Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203139313639.roa
File:                     3230312e3231382e302e302f31382d3234203d3e203139313639.roa (raw, json)
Hash identifier:          ysY/UrSO1vzwPsrbGew8BIKxHHGNhINFtYKpp+FmlJE=
Subject key identifier:   07:9E:55:ED:19:63:ED:5F:13:70:BD:1F:BB:EC:E7:FB:FB:4E:80:C0
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       400902FCD4B30F9DD7DFE257A55B2FC64B60A778
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:24 +0000
ROA not before:           Tue 04 Feb 2025 18:06:24 +0000
ROA not after:            Tue 03 Feb 2026 18:11:24 +0000
asID:                     19169
IP address blocks:        201.218.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:09:02:fc:d4:b3:0f:9d:d7:df:e2:57:a5:5b:2f:c6:4b:60:a7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:24 2025 GMT
            Not After : Feb  3 18:11:24 2026 GMT
        Subject: CN=079E55ED1963ED5F1370BD1FBBECE7FBFB4E80C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:f8:16:ef:1e:03:7f:e8:b1:cf:93:28:eb:
                    ee:6c:0f:1f:e3:63:bd:f6:77:3f:7d:dd:bd:70:88:
                    43:6d:c7:05:81:8c:80:f8:bb:c1:50:21:80:34:2b:
                    c7:e1:40:35:48:cc:12:2b:33:66:bc:f8:bc:35:58:
                    a6:68:82:60:14:37:c8:a9:63:7d:a8:9f:b2:ec:e1:
                    54:8c:29:d6:cd:a5:15:b4:a2:b0:13:e5:57:e4:07:
                    b4:67:f0:09:cf:09:8a:9f:0c:79:d8:81:29:37:b9:
                    97:7c:39:04:9b:ee:2c:b9:b7:10:73:cb:1e:21:e3:
                    c2:a7:23:88:e7:58:82:b2:79:2c:96:18:2e:c8:d3:
                    97:75:8c:9b:1c:f3:9d:f1:0e:39:f9:39:eb:82:fd:
                    df:b4:d2:35:2f:52:a3:90:27:f4:eb:4b:0e:81:55:
                    df:2e:ae:ee:b4:aa:d3:ad:c0:9e:d9:09:12:ce:72:
                    a7:fb:a7:ee:39:65:8c:0a:4d:ee:54:02:07:28:f2:
                    34:2a:c7:fe:26:75:6c:da:3c:6d:a5:fa:08:f0:39:
                    cc:db:7e:d4:3f:a6:86:90:cd:99:ed:31:aa:26:b5:
                    d8:ef:9b:00:f9:3a:62:66:c8:38:c8:8c:a9:2b:10:
                    49:4d:74:62:db:18:92:4b:1a:d7:b0:02:47:32:fc:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:55:ED:19:63:ED:5F:13:70:BD:1F:BB:EC:E7:FB:FB:4E:80:C0
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:ec:aa:95:9e:4b:61:10:8b:9a:53:c1:0d:53:c7:70:98:
         dc:f5:7a:ea:9a:1e:ae:43:2c:19:ff:07:61:f0:d3:08:65:35:
         6b:d8:de:9a:be:c6:7a:68:6c:5e:b5:52:ed:0e:02:d9:c9:f6:
         72:db:d7:a3:b1:ba:7f:3c:db:dd:36:55:7c:ae:ae:7a:9b:48:
         ee:c3:ae:d0:e4:33:5b:81:f6:e4:48:ab:17:e8:42:f5:cf:77:
         3e:6b:73:a8:14:cc:b3:f9:11:f9:ef:7b:d3:a9:3e:fa:94:ef:
         d5:23:4e:eb:52:ae:f0:65:6d:86:a7:8a:d8:51:65:3f:df:8a:
         c9:17:1e:d7:37:57:23:75:5c:6c:2d:ed:05:59:12:e8:f0:86:
         43:b6:03:2f:ab:3f:5a:53:81:13:1f:53:81:de:1a:d8:aa:c1:
         ae:16:d8:d7:75:4a:2e:5f:86:b6:ee:01:e9:be:e0:fe:e6:3f:
         02:13:20:d9:e9:a8:71:b6:57:a8:fd:01:31:98:b2:ef:68:1d:
         bd:9c:f8:33:fc:f9:6c:5d:98:0c:02:a9:3b:9e:4c:db:20:0e:
         fd:7a:68:a2:9d:81:59:75:83:30:97:13:93:e5:e9:8e:04:a6:
         29:4f:a0:aa:3f:1b:6c:17:07:c9:ca:92:83:67:9a:dd:c5:d5:
         af:9b:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:17:04 2025 by rpki-client