Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34342e302f32342d3234203d3e203532333438.roa
File:                     3139302e31342e34342e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          ev35rxZS3gx2/YMBiWLMmy3Nh9uIwWibj0/In5+F6xo=
Subject key identifier:   70:8B:25:5A:15:CA:7F:8D:5C:51:33:73:7E:51:AC:72:8D:69:31:08
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       18A017AC18862B50CE1A4EDD409DBD6B229E2DD4
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34342e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:26 +0000
ROA not before:           Tue 04 Feb 2025 18:31:26 +0000
ROA not after:            Tue 03 Feb 2026 18:36:26 +0000
asID:                     52348
IP address blocks:        190.14.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a0:17:ac:18:86:2b:50:ce:1a:4e:dd:40:9d:bd:6b:22:9e:2d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:26 2025 GMT
            Not After : Feb  3 18:36:26 2026 GMT
        Subject: CN=708B255A15CA7F8D5C5133737E51AC728D693108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:2e:07:92:ba:84:7f:77:62:07:8c:56:1f:
                    32:b8:b5:28:28:29:d8:30:21:0b:81:03:bd:16:b3:
                    77:da:c8:f2:1a:42:fd:4b:0e:42:52:f8:f2:1d:4b:
                    7f:09:6b:81:7b:ff:7f:07:cc:7a:b7:45:ba:62:2d:
                    78:72:89:85:7d:93:4b:ab:3e:39:77:19:db:b1:dc:
                    ea:0c:7c:e7:59:b5:80:c8:32:11:19:d7:a9:d8:f0:
                    a3:3f:ef:fe:ea:2f:43:94:de:ee:09:a0:db:24:72:
                    55:e6:a4:35:51:10:29:0e:57:38:58:2b:55:c5:8a:
                    9f:c3:23:5b:1b:26:ab:f8:24:95:f2:a8:df:0d:e6:
                    09:8d:3e:26:1d:3d:7c:61:c4:3e:c6:48:c6:87:1c:
                    90:45:d3:e1:e1:3d:aa:f4:e1:9b:99:a2:63:03:d7:
                    ae:f0:13:55:74:79:b4:51:a3:cf:f8:e2:77:ef:59:
                    71:11:66:ad:18:b8:2b:a1:ee:e0:4f:8d:82:56:2e:
                    f4:cc:35:f2:97:e6:b0:13:ac:35:b3:e7:f3:83:10:
                    3c:25:1c:c2:dc:71:89:df:9b:6b:1a:dc:e2:c5:5f:
                    3f:59:7f:a9:1e:2f:cb:ad:d2:f8:2e:00:f5:20:63:
                    6c:ef:e2:3a:7b:8e:c5:f7:40:e7:93:2f:11:87:c4:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:25:5A:15:CA:7F:8D:5C:51:33:73:7E:51:AC:72:8D:69:31:08
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34342e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:73:7e:fe:d1:8a:57:ca:3e:89:94:7a:39:8e:50:b6:97:
         f6:76:32:3a:8f:a7:13:0b:e9:4f:29:fc:ab:4e:a0:30:65:fc:
         44:dc:85:e9:1f:e8:5d:9e:6e:0e:0c:21:e0:a1:bb:e8:64:60:
         72:b8:50:c9:ac:f8:72:b6:ac:5d:fa:7d:df:65:b8:f6:d4:ea:
         c2:f8:c6:c6:32:90:5f:60:34:ee:b7:bf:3a:b0:d8:b1:c5:b6:
         08:9f:a6:4e:1a:67:58:14:4e:4f:7b:1b:fa:82:2d:86:4b:7f:
         25:d0:4e:28:d9:c3:ba:ca:44:de:df:37:32:58:8f:84:fc:cf:
         2e:ec:f0:23:1c:0d:29:d7:26:e4:78:8d:c5:0e:08:32:13:a1:
         72:92:fb:0f:b2:58:a8:e6:fc:3e:04:40:a1:a7:2c:f1:a2:a1:
         bd:94:76:3b:29:54:39:8c:6a:11:a7:60:67:6b:36:2d:61:9f:
         ce:2f:1a:d1:36:cf:2e:f1:e5:f3:de:e8:59:10:14:05:f1:9b:
         ab:44:19:2a:54:b9:ad:29:f9:39:59:2b:4e:68:25:f6:16:91:
         08:f3:c9:6b:67:b2:a7:4e:be:eb:0e:77:3d:13:f5:2f:df:1f:
         40:1a:dc:1d:33:7f:ad:ad:52:cd:91:89:3e:ad:2e:33:cb:5d:
         6a:f8:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:19 2025 by rpki-client