Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32342e302e302f31342d3234203d3e203139343239.roa
File:                     3139302e32342e302e302f31342d3234203d3e203139343239.roa (raw, json)
Hash identifier:          UVzppU+I+2FSk5DlatPAc3dr5o99RipHWMYeIFRxd7Y=
Subject key identifier:   13:7E:A8:D8:68:5F:C9:FD:4E:A6:00:50:C7:6D:F7:31:94:DC:B4:73
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       7436B38FC36569473504A3DD93611C3615B7A348
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32342e302e302f31342d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:54 +0000
ROA not before:           Tue 04 Feb 2025 18:12:54 +0000
ROA not after:            Tue 03 Feb 2026 18:17:54 +0000
asID:                     19429
IP address blocks:        190.24.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:36:b3:8f:c3:65:69:47:35:04:a3:dd:93:61:1c:36:15:b7:a3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:54 2025 GMT
            Not After : Feb  3 18:17:54 2026 GMT
        Subject: CN=137EA8D8685FC9FD4EA60050C76DF73194DCB473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:81:a4:58:28:56:79:1d:8c:73:ba:d8:4a:
                    f0:9a:38:ed:a7:e6:4b:1a:7c:62:7f:8d:ac:ac:1a:
                    4c:bd:f7:31:74:71:3e:31:39:12:f6:90:1a:d5:59:
                    f1:87:b0:20:2b:80:db:f0:8b:82:30:3b:d8:86:e2:
                    66:3d:ca:57:e6:3e:8d:0d:36:cf:98:f4:0c:ed:7d:
                    b7:17:a7:0f:2c:fe:22:42:40:2b:9f:86:b1:f6:07:
                    42:7d:b5:1a:b7:ae:6d:f6:aa:4e:e2:e4:64:f6:34:
                    8d:1f:4b:17:62:93:b8:be:8a:15:3b:7d:f7:b1:33:
                    5f:63:90:3b:eb:f9:2b:ae:2e:1e:de:50:f9:86:af:
                    39:ef:8a:f0:62:4b:b3:41:5c:f3:05:31:7d:c1:65:
                    49:80:49:59:5a:35:f0:41:1d:01:25:b1:12:30:90:
                    e0:f7:c2:55:bf:b1:1a:15:33:08:88:0e:eb:04:3d:
                    ff:57:78:38:d2:eb:53:5c:ed:2d:12:9c:da:9b:37:
                    85:03:63:3d:2e:11:61:dd:3b:c8:d0:3c:40:09:8e:
                    c8:73:ca:01:26:bc:96:84:6a:c0:fa:25:4d:7c:d0:
                    41:f6:47:b3:bf:de:9c:93:2f:cc:13:3a:05:f6:ac:
                    7b:46:50:20:04:77:dd:21:bc:84:ab:c8:06:68:d3:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:A8:D8:68:5F:C9:FD:4E:A6:00:50:C7:6D:F7:31:94:DC:B4:73
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32342e302e302f31342d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:e9:df:23:18:31:be:0c:a7:37:7b:bc:70:31:1e:97:25:
         2c:58:11:d8:f8:46:b3:11:59:79:79:eb:fe:88:a2:20:9d:9e:
         85:f1:ae:ce:9d:1a:10:1f:85:16:10:82:64:e5:03:e4:38:42:
