Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2F7B8E4821C85116015786C26A09421E8117C088F17FDA0DC41BA74DD66741/0/3130392e3130342e3134382e302f32322d3234203d3e203235373939.roa
File:                     3130392e3130342e3134382e302f32322d3234203d3e203235373939.roa (raw, json)
Hash identifier:          21mVaCnkZqBB/XKf4/cTtf2DBddalY46eA9ubD8EeVk=
Subject key identifier:   76:59:6F:42:E7:01:B4:E3:27:4D:E0:BC:EF:D6:3D:C8:73:CA:B6:F6
Certificate issuer:       /CN=E9DBF8141554FF598B3E53996A47C6DD5EB044D1
Certificate serial:       58189FE33F38265D10EFEBA48DA0E545E1BDA86C
Authority key identifier: E9:DB:F8:14:15:54:FF:59:8B:3E:53:99:6A:47:C6:DD:5E:B0:44:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9DBF8141554FF598B3E53996A47C6DD5EB044D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2F7B8E4821C85116015786C26A09421E8117C088F17FDA0DC41BA74DD66741/0/3130392e3130342e3134382e302f32322d3234203d3e203235373939.roa
Signing time:             Tue 04 Feb 2025 18:35:39 +0000
ROA not before:           Tue 04 Feb 2025 18:30:39 +0000
ROA not after:            Tue 03 Feb 2026 18:35:39 +0000
asID:                     25799
IP address blocks:        109.104.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2F7B8E4821C85116015786C26A09421E8117C088F17FDA0DC41BA74DD66741/0/E9DBF8141554FF598B3E53996A47C6DD5EB044D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2F7B8E4821C85116015786C26A09421E8117C088F17FDA0DC41BA74DD66741/0/E9DBF8141554FF598B3E53996A47C6DD5EB044D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9DBF8141554FF598B3E53996A47C6DD5EB044D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:18:9f:e3:3f:38:26:5d:10:ef:eb:a4:8d:a0:e5:45:e1:bd:a8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9DBF8141554FF598B3E53996A47C6DD5EB044D1
        Validity
            Not Before: Feb  4 18:30:39 2025 GMT
            Not After : Feb  3 18:35:39 2026 GMT
        Subject: CN=76596F42E701B4E3274DE0BCEFD63DC873CAB6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:68:6b:37:4f:8f:7b:0a:55:47:1e:29:be:
                    16:3d:00:61:f1:5e:ee:20:4f:aa:f1:e3:df:43:e3:
                    25:01:53:6c:44:34:c1:3b:16:21:7a:44:f3:41:e5:
                    2c:e5:d3:40:c9:f5:7d:90:c8:2a:80:61:f7:00:bc:
                    17:d1:d2:6b:5a:7b:f3:35:e0:35:a2:09:63:6e:83:
                    f8:d9:fa:2d:e0:76:fe:8b:fa:f9:23:d3:7b:f4:5d:
                    6d:51:c9:f5:52:32:62:60:aa:06:93:c2:64:48:28:
                    5c:82:bd:91:1f:b3:c2:58:4b:5e:cf:ae:94:89:e6:
                    16:ef:a2:ee:da:a1:63:83:94:97:51:b1:1d:1c:9a:
                    4d:fd:17:e8:56:fb:cb:78:6b:ef:73:d9:27:b8:1a:
                    e3:b4:79:9a:dc:68:6c:92:36:65:b5:96:a2:75:f8:
                    c5:59:0d:bc:25:59:0e:66:67:2f:4d:e5:51:8a:4a:
                    60:97:2b:3c:9d:94:97:c9:5e:ad:90:67:40:6b:32:
                    55:40:81:55:de:98:60:4e:61:7e:e0:21:46:43:46:
                    23:65:e2:a0:9f:e1:99:0f:86:a2:e2:14:a0:3b:cb:
                    0c:4e:d1:11:4a:5b:d4:1e:17:b8:5d:eb:53:26:f0:
                    bb:af:2b:95:cf:05:e3:de:f8:78:3e:1f:b3:97:56:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:6F:42:E7:01:B4:E3:27:4D:E0:BC:EF:D6:3D:C8:73:CA:B6:F6
            X509v3 Authority Key Identifier:
                keyid:E9:DB:F8:14:15:54:FF:59:8B:3E:53:99:6A:47:C6:DD:5E:B0:44:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2F7B8E4821C85116015786C26A09421E8117C088F17FDA0DC41BA74DD66741/0/E9DBF8141554FF598B3E53996A47C6DD5EB044D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9DBF8141554FF598B3E53996A47C6DD5EB044D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2F7B8E4821C85116015786C26A09421E8117C088F17FDA0DC41BA74DD66741/0/3130392e3130342e3134382e302f32322d3234203d3e203235373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.104.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:85:29:0f:fc:43:27:73:58:a5:22:29:29:a4:10:98:39:8d:
         ff:66:ec:c6:fb:12:ae:b9:a9:ae:c2:e6:29:b2:f3:87:64:f7:
         6f:db:d9:dd:29:a1:a2:8c:e8:80:71:5c:71:ec:62:52:3f:c2:
         69:25:c2:64:72:e6:59:2c:b1:b7:a6:5f:95:61:83:35:65:17:
         b3:57:8c:5c:d5:51:6c:83:f5:1e:ac:ea:0f:ad:ca:c6:09:d0:
         c5:7e:cf:96:eb:a7:e3:47:88:66:09:3c:99:55:e8:83:a2:db:
         77:57:89:58:df:85:df:ab:b7:d9:28:25:ab:1c:75:45:68:26:
         58:27:fe:af:bd:73:32:e7:74:69:0f:f4:94:1f:78:ae:f0:34:
         61:52:c4:b4:11:b7:7f:b4:78:8f:2a:40:1e:28:36:7c:fa:65:
         3e:af:11:3d:e7:1d:2c:40:06:8f:8e:d7:93:c9:4a:2e:ab:da:
         a2:df:53:21:03:83:e6:e0:4c:93:5f:d6:59:23:c4:78:38:25:
         97:02:7b:18:dc:64:89:a4:71:25:2b:e8:5f:6a:9e:b8:7e:20:
         ce:7f:7f:12:97:f0:f3:a2:70:3b:67:6c:8b:78:be:30:f3:98:
         70:ba:52:4a:d8:f0:d9:db:2d:e6:3e:9c:ee:f6:64:55:6b:8d:
         8e:23:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:14 2025 by rpki-client