Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34352e302f32342d3234203d3e203532333438.roa
File:                     3139302e31342e34352e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          Ug95uaeCt/zO4vUg8mv5++Bd97wOKKBcxB6LvImadBI=
Subject key identifier:   DF:9C:4A:29:1B:E2:F0:4F:6C:32:4C:62:ED:2C:FE:AA:56:19:1B:93
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       3FC99AA3C6AFCC64659BF86DA405ED3C61294907
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34352e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:21 +0000
ROA not before:           Tue 04 Feb 2025 18:31:21 +0000
ROA not after:            Tue 03 Feb 2026 18:36:21 +0000
asID:                     52348
IP address blocks:        190.14.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c9:9a:a3:c6:af:cc:64:65:9b:f8:6d:a4:05:ed:3c:61:29:49:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:21 2025 GMT
            Not After : Feb  3 18:36:21 2026 GMT
        Subject: CN=DF9C4A291BE2F04F6C324C62ED2CFEAA56191B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:06:f9:18:bb:a0:6c:ae:49:0d:f0:e5:2a:
                    76:f3:e4:c7:0d:5d:5e:87:2d:e5:90:b3:46:08:fa:
                    ef:01:8c:7c:a6:8f:e6:96:b3:40:e9:43:98:08:51:
                    db:42:d9:75:fb:1b:5b:45:c3:9b:c1:ec:70:6b:fd:
                    80:b0:3b:0c:50:df:b2:f3:89:e1:31:5a:d5:f2:7f:
                    0e:07:f0:87:78:86:5c:c6:5c:bd:50:6b:a3:25:05:
                    7c:69:14:ff:77:df:11:b1:9c:00:a0:3d:db:4b:af:
                    6d:a9:cd:64:49:82:9f:bb:48:93:c3:54:00:fe:43:
                    05:ab:48:67:fc:64:a2:f6:14:e3:f7:6d:40:92:7c:
                    4d:cb:78:f7:dd:62:a5:fd:24:a6:e3:33:75:54:9d:
                    3c:e6:3a:57:78:4b:c2:ae:a9:27:ad:40:fa:97:17:
                    6a:a7:16:76:07:5d:77:f7:a6:b2:f1:44:ff:14:68:
                    ce:5f:20:aa:1e:d4:44:93:be:d2:e4:07:99:e1:5b:
                    60:82:48:e7:bf:7c:6f:86:0e:d7:9b:08:2b:2c:71:
                    01:92:db:83:7a:ed:be:3a:4a:58:f3:d2:ec:db:d1:
                    e9:44:ea:9f:43:28:f5:08:11:71:a7:39:84:bc:3c:
                    20:a2:17:48:0b:f7:81:f9:94:51:89:0a:45:a9:e3:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:4A:29:1B:E2:F0:4F:6C:32:4C:62:ED:2C:FE:AA:56:19:1B:93
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34352e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:15:ab:af:57:8c:38:9b:63:26:24:be:1d:0c:55:b8:a3:19:
         bd:16:f0:71:45:ef:36:1b:50:fb:4f:2c:a0:2d:c8:fd:14:55:
         d9:4e:fb:32:11:c1:c6:3d:27:db:08:81:8a:15:f2:a7:ca:cf:
         de:91:0e:00:96:d9:bc:74:80:78:b6:16:fb:4f:6f:5a:9b:d0:
         a2:37:14:1a:aa:4a:31:3c:65:0f:ee:b3:4f:35:9d:2b:1b:03:
         1f:50:6b:92:b3:8f:95:5a:eb:3b:29:46:d3:4d:99:a7:d8:ee:
         fe:56:b9:f4:8b:c9:a1:51:f6:fa:8b:d7:1c:c7:d4:6c:cc:55:
         e6:f9:d7:3c:7e:f7:c6:4e:73:fa:52:c0:55:01:9d:07:98:e9:
         32:2b:66:90:7e:c4:28:d0:21:e3:29:23:43:ae:96:62:40:45:
         49:f6:e8:8a:f3:24:2f:91:fd:ad:b6:53:8f:cc:54:95:ad:dc:
         3d:99:f2:ca:05:e9:58:92:ba:76:63:29:d5:fc:1f:f0:50:85:
         8c:01:e0:e1:96:ed:a8:c8:82:31:6d:bc:1d:92:de:27:08:11:
         af:ca:16:04:0a:78:8f:e8:cd:95:2e:28:34:80:95:3a:b2:ff:
         b5:c2:33:08:38:35:76:c0:39:45:4a:5b:17:4d:b4:70:77:e0:
         ae:bf:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:19:39 2025 by rpki-client