         c9:3f:14:22:ac:6c:7a:14:31:0d:bf:d0:eb:70:1e:e4:de:d1:
         51:81:9d:6b:8f:e5:a5:2b:a0:0d:5a:68:81:c2:69:a7:a2:a2:
         e0:9f:af:7e:1e:ea:db:65:f7:e3:28:2d:ea:55:43:6b:7e:fd:
         c0:14:5b:5b:f9:1a:e1:10:ee:6f:80:3f:55:54:b4:bf:0b:45:
         2e:3f:c2:f7:07:59:fe:9d:88:6d:12:bb:80:4e:b9:d8:07:3b:
         cf:a9:a3:48:29:ec:09:3c:38:9c:f7:61:f4:6f:60:1c:36:dd:
         a8:17:fc:c0:e3:7a:7f:26:31:e1:e0:ef:dc:54:97:d4:2f:e2:
         3f:bc:a1:5f:93:c8:11:33:15:bd:ec:1f:2d:f2:20:1b:44:6d:
         6a:cb:1b:95:af:df:bf:d2:e2:5c:f9:58:3f:ac:71:5c:23:56:
         c4:ae:ce:d2:e0:bf:43:b9:13:27:41:5c:f5:17:0e:f4:7c:65:
         55:b7:d1:3d:13:4e:d9:a2:4f:e7:d8:f8:ac:4c:06:b0:63:18:
         9d:3e:e1:27
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUdDazj8NlaUc1BKPdk2EcNhW3o0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0N0Q0NjIzRDBENzJFMTYxOUNDNkM5NEVGODM1RTlE
M0Q1RTYyMDAeFw0yNTAyMDQxODEyNTRaFw0yNjAyMDMxODE3NTRaMDMxMTAvBgNV
BAMTKDEzN0VBOEQ4Njg1RkM5RkQ0RUE2MDA1MEM3NkRGNzMxOTREQ0I0NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCok4GkWChWeR2Mc7rYSvCaOO2n
5ksafGJ/jaysGky99zF0cT4xORL2kBrVWfGHsCArgNvwi4IwO9iG4mY9ylfmPo0N
Ns+Y9AztfbcXpw8s/iJCQCufhrH2B0J9tRq3rm32qk7i5GT2NI0fSxdik7i+ihU7
ffexM19jkDvr+SuuLh7eUPmGrznvivBiS7NBXPMFMX3BZUmASVlaNfBBHQElsRIw
kOD3wlW/sRoVMwiIDusEPf9XeDjS61Nc7S0SnNqbN4UDYz0uEWHdO8jQPEAJjshz
ygEmvJaEasD6JU180EH2R7O/3pyTL8wTOgX2rHtGUCAEd90hvISryAZo0+A/AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUE36o2Ghfyf1OpgBQx233MZTctHMwHwYDVR0j
BBgwFoAUZEfUYj0NcuFhnMbJTvg16dPV5iAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjQ4RkNGQzIzRkRGRDQyNDEwMjc3N0EwMTdENDJENjgw
NDY4MDc3MTg4QzJGMUU5QTY5MUUwMzBGNEEwQzE1LzAvNjQ0N0Q0NjIzRDBENzJF
MTYxOUNDNkM5NEVGODM1RTlEM0Q1RTYyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDQ3RDQ2MjNEMEQ3MkUxNjE5
Q0M2Qzk0RUY4MzVFOUQzRDVFNjIwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY0OEZDRkMyM0ZERkQ0MjQxMDI3NzdBMDE3RDQyRDY4MDQ2ODA3NzE4
OEMyRjFFOUE2OTFFMDMwRjRBMEMxNS8wLzMxMzkzMDJlMzIzNDJlMzAyZTMwMmYz
MTM0MmQzMjM0MjAzZDNlMjAzMTM5MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCvhgwDQYJKoZI
hvcNAQELBQADggEBAFDU6d8jGDG+DKc3e7xwMR6XJSxYEdj4RrMRWXl56/6IoiCd
noXxrs6dGhAfhRYQgmTlA+Q4Qsk/FCKsbHoUMQ2/0OtwHuTe0VGBnWuP5aUroA1a
aIHCaaeiouCfr34e6ttl9+MoLepVQ2t+/cAUW1v5GuEQ7m+AP1VUtL8LRS4/wvcH
Wf6diG0Su4BOudgHO8+po0gp7Ak8OJz3YfRvYBw23agX/MDjen8mMeHg79xUl9Qv
4j+8oV+TyBEzFb3sHy3yIBtEbWrLG5Wv37/S4lz5WD+scVwjVsSuztLgv0O5EydB
XPUXDvR8ZVW30T0TTtmiT+fY+KxMBrBjGJ0+4Sc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:51 2025 by rpki-client