Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa
File:                     3139302e39352e3132382e302f31372d3234203d3e203237393437.roa (raw, json)
Hash identifier:          bSZLiBPC02AeesZnwCAOTctJZI20gDiXefo4DBmSPhE=
Subject key identifier:   56:30:D5:E8:E0:E3:46:F3:55:18:9B:3A:44:42:C9:D8:DD:F9:6B:3B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       503F4381E4ADCB1FC2CD65AB76023F80CF7F8710
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:26 +0000
ROA not before:           Tue 04 Feb 2025 18:06:26 +0000
ROA not after:            Tue 03 Feb 2026 18:11:26 +0000
asID:                     27947
IP address blocks:        190.95.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:43:81:e4:ad:cb:1f:c2:cd:65:ab:76:02:3f:80:cf:7f:87:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:26 2025 GMT
            Not After : Feb  3 18:11:26 2026 GMT
        Subject: CN=5630D5E8E0E346F355189B3A4442C9D8DDF96B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:bf:a2:4b:c1:de:9d:aa:18:12:25:84:af:
                    7e:c2:6c:3b:ba:b8:7e:3d:7d:e2:e9:a1:5c:0b:a8:
                    13:95:b4:fc:b0:26:cd:21:bb:2a:f7:bf:11:4e:54:
                    7e:d1:63:1c:5b:7d:5d:0f:89:28:dc:e9:11:dd:e3:
                    8c:8d:40:63:a5:c7:33:0e:74:e2:d0:d7:f4:26:12:
                    07:13:4e:c4:3a:4c:fa:be:8b:87:92:0d:b9:a3:b7:
                    92:8a:f2:67:39:e6:40:dc:e8:b9:f7:6b:12:bf:78:
                    35:21:bd:31:5f:f2:df:be:c2:bc:5e:83:12:c5:df:
                    06:6b:97:e3:f7:34:11:34:0b:d3:8d:60:f1:b5:83:
                    fc:52:dd:d8:f9:7b:ea:8e:64:38:ac:ec:85:0c:bf:
                    2b:6e:a3:36:10:7c:9c:11:0b:77:8c:62:79:a0:21:
                    c3:6f:5a:89:82:49:f4:60:df:46:6e:f9:61:b4:fe:
                    03:a1:07:73:c2:29:ad:8b:9c:9f:3c:3c:ed:53:ba:
                    8e:99:5c:23:76:3a:55:e6:90:d9:15:47:69:c6:b1:
                    71:e8:d4:c0:73:dd:ba:91:93:ed:c8:79:f1:b1:df:
                    2e:de:c5:37:9e:f7:f7:c5:07:e2:63:09:22:c4:25:
                    f5:1f:39:09:be:a1:06:5f:ae:4a:c9:53:c2:16:0e:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:30:D5:E8:E0:E3:46:F3:55:18:9B:3A:44:42:C9:D8:DD:F9:6B:3B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.95.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:23:98:cb:c3:d1:b0:60:96:1a:c9:f6:e5:16:db:29:c8:b8:
         f3:91:1e:0c:40:d0:a8:d3:28:4d:7e:1c:b2:ea:07:52:18:e3:
         06:86:95:1b:c9:fa:18:11:fa:5b:40:7c:68:0d:6b:03:39:5d:
         e2:80:23:e7:74:b6:71:94:88:e1:1f:f6:4f:49:63:f9:10:6c:
         d1:28:7e:b7:d2:45:61:ff:df:14:92:85:29:d4:bf:e2:3b:43:
         fe:f7:5a:3d:ec:e9:fa:79:af:aa:cb:de:03:1c:a1:f4:53:90:
         05:a7:15:54:76:d1:77:03:4f:27:dd:45:e4:b6:ec:02:b4:1f:
         6d:5e:d4:f6:d4:d6:32:16:51:af:6f:32:9d:43:3b:d7:11:15:
         c6:b2:a4:4a:c9:59:5a:61:22:99:fe:ae:58:ad:19:ac:99:bc:
         1c:ba:b3:09:b0:ed:9c:24:c6:88:16:86:b5:0a:59:38:af:f2:
         d9:55:34:97:69:b8:5b:7b:a2:86:03:50:a1:11:a4:35:df:bd:
         52:c1:38:0d:89:a5:be:42:5e:29:23:bc:0f:d4:8d:74:63:2a:
         00:fd:97:23:bb:95:3f:d4:bd:9f:0b:d4:b0:da:0c:b7:b2:dc:
         6d:3a:e7:40:d9:50:5b:71:77:24:6b:62:ef:76:63:78:7f:ea:
         b6:71:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:15 2025 by rpki-client