Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/087262D84C3C1D14DD49164C473301D1DBC9F0AB0E3A042DAC58F2AB774B6A1B/0/3139302e3131302e39362e302f32302d3234203d3e2037303439.roa
File:                     3139302e3131302e39362e302f32302d3234203d3e2037303439.roa (raw, json)
Hash identifier:          5IqwuuON+DOy8XnglPcYgwnn6PyU0RTMurDgwBWqWn8=
Subject key identifier:   2F:74:D2:4F:98:7D:44:D4:C9:C5:84:1B:B2:D9:B7:10:6E:82:64:D4
Certificate issuer:       /CN=0B4907F9F3ADD766C75DE4215394601558257DFE
Certificate serial:       54C0A409C4CDB0A99AE462FEE9C0545CFA4D4F42
Authority key identifier: 0B:49:07:F9:F3:AD:D7:66:C7:5D:E4:21:53:94:60:15:58:25:7D:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B4907F9F3ADD766C75DE4215394601558257DFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/087262D84C3C1D14DD49164C473301D1DBC9F0AB0E3A042DAC58F2AB774B6A1B/0/3139302e3131302e39362e302f32302d3234203d3e2037303439.roa
Signing time:             Tue 04 Feb 2025 18:46:02 +0000
ROA not before:           Tue 04 Feb 2025 18:41:02 +0000
ROA not after:            Tue 03 Feb 2026 18:46:02 +0000
asID:                     7049
IP address blocks:        190.110.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/087262D84C3C1D14DD49164C473301D1DBC9F0AB0E3A042DAC58F2AB774B6A1B/0/0B4907F9F3ADD766C75DE4215394601558257DFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/087262D84C3C1D14DD49164C473301D1DBC9F0AB0E3A042DAC58F2AB774B6A1B/0/0B4907F9F3ADD766C75DE4215394601558257DFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B4907F9F3ADD766C75DE4215394601558257DFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c0:a4:09:c4:cd:b0:a9:9a:e4:62:fe:e9:c0:54:5c:fa:4d:4f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4907F9F3ADD766C75DE4215394601558257DFE
        Validity
            Not Before: Feb  4 18:41:02 2025 GMT
            Not After : Feb  3 18:46:02 2026 GMT
        Subject: CN=2F74D24F987D44D4C9C5841BB2D9B7106E8264D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:b9:78:72:a7:d5:1c:69:66:04:b2:b8:26:
                    35:79:51:f3:5e:54:d8:be:c1:b0:62:44:a5:0f:e1:
                    01:65:ba:3f:f2:e8:2a:6c:1b:72:9f:b6:39:44:e9:
                    ce:12:ad:88:c3:04:69:be:30:69:6b:cd:b2:1b:e0:
                    80:c8:9d:3f:c9:24:2f:9d:7f:e1:2c:b3:9b:3b:f1:
                    ba:b8:8f:37:31:2f:03:d2:3d:ff:53:40:bd:57:be:
                    bd:1e:7d:28:e3:50:67:4c:f8:4d:59:05:f1:df:96:
                    97:bf:35:a9:80:a5:d7:80:bd:66:2a:ed:30:48:06:
                    2e:13:aa:49:3e:b0:42:52:85:0f:35:78:af:cb:c3:
                    8a:47:1f:96:12:b9:3d:fc:31:af:c2:fb:93:3b:f5:
                    70:06:9e:56:08:02:85:ac:f5:2e:16:14:3c:80:b3:
                    63:a5:ec:23:0f:1a:68:c1:76:7b:47:ed:8b:ad:5a:
                    65:cf:1a:1d:b4:4d:01:c4:cc:13:ca:48:5b:be:62:
                    ee:a2:a0:bd:eb:20:9b:6a:ba:39:05:48:6b:8a:e2:
                    7b:6c:84:a7:dd:83:e5:a6:6d:28:b0:f6:2f:68:b7:
                    77:da:a8:81:52:4d:67:c1:0c:ff:55:27:f0:b0:4a:
                    71:1c:5c:70:3b:20:83:6e:e0:f2:8f:71:e9:a4:bb:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:74:D2:4F:98:7D:44:D4:C9:C5:84:1B:B2:D9:B7:10:6E:82:64:D4
            X509v3 Authority Key Identifier:
                keyid:0B:49:07:F9:F3:AD:D7:66:C7:5D:E4:21:53:94:60:15:58:25:7D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/087262D84C3C1D14DD49164C473301D1DBC9F0AB0E3A042DAC58F2AB774B6A1B/0/0B4907F9F3ADD766C75DE4215394601558257DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B4907F9F3ADD766C75DE4215394601558257DFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/087262D84C3C1D14DD49164C473301D1DBC9F0AB0E3A042DAC58F2AB774B6A1B/0/3139302e3131302e39362e302f32302d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:8c:c5:67:77:c4:74:d8:cd:fb:3e:dd:9d:d0:7f:f4:ce:
         ed:96:2d:52:2f:bf:e4:48:06:13:99:76:9d:d7:c8:fa:20:5f:
         4b:9c:ae:3e:85:6b:c4:2b:8b:67:d5:85:93:bc:6b:88:4d:e2:
         81:70:37:56:02:dc:cf:14:54:bd:e3:fc:4d:c6:49:6b:28:7c:
         dc:9a:b2:a8:35:c4:0b:17:de:de:5c:2b:1d:89:d0:17:07:7b:
         15:eb:99:ee:54:41:04:dc:cc:57:94:51:3a:5b:3f:1e:e4:41:
         bf:25:1e:8c:d1:5e:64:63:1b:49:e7:28:92:cb:37:d4:c5:1c:
         ae:4e:ac:5c:72:64:5b:96:e0:2c:2c:64:67:62:55:2b:4b:cb:
         dc:56:74:1e:cd:d0:ed:62:8d:8a:5e:71:1a:8d:cd:8d:0a:58:
         80:38:33:ea:b1:6d:2a:47:69:5d:99:06:3c:c4:4d:3a:22:f8:
         37:76:0e:2e:09:6a:26:83:14:9b:55:e7:59:87:d5:92:ec:05:
         6b:3d:d2:73:e7:cb:ce:a8:a5:68:41:ce:07:06:5e:68:bf:4b:
         0a:e8:28:d9:2f:79:ae:1f:5c:87:7e:2c:d8:26:33:0e:53:10:
         13:d5:0a:38:7c:66:b5:77:bf:27:e4:3f:a7:92:9f:5d:55:fd:
         53:14:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:16 2025 by rpki-client