Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203237393437.roa
File:                     3138312e33392e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          Jm9C3OH1LAtLBc5apYDItheh91ZCtIH8vuCqPATfU3E=
Subject key identifier:   F1:DF:0A:4E:A0:35:70:5A:6A:64:10:B0:7C:5C:63:0C:CC:0C:33:CA
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       570CD0921EBC6B3804A6DC93A466B832FF231FCB
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:13 +0000
ROA not before:           Tue 04 Feb 2025 18:06:13 +0000
ROA not after:            Tue 03 Feb 2026 18:11:13 +0000
asID:                     27947
IP address blocks:        181.39.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 17:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0c:d0:92:1e:bc:6b:38:04:a6:dc:93:a4:66:b8:32:ff:23:1f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:13 2025 GMT
            Not After : Feb  3 18:11:13 2026 GMT
        Subject: CN=F1DF0A4EA035705A6A6410B07C5C630CCC0C33CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:35:c4:e6:67:82:fd:65:4b:51:7d:0f:da:
                    85:15:e0:f3:30:26:eb:5b:b9:3a:82:9b:6f:76:46:
                    3f:86:58:0d:c2:e1:25:23:39:51:22:ee:12:cf:e9:
                    34:15:d2:2c:49:bb:b1:c0:3b:ad:aa:f7:12:c5:e8:
                    ff:0e:ce:ee:e7:a2:20:f4:b6:76:ae:c7:b9:eb:4f:
                    05:0a:1b:3c:46:ff:eb:85:1c:7c:60:f1:6b:b6:30:
                    67:18:fe:1c:10:7a:8e:b3:77:9e:ed:33:2a:69:8a:
                    e2:16:15:13:7d:be:4b:bc:62:e2:66:0a:45:22:09:
                    aa:33:2b:ed:9e:ca:a4:0f:30:c6:41:90:6f:d9:77:
                    ce:74:56:f5:41:c6:c9:c2:c5:1b:69:9a:0c:69:21:
                    4f:2f:0f:1c:10:3a:86:ce:2a:d2:f2:6e:a7:1b:3e:
                    42:ad:73:27:18:75:fb:15:9c:65:75:9b:8d:e9:40:
                    12:db:e9:bf:95:ab:8b:f6:9d:27:df:e5:84:5b:e8:
                    f1:ba:cb:2e:5a:05:d8:67:b5:c8:fc:cf:17:81:24:
                    27:5c:ef:28:9d:b5:6c:b6:b2:ab:40:2c:20:8d:ca:
                    88:c2:57:c0:4c:96:23:33:9f:de:7b:e9:b6:88:76:
                    f2:ea:cc:9b:ea:01:a7:d5:7a:0f:54:f6:72:39:b9:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:0A:4E:A0:35:70:5A:6A:64:10:B0:7C:5C:63:0C:CC:0C:33:CA
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:38:65:17:a2:97:2c:04:b3:1f:1a:4d:6e:c7:80:f4:6a:
         c5:4e:07:26:91:41:a2:3b:cd:e7:20:24:98:17:0b:1c:58:c4:
         e2:dd:82:18:98:80:f1:a6:eb:07:d4:77:48:ed:99:e2:37:6d:
         7c:71:68:07:55:b2:0a:9c:9c:d7:bf:f6:40:f6:28:11:38:f8:
         d4:13:87:f9:78:e0:09:fb:4c:cf:35:a6:6c:48:16:98:68:d3:
         7f:7d:08:7f:c6:63:87:a4:59:c4:76:e4:63:37:ff:33:0d:a4:
         5e:7a:fa:c4:33:b3:ed:70:60:86:55:86:18:58:2f:02:fd:f5:
         ee:27:fa:f4:a7:4d:cb:0b:3b:a8:40:43:ad:dc:78:a5:f2:72:
         ac:a5:e1:b1:85:2d:3a:bb:29:ab:3a:26:6b:d5:09:98:4b:86:
         d4:f3:c3:9c:19:fc:ad:97:a8:b8:83:a5:af:a1:aa:af:91:30:
         65:cc:92:86:c3:e8:5f:4d:be:db:c3:1b:bd:ff:b4:38:70:04:
         7b:f6:4e:94:73:7e:7d:3d:8a:24:0a:1b:89:bb:89:d8:a4:ed:
         b5:98:f6:31:ea:3d:71:9a:a1:c7:5f:7d:3d:7c:87:ed:9d:8d:
         0f:07:08:b6:0a:a0:5e:b4:dd:f6:55:c5:03:06:d9:c8:02:41:
         81:7a:ac:b2
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUVwzQkh68azgEptyTpGa4Mv8jH8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MTNaFw0yNjAyMDMxODExMTNaMDMxMTAvBgNV
BAMTKEYxREYwQTRFQTAzNTcwNUE2QTY0MTBCMDdDNUM2MzBDQ0MwQzMzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdDXE5meC/WVLUX0P2oUV4PMw
JutbuTqCm292Rj+GWA3C4SUjOVEi7hLP6TQV0ixJu7HAO62q9xLF6P8Ozu7noiD0
tnaux7nrTwUKGzxG/+uFHHxg8Wu2MGcY/hwQeo6zd57tMyppiuIWFRN9vku8YuJm
CkUiCaozK+2eyqQPMMZBkG/Zd850VvVBxsnCxRtpmgxpIU8vDxwQOobOKtLybqcb
PkKtcycYdfsVnGV1m43pQBLb6b+Vq4v2nSff5YRb6PG6yy5aBdhntcj8zxeBJCdc
7yidtWy2sqtALCCNyojCV8BMliMzn9576baIdvLqzJvqAafVeg9U9nI5ubzpAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU8d8KTqA1cFpqZBCwfFxjDMwMM8owHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzMTJlMzMzOTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtScwDQYJKoZI
hvcNAQELBQADggEBACZeOGUXopcsBLMfGk1ux4D0asVOByaRQaI7zecgJJgXCxxY
xOLdghiYgPGm6wfUd0jtmeI3bXxxaAdVsgqcnNe/9kD2KBE4+NQTh/l44An7TM81
pmxIFpho0399CH/GY4ekWcR25GM3/zMNpF56+sQzs+1wYIZVhhhYLwL99e4n+vSn
TcsLO6hAQ63ceKXycqyl4bGFLTq7Kas6JmvVCZhLhtTzw5wZ/K2XqLiDpa+hqq+R
MGXMkobD6F9NvtvDG73/tDhwBHv2TpRzfn09iiQKG4m7idik7bWY9jHqPXGaocdf
fT18h+2djQ8HCLYKoF603fZVxQMG2cgCQYF6rLI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:02 2025 by rpki-client