Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e34372e302f32342d3234203d3e203532323537.roa
File:                     3138312e3139392e34372e302f32342d3234203d3e203532323537.roa (raw, json)
Hash identifier:          hkennDdWY8ndN8Ve81aXA8S0p/t/ydt4AYmrBqG1dSc=
Subject key identifier:   93:9F:5F:E9:0D:7C:B9:AA:F2:89:DE:0F:7B:11:BD:76:F5:25:5A:59
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       19E685D12BAAA93DB5455EC16238B2275DDE6BD6
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e34372e302f32342d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 18:11:14 +0000
ROA not before:           Tue 04 Feb 2025 18:06:14 +0000
ROA not after:            Tue 03 Feb 2026 18:11:14 +0000
asID:                     52257
IP address blocks:        181.199.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e6:85:d1:2b:aa:a9:3d:b5:45:5e:c1:62:38:b2:27:5d:de:6b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:14 2025 GMT
            Not After : Feb  3 18:11:14 2026 GMT
        Subject: CN=939F5FE90D7CB9AAF289DE0F7B11BD76F5255A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:36:4b:dd:a0:96:6a:81:5b:22:ac:39:80:
                    53:45:fc:c2:09:bb:6b:c3:aa:73:da:3c:66:42:0a:
                    5d:70:03:26:86:a0:31:7b:16:ca:b1:83:7a:8d:9d:
                    c4:ba:d7:09:fb:17:7d:7c:90:1b:5c:f7:c9:42:a6:
                    7e:25:07:58:52:e5:c8:d0:a0:e5:39:78:97:e1:ce:
                    ba:13:84:c6:8a:ff:bd:7e:d6:b6:e7:70:f8:11:12:
                    5e:51:16:c9:68:3c:8e:f4:07:c1:42:79:0b:72:72:
                    41:3a:e8:d5:8c:84:4f:b8:c7:ad:04:4b:06:ef:4d:
                    af:38:09:82:d1:f9:3a:8f:42:c7:d4:ab:ec:c4:75:
                    7a:b9:8e:eb:ee:c6:8d:e4:c3:7e:05:19:96:a0:4a:
                    ce:ce:97:db:ef:2e:ea:cf:67:b7:74:24:a2:9a:37:
                    f3:0e:c1:e5:e7:78:4b:dd:28:7b:ae:64:33:e3:ed:
                    74:2e:6c:29:12:aa:67:91:a6:cd:0a:14:4d:80:bb:
                    3d:00:17:b0:b5:51:cd:dc:07:70:4c:fa:43:47:58:
                    10:b9:05:6d:f6:2c:40:7f:d2:f3:52:42:44:eb:4d:
                    76:37:32:0f:06:b3:1b:15:92:78:6c:b2:bb:14:46:
                    b0:8c:1a:d8:88:6b:34:2c:24:89:c3:e1:98:a7:09:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9F:5F:E9:0D:7C:B9:AA:F2:89:DE:0F:7B:11:BD:76:F5:25:5A:59
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e34372e302f32342d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:39:b7:b8:03:26:f2:0d:33:3b:dc:54:6c:30:02:f9:14:
         94:2c:ee:d8:ef:4f:2f:9c:60:1f:2f:f2:f4:7e:49:d3:84:28:
         76:9b:38:db:1d:a2:eb:b8:79:6f:05:a3:10:5a:1a:91:9b:f8:
         ae:06:f8:e3:48:f2:75:9a:15:cc:8f:e5:09:6d:6d:36:53:59:
         7e:bb:9e:fa:82:63:18:3f:2b:ef:12:94:85:73:f4:f0:11:74:
         43:d2:ae:f3:36:04:f8:77:63:2c:ae:92:40:b5:72:3c:98:e4:
         19:ae:f4:b0:cb:57:43:fd:56:3d:01:41:a2:33:88:24:68:0b:
         6f:36:a4:c1:f1:2b:83:da:ef:dc:bc:33:fc:5f:2c:0a:80:d6:
         51:0d:19:ab:c0:47:4f:df:79:01:ff:68:69:7c:73:f2:4a:89:
         05:c4:67:b9:6c:e6:60:ce:99:96:51:11:bb:05:72:b9:86:d8:
         53:32:88:b0:9c:74:fd:1a:12:f0:ea:11:ed:03:0b:c3:c7:b4:
         c5:8b:b0:6b:65:06:77:1e:d1:a5:26:d3:1a:91:2d:59:9b:b6:
         e5:0f:03:4d:f9:75:6b:60:63:9b:c3:2e:d7:a1:8f:84:5b:94:
         43:97:73:8f:75:f7:57:26:0f:0c:9d:38:ce:de:8f:72:97:ca:
         3c:6a:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:16:11 2025 by rpki-client