:fd:69:10:ec:45:4f:c8:
                    58:2f:a2:2c:fd:92:ce:a0:dc:27:30:da:36:a0:38:
                    09:f0:8e:19:3b:5d:a2:dc:41:cd:52:b8:65:24:72:
                    37:0c:8d:a1:33:9d:8e:8f:b3:9f:5b:21:50:77:66:
                    03:b1:52:d9:2e:27:7f:90:9b:22:49:bf:c4:d0:8c:
                    97:8f:22:ce:82:78:85:b8:83:1f:4e:19:2f:5d:c1:
                    e0:53:a1:f1:6f:a3:ac:c1:ee:fe:e5:1b:52:fa:67:
                    94:70:2a:00:14:ca:93:43:5d:69:7c:ec:e0:8b:27:
                    a6:8c:1c:d2:48:68:50:6c:1f:9e:98:25:39:60:a3:
                    be:5d:73:45:e9:3e:08:93:8d:7d:d9:8f:cd:c8:49:
                    df:1c:0d:dd:47:ec:41:72:ae:16:3e:ef:69:84:6b:
                    84:57:1c:b1:cb:7c:08:89:7f:45:bc:46:45:5b:fa:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F4:E8:9C:FA:DE:16:60:A0:D9:B0:CE:AE:30:9A:FD:2C:80:19:BA
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e3132382e302f31372d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:4f:b9:68:e3:f6:e0:61:d9:4b:88:07:4f:66:3c:7e:33:
         bf:bc:ba:08:6f:60:f1:cb:2c:60:a7:2e:06:3c:2c:eb:d4:84:
         14:b9:ac:4e:00:da:87:7c:2b:6b:59:fe:06:9c:a7:18:10:71:
         40:a8:63:82:41:f3:83:49:4a:4e:33:07:db:99:8c:31:e2:45:
         e7:94:8e:02:ab:d1:83:ee:26:41:80:47:4f:99:76:d9:09:c2:
         de:8e:d5:3d:f2:3e:17:67:c7:e8:aa:15:7b:02:5a:e4:48:e3:
         c6:25:e5:76:f8:fc:e3:04:81:52:62:46:5a:6b:69:42:b9:0a:
         a5:62:e8:d7:c0:bb:f7:f7:3b:ae:e7:cd:d9:91:af:7b:71:ad:
         a9:56:c2:64:d3:8c:4f:24:f8:e5:7b:bf:b9:72:9f:74:91:33:
         2c:25:9e:0b:95:f2:0e:06:a9:6c:d2:51:9f:07:3b:e0:53:85:
         16:7c:c2:f4:84:29:3c:d6:95:1f:78:7a:5f:61:fb:23:aa:83:
         a7:03:21:2d:87:d6:3d:b4:f5:8a:bc:8b:14:20:68:eb:c1:01:
         08:de:3d:7e:26:4c:a4:45:d4:6a:84:78:e4:19:df:3c:24:21:
         a9:3a:f3:20:e9:f4:6d:26:ff:76:25:35:cf:c1:32:28:6c:0d:
         0f:3f:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:15 2025 by rpki-client