Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa
File:                     3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa (raw, json)
Hash identifier:          C4JeNlWsvmI8Zels2lIoXeldrQ4+RrvjaKLFEAVw2WU=
Subject key identifier:   01:12:85:4F:BD:7B:78:0C:98:49:A2:D5:4C:05:29:45:60:2B:93:EF
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       47F40AB1ACB94AF2A69DA56BC76C1E10D398681D
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa
Signing time:             Tue 04 Feb 2025 18:09:15 +0000
ROA not before:           Tue 04 Feb 2025 18:04:15 +0000
ROA not after:            Tue 03 Feb 2026 18:09:15 +0000
asID:                     52295
IP address blocks:        190.211.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 06:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f4:0a:b1:ac:b9:4a:f2:a6:9d:a5:6b:c7:6c:1e:10:d3:98:68:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Feb  4 18:04:15 2025 GMT
            Not After : Feb  3 18:09:15 2026 GMT
        Subject: CN=0112854FBD7B780C9849A2D54C052945602B93EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:d0:42:73:7a:97:33:62:52:b8:cc:fa:01:
                    7d:ba:9f:03:83:7d:c9:3f:88:ee:6f:35:23:05:92:
                    30:0a:2a:14:90:65:9e:45:2a:a7:ba:cc:8e:85:40:
                    d4:5f:fe:d8:70:11:b4:cd:20:7a:23:35:20:40:6f:
                    8f:cd:dc:87:03:3a:8d:b5:d0:34:72:83:6b:87:0a:
                    03:08:71:88:4e:5e:87:4d:69:a3:93:9c:af:87:25:
                    20:9c:a6:ce:e7:46:18:da:b5:e6:91:9b:44:eb:d6:
                    59:26:95:fc:13:fe:74:1e:bb:e3:36:2c:47:d4:1b:
                    26:db:1a:19:48:5d:e0:66:54:7d:fe:3b:0b:b3:48:
                    07:dc:4c:49:81:23:e6:99:ec:07:98:fa:4f:45:26:
                    ca:e0:35:ed:7a:14:fc:55:c6:58:f8:cb:97:54:4b:
                    b0:77:b2:46:8c:f4:7f:ff:68:c3:22:00:0c:33:32:
                    64:cd:46:49:a7:df:fa:66:98:d0:b3:79:62:50:b1:
                    0f:b1:e9:69:cf:2e:00:30:33:00:ea:2d:1f:24:a4:
                    6b:67:13:8b:cf:66:ef:64:a3:b5:41:6c:c7:9e:ec:
                    1d:bb:98:78:7b:17:86:09:59:e9:1b:cb:21:43:fd:
                    c5:4a:68:5a:84:d9:55:70:14:38:84:70:9b:d0:8e:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:12:85:4F:BD:7B:78:0C:98:49:A2:D5:4C:05:29:45:60:2B:93:EF
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:97:6a:0a:66:20:fb:a2:7f:05:1a:82:85:76:29:bc:2c:
         bb:ac:60:1f:10:6f:ae:2b:a8:e0:9b:62:67:d9:79:99:44:24:
         02:9c:78:ef:26:09:e1:a0:ca:40:c4:d9:e9:d3:a0:23:4c:36:
         b6:b8:2a:eb:e3:2a:5e:60:26:c4:6c:d8:d0:20:4f:16:ee:d0:
         5c:73:e7:ca:f6:a8:ca:8a:8f:5a:ec:4b:38:5f:d8:df:c9:c1:
         37:c7:fe:40:59:0a:8e:8c:da:92:c2:4a:78:f4:58:09:45:da:
         3e:05:09:f8:f3:b9:cb:1e:0a:07:5f:43:af:61:d3:8c:ff:76:
         9b:2c:c2:8f:c1:08:bb:b9:a2:81:c9:94:72:83:25:40:86:b4:
         d4:ad:ea:a4:6e:6d:17:a4:97:01:b9:31:40:06:4b:4d:90:1d:
         7d:6a:4f:19:2a:33:e2:92:6f:37:13:e4:e7:a5:02:02:c2:bb:
         6e:61:6a:6e:07:4c:b0:24:a5:f4:fa:06:98:ac:13:62:d6:4a:
         df:c1:2b:80:3e:64:5c:59:fc:c9:22:54:25:65:6d:01:39:87:
         bd:11:7a:ff:6a:bf:81:2d:97:08:c8:34:48:ee:c1:49:b6:5d:
         8f:b7:19:94:ed:64:80:fa:2c:2b:75:5a:c9:3b:df:50:55:62:
         e4:be:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:43 2025 by rpki-client