Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3133322e3235352e3136342e302f32322d3234203d3e203532343638.roa
File:                     3133322e3235352e3136342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          4+40A/O/5+MOR6njVn2OJh6LtYwIN0qoJgyIuE8g/2Y=
Subject key identifier:   98:91:F3:F4:53:2E:2F:0A:97:67:22:84:E4:33:BE:C0:B7:7A:66:DD
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       2E8818D59E7868910A3F3FCC393674B72070864F
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3133322e3235352e3136342e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 03 Apr 2025 16:55:01 +0000
ROA not before:           Thu 03 Apr 2025 16:50:01 +0000
ROA not after:            Thu 02 Apr 2026 16:55:01 +0000
asID:                     52468
IP address blocks:        132.255.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 00:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:18:d5:9e:78:68:91:0a:3f:3f:cc:39:36:74:b7:20:70:86:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Apr  3 16:50:01 2025 GMT
            Not After : Apr  2 16:55:01 2026 GMT
        Subject: CN=9891F3F4532E2F0A97672284E433BEC0B77A66DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:96:7c:f2:4f:39:5f:8a:0c:70:9d:99:58:
                    db:08:50:82:01:6e:41:99:ae:bb:be:79:b8:ca:05:
                    1c:4e:16:25:98:0f:06:f8:e9:e8:5d:21:5f:b0:5c:
                    17:9a:3a:a8:c2:12:bb:92:a7:f2:11:3b:cf:e4:0d:
                    61:98:7f:a5:e4:c3:78:53:73:67:6f:e8:a0:48:d2:
                    70:74:22:72:87:cb:28:4c:85:fb:dc:23:ec:3b:27:
                    cf:65:20:c6:51:ab:aa:98:81:79:0c:94:f6:e8:0a:
                    5a:6f:5d:1b:61:91:67:0b:0d:99:ec:72:0e:a3:e6:
                    ac:d8:fc:c8:4d:97:a9:9d:c0:31:93:9c:79:56:d3:
                    91:a1:d9:c8:6e:c8:0d:df:6d:1f:3d:54:9f:6e:5c:
                    a9:5f:02:f8:99:2c:3b:7f:24:2e:26:f2:35:e8:b0:
                    47:40:c9:e5:5c:d0:0f:0e:e6:c4:8e:f5:f1:0e:39:
                    23:6d:54:00:cf:91:81:4d:3a:d8:c0:b7:78:49:59:
                    f4:23:61:16:68:5e:a5:54:4d:4b:56:50:cf:de:66:
                    f6:1a:a7:4f:b3:d5:6d:e1:df:ec:e8:13:96:88:c5:
                    c7:85:f2:fc:d0:f2:6c:8a:c5:ff:fe:b0:be:80:cb:
                    48:3d:a0:ef:63:15:06:63:95:3f:82:d9:db:60:e1:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:F3:F4:53:2E:2F:0A:97:67:22:84:E4:33:BE:C0:B7:7A:66:DD
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3133322e3235352e3136342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:31:88:e9:03:62:db:06:a6:22:7e:75:39:f7:b2:c5:cc:
         80:68:3a:77:64:43:5a:fc:ec:ff:c5:66:9c:e5:78:b9:8e:a6:
         bf:21:eb:a5:08:9a:71:91:00:fa:e6:57:57:9a:6e:a1:aa:66:
         95:de:24:16:58:63:e7:91:a0:fa:03:44:5d:0f:3d:b3:9b:bb:
         97:ce:c0:df:e5:f9:9c:56:cf:ff:7c:dc:98:f1:a5:d6:14:74:
         00:5c:c4:2a:0e:0d:84:40:06:e9:33:47:71:2c:0d:50:bc:2c:
         13:e2:db:1e:ee:b3:b5:eb:2d:5d:62:0d:76:fa:87:c4:87:95:
         ab:b9:9c:76:c1:17:ea:52:a9:76:27:bb:1b:56:b2:e5:bd:9f:
         60:1c:cb:f3:6f:d0:6e:75:28:db:04:7e:b3:7f:1e:50:a6:56:
         ea:60:61:4a:5c:73:5c:91:fe:aa:e6:db:d9:69:9e:3e:2f:cc:
         d5:4d:35:7a:72:d9:b6:02:f9:85:c6:ee:02:e5:53:b1:3d:cf:
         d1:a3:91:05:6e:1e:dd:82:52:fd:6d:d4:9f:c2:c1:61:5f:8e:
         72:7a:d9:63:7d:a5:bc:4e:d3:b1:b9:97:51:9e:58:f5:06:e1:
         f8:10:66:c3:84:6f:38:56:ba:ef:d7:cd:1b:5f:8a:6f:00:92:
         b9:ae:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:32:02 2025 by rpki-client