Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
File:                     3139312e39372e35322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          zelILFOhZfVJb9m/ux5h3KYLjhyjJyjaJKPt/4OmOxo=
Subject key identifier:   51:EC:02:B3:51:F7:64:6F:50:1F:A7:F4:FE:13:20:E8:BF:0E:2C:64
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       3BAA4214E1C36C89AEA04D6EB06E05396FBBB60C
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Aug 2025 20:25:00 +0000
ROA not before:           Tue 05 Aug 2025 20:20:00 +0000
ROA not after:            Tue 04 Aug 2026 20:25:00 +0000
asID:                     18678
IP address blocks:        191.97.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:aa:42:14:e1:c3:6c:89:ae:a0:4d:6e:b0:6e:05:39:6f:bb:b6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug  5 20:20:00 2025 GMT
            Not After : Aug  4 20:25:00 2026 GMT
        Subject: CN=51EC02B351F7646F501FA7F4FE1320E8BF0E2C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:f5:8c:0f:ad:4c:60:37:0e:72:03:91:bd:
                    87:d5:7d:47:9f:05:b4:40:25:99:51:9c:eb:50:5c:
                    85:ea:67:36:96:bc:67:6b:eb:8c:0d:83:74:3d:7e:
                    4f:80:31:b4:b3:d8:0a:6a:20:0e:53:d2:23:9c:36:
                    59:bc:a6:f2:e0:4e:e3:66:77:6c:3e:50:40:c7:04:
                    37:b6:86:7f:fc:8e:e7:69:39:ca:b8:2a:ba:73:04:
                    1e:83:9b:50:a0:72:53:5c:f6:cd:fc:f6:62:cd:33:
                    a8:1f:f1:4d:3e:cd:01:b2:78:6f:a1:c3:79:f4:8e:
                    5c:3c:d9:14:79:bc:4d:bb:84:bb:63:e6:de:25:d1:
                    87:db:d9:f2:54:4a:d4:4c:24:f8:61:39:98:20:b1:
                    f7:97:19:43:22:b7:fb:08:14:eb:04:32:2c:f0:2d:
                    1b:df:02:12:c4:bf:2d:30:e5:a2:52:db:72:29:85:
                    b7:c4:12:ba:9c:a5:be:70:4e:2c:68:3c:c7:37:63:
                    82:54:89:9b:05:13:ee:c8:78:95:f6:96:47:99:ee:
                    ba:af:d2:d0:5a:cf:f7:74:c3:65:52:fd:25:f4:24:
                    49:b5:33:3d:7b:f7:19:3b:e5:53:25:10:4f:f7:7a:
                    80:46:f4:de:70:f8:d9:30:2c:a8:a2:ae:7d:a0:bc:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:02:B3:51:F7:64:6F:50:1F:A7:F4:FE:13:20:E8:BF:0E:2C:64
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:4e:12:fa:48:5c:59:b0:2e:b8:e9:02:fb:d2:bc:5b:50:
         99:4a:1f:1c:1e:e6:22:a4:27:36:f0:18:db:65:48:7a:1a:24:
         bd:57:6b:5f:24:f7:80:a6:a7:24:5c:01:51:23:f0:18:e2:80:
         74:2e:98:dd:03:0a:9a:96:7e:57:2c:46:18:68:92:c8:98:3b:
         78:59:be:09:74:1a:66:f7:b4:36:d3:b5:16:ae:95:5e:b6:87:
         b7:a5:55:e1:08:7b:fc:82:8a:62:96:e9:6e:f2:0f:71:c5:78:
         79:44:36:a5:36:82:7f:57:6f:c2:73:8f:f0:68:95:81:c7:59:
         90:45:1a:32:b4:31:c4:6d:f8:53:97:c6:86:ec:35:85:f8:57:
         b6:15:58:65:6d:31:8e:a9:a1:48:11:64:0d:63:84:88:ab:8f:
         79:da:63:47:3e:ec:cc:54:6a:d8:b8:ce:0c:c7:7e:e5:20:2e:
         aa:9d:fa:91:64:94:53:b1:19:c5:40:69:06:49:22:ba:e4:cb:
         de:79:98:53:6a:37:6e:d0:e4:0b:61:80:43:17:40:d1:7c:95:
         d6:65:de:e5:7d:a8:1d:85:ab:e5:36:d7:e7:2f:3d:fe:2c:48:
         49:d5:64:56:c8:94:2c:72:b0:6f:95:e2:f6:9e:05:de:06:d8:
         f6:78:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:32:31 2025 by rpki-client