Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134342e302f32332d3234203d3e203532333534.roa
File:                     3139302e3132322e3134342e302f32332d3234203d3e203532333534.roa (raw, json)
Hash identifier:          3FXBUnulXs5YRTPKH7PZlQW6fjV4ZS7thaYW93lcdzg=
Subject key identifier:   39:66:98:B0:2E:14:20:1F:4D:26:A0:67:E1:7D:1D:EB:99:DC:E8:8E
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       0F1D937ACCF0D2EB2B5A24BE3C3AF97C10761180
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134342e302f32332d3234203d3e203532333534.roa
Signing time:             Tue 04 Feb 2025 18:18:45 +0000
ROA not before:           Tue 04 Feb 2025 18:13:45 +0000
ROA not after:            Tue 03 Feb 2026 18:18:45 +0000
asID:                     52354
IP address blocks:        190.122.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1d:93:7a:cc:f0:d2:eb:2b:5a:24:be:3c:3a:f9:7c:10:76:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Feb  4 18:13:45 2025 GMT
            Not After : Feb  3 18:18:45 2026 GMT
        Subject: CN=396698B02E14201F4D26A067E17D1DEB99DCE88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:73:76:1d:db:a9:08:28:b6:af:a8:8e:33:
                    46:40:16:9a:c2:5b:af:a0:e0:88:60:dc:51:4d:11:
                    2c:62:9e:2a:00:e9:d2:3b:f5:90:a8:3d:f2:ba:d6:
                    ae:61:82:5e:79:de:da:c3:85:21:7a:bf:8a:d3:3c:
                    fd:af:13:4c:78:a1:09:60:33:fa:71:5c:7f:29:87:
                    bb:74:34:69:c7:df:89:2c:da:21:81:b4:b1:df:e8:
                    be:bc:01:ce:e2:72:98:9b:95:68:4e:0a:bf:62:4b:
                    5c:96:cc:18:23:d2:0e:bd:77:9f:65:63:01:cd:45:
                    c1:22:a6:62:59:33:f2:10:c9:dd:02:73:3a:ed:f1:
                    5a:2e:13:86:36:97:36:7c:d1:32:78:af:f7:1c:e2:
                    f7:cf:5d:6b:ee:27:d1:2e:ca:78:f1:29:e6:8b:bb:
                    86:af:13:24:33:c6:f5:f9:2a:3e:8c:87:30:af:73:
                    d9:e7:47:02:8b:01:78:58:3d:6f:73:97:bc:2c:65:
                    28:f7:5e:b7:f3:1d:3d:62:17:eb:6b:b9:e2:45:f1:
                    99:37:09:2e:d7:c3:09:19:77:26:2d:08:7b:8d:1e:
                    88:7f:20:f9:7d:ff:01:e8:fd:3d:88:53:0d:fa:41:
                    94:1d:7f:32:cb:5f:4a:36:cc:e1:ff:e7:3f:54:f6:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:98:B0:2E:14:20:1F:4D:26:A0:67:E1:7D:1D:EB:99:DC:E8:8E
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134342e302f32332d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:be:de:dd:a7:7c:aa:f4:5d:e4:80:b2:60:25:53:54:a3:
         b7:25:34:0b:bb:03:d8:9b:28:10:be:04:7f:90:61:32:61:73:
         dc:62:76:39:88:a8:6d:cd:67:a5:97:aa:c9:80:5e:cf:8b:97:
         e3:8b:d9:ff:17:42:cb:80:cd:7b:d6:f8:81:54:2b:a6:5a:e0:
         ac:fb:3d:96:66:a2:ec:a5:fd:04:9c:88:01:a6:da:4e:a9:69:
         ad:31:c5:c1:36:fe:b1:63:4a:0e:8b:31:3d:82:60:86:e9:7d:
         17:6c:bf:cf:7e:3f:3b:c4:f6:5c:e0:68:9a:20:32:8a:7f:45:
         8e:53:90:6c:4d:d9:c0:37:78:b9:42:64:19:86:fa:ba:15:39:
         f5:1e:26:5c:2b:74:12:b0:76:12:b9:e4:22:a9:08:fe:bb:48:
         6e:fa:9d:ac:c5:df:65:df:8a:de:90:0b:7c:64:b9:40:61:e7:
         ae:28:ec:87:a5:21:ef:b3:77:66:e1:c3:bb:02:58:a2:28:4c:
         3f:35:00:fc:ee:fa:bb:34:b5:b1:33:fe:e2:9d:d7:e9:8f:49:
         e4:9b:1f:06:29:b9:bb:12:5a:50:e3:d0:bb:5b:95:d4:9e:80:
         cf:7c:02:54:d8:a6:08:48:52:02:bb:eb:21:2f:72:6c:85:e5:
         0f:56:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:34 2025 by rpki-client