Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e32302e302f32322d3234203d3e203238333138.roa
File:                     3139302e3130332e32302e302f32322d3234203d3e203238333138.roa (raw, json)
Hash identifier:          2rH5jPdz1klYrTDBYVMnyDmWl3xNK0eedW04niVkY6s=
Subject key identifier:   09:51:F3:41:B0:E4:CD:06:8B:2B:EB:D3:A6:68:33:0C:98:A0:DD:8E
Certificate issuer:       /CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
Certificate serial:       489BD75B453B5408E1BC72A6AC9FFF7610E915C8
Authority key identifier: 69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e32302e302f32322d3234203d3e203238333138.roa
Signing time:             Tue 04 Feb 2025 20:08:50 +0000
ROA not before:           Tue 04 Feb 2025 20:03:50 +0000
ROA not after:            Tue 03 Feb 2026 20:08:50 +0000
asID:                     28318
IP address blocks:        190.103.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:d7:5b:45:3b:54:08:e1:bc:72:a6:ac:9f:ff:76:10:e9:15:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
        Validity
            Not Before: Feb  4 20:03:50 2025 GMT
            Not After : Feb  3 20:08:50 2026 GMT
        Subject: CN=0951F341B0E4CD068B2BEBD3A668330C98A0DD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:85:57:7b:96:79:0a:df:6b:b5:5a:cf:f7:
                    54:8a:f8:e9:1a:fb:6c:51:8e:57:e8:54:ba:88:2e:
                    69:23:be:57:98:3e:5e:8b:e6:41:c8:02:29:26:10:
                    26:51:6e:dc:b2:9c:9c:84:da:94:5a:61:ee:31:9d:
                    46:90:f6:1b:39:2c:5e:59:14:2f:7d:a7:66:e5:af:
                    a7:6d:39:64:b0:59:1c:81:17:91:fb:79:04:69:76:
                    39:2a:41:40:6b:c0:9a:d3:65:b4:57:b1:74:91:16:
                    7c:ff:8c:f2:68:52:2a:46:ec:81:1a:45:bf:ce:b2:
                    29:30:8d:22:e8:72:e4:f3:3e:18:2e:d5:b7:41:e9:
                    15:70:f0:25:3d:7e:7c:20:a2:31:aa:24:e5:70:17:
                    44:f9:c1:18:64:bf:c8:69:e1:cb:ce:ac:d6:2a:04:
                    e5:0b:86:4d:2f:e6:52:95:f5:89:79:d7:1a:e0:ad:
                    39:c6:d5:66:7d:28:7c:b5:23:b3:c6:13:ca:90:5d:
                    db:b9:ee:40:a3:c0:84:36:98:c5:94:e5:bb:b5:7f:
                    10:d7:9a:66:78:29:4e:e4:10:01:30:ff:84:01:87:
                    fe:11:48:20:dc:04:4a:da:cc:11:c2:fb:97:10:b4:
                    41:06:7b:e9:b2:64:fa:8a:11:c0:01:95:63:cd:35:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:F3:41:B0:E4:CD:06:8B:2B:EB:D3:A6:68:33:0C:98:A0:DD:8E
            X509v3 Authority Key Identifier:
                keyid:69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e32302e302f32322d3234203d3e203238333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:4d:9a:d6:8f:d9:0b:97:df:4a:22:17:fb:69:52:49:33:70:
         aa:27:a3:76:75:ff:b3:b8:02:e0:dd:2f:35:2f:bd:99:b7:16:
         8f:ec:6c:95:dc:40:36:94:74:5b:8a:2e:fd:b5:91:ac:6c:bb:
         d3:db:54:93:95:c8:6a:df:63:d5:08:69:c2:42:86:73:6d:47:
         2d:48:fa:42:f6:a9:b5:06:7f:3f:83:6e:1a:75:65:8b:25:1b:
         3e:41:9b:a6:d5:10:0f:c9:f9:23:d6:07:eb:23:fe:9d:fb:8a:
         dc:a6:0c:b2:89:89:61:3b:12:ea:fb:8a:ff:9f:6f:ba:a7:15:
         b0:24:ac:66:06:76:e1:d4:5a:41:a0:77:8c:07:18:68:2a:20:
         ca:6e:0e:22:a1:f0:af:06:60:9e:81:3a:79:26:a5:89:3a:3c:
         99:d1:89:d6:23:55:d5:25:63:11:36:78:84:bc:1b:56:9e:17:
         65:c5:61:73:36:69:a1:ff:cf:e1:1b:8d:60:9b:dd:77:00:ca:
         45:45:00:2b:df:14:c0:3b:9d:0a:bf:55:71:44:7e:61:38:34:
         39:a3:01:85:6f:42:6c:61:55:60:e4:02:b2:67:fa:a8:c6:37:
         2a:85:3b:20:52:51:56:c4:81:4f:98:c1:8f:ff:b3:f3:06:f1:
         38:9e:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:31 2025 by rpki-client