Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32372e3133362e302f32322d3234203d3e20323635373035.roa
File:                     3139302e32372e3133362e302f32322d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          uaCpu782K4+9twSnBNRXgvLKN7myJbckOqvjsBGWa2E=
Subject key identifier:   BF:AA:7A:34:F0:D5:51:3A:4D:C6:B0:E9:34:F6:29:31:CC:AD:3A:50
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       71D7AC468CE4DAE04F06450C4E7DD384DA71B6A4
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32372e3133362e302f32322d3234203d3e20323635373035.roa
Signing time:             Tue 04 Feb 2025 18:17:53 +0000
ROA not before:           Tue 04 Feb 2025 18:12:53 +0000
ROA not after:            Tue 03 Feb 2026 18:17:53 +0000
asID:                     265705
IP address blocks:        190.27.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d7:ac:46:8c:e4:da:e0:4f:06:45:0c:4e:7d:d3:84:da:71:b6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:53 2025 GMT
            Not After : Feb  3 18:17:53 2026 GMT
        Subject: CN=BFAA7A34F0D5513A4DC6B0E934F62931CCAD3A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:0d:fa:6b:38:4d:57:7e:73:7b:ff:b6:b1:
                    9d:03:fb:7d:dd:7e:e0:1a:1b:09:fb:5d:7c:04:6d:
                    29:d0:7b:b8:2f:61:ac:da:6b:bd:bc:8a:e3:e0:7f:
                    cd:f1:4f:b8:b8:94:e4:33:42:11:82:00:86:de:44:
                    6d:9a:71:91:ab:55:ba:68:c5:17:e4:08:7b:ec:f4:
                    28:ee:b0:34:da:95:1a:8a:76:39:2e:68:fd:d3:64:
                    bb:a8:35:c3:7e:94:1b:19:32:5d:71:56:fa:fd:14:
                    6f:06:da:29:7a:a6:d8:96:49:90:d5:7a:0d:b7:4a:
                    df:45:bb:46:3c:c8:f0:56:97:36:15:b5:6b:21:ab:
                    68:fb:8d:4b:8d:78:47:6e:8d:34:64:9a:92:9a:33:
                    e6:2a:1d:c6:fb:b9:9d:01:10:54:b7:1b:9e:2a:56:
                    8b:40:a3:ea:12:a0:71:ef:22:99:26:f8:92:ed:14:
                    4f:63:08:72:5d:78:5b:7f:18:98:f3:07:0e:97:15:
                    3f:fe:ff:99:5b:bd:bd:01:5e:6e:13:4b:1b:48:51:
                    10:bc:d7:ab:42:65:da:98:93:10:d4:5b:c2:a9:ce:
                    1e:6a:40:c3:fc:c9:63:6d:4d:c3:ec:b2:33:70:cd:
                    b7:1c:bc:89:14:8e:c5:17:e5:cb:6d:68:a2:33:4e:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AA:7A:34:F0:D5:51:3A:4D:C6:B0:E9:34:F6:29:31:CC:AD:3A:50
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32372e3133362e302f32322d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.27.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:be:df:ea:f6:39:66:7a:d4:8e:a2:53:6c:d0:84:f1:8e:68:
         8f:90:c7:a6:46:d5:f1:18:02:2e:ec:6f:71:25:32:d5:73:29:
         3c:4b:75:76:4e:d4:99:f9:bc:c3:2d:d7:1c:88:21:2e:51:f9:
         6c:83:d8:52:f8:0d:6a:fc:73:42:73:91:ab:0b:d7:0a:4b:4c:
         50:61:82:9a:df:eb:32:18:8a:e9:c9:0a:b4:cf:61:50:52:c4:
         56:b1:2f:1f:f1:c6:3e:fb:ba:b9:f3:eb:cd:15:f3:bf:57:8e:
         3d:79:d0:4f:67:23:1e:34:88:22:0b:5e:d8:1d:d4:97:a1:a2:
         8f:77:e9:52:c6:1f:6c:8c:29:17:6b:8d:66:79:95:39:1f:61:
         9c:08:8b:ef:8c:cb:50:f0:05:5e:5c:a6:ab:b4:5d:1a:47:74:
         48:81:62:2e:f8:16:e5:b1:7b:33:11:fb:03:67:a7:ca:6a:ac:
         5f:b6:1c:e9:ed:79:1d:ec:94:c1:46:d3:08:97:fc:1c:ea:8e:
         be:67:ca:6d:af:81:13:58:d0:6e:bf:36:64:09:e2:1a:46:e2:
         81:1b:c5:a8:5d:1f:e3:14:64:6d:fb:12:b2:61:0f:c6:ab:1d:
         e9:44:35:f1:49:3c:de:ef:3a:b1:0b:3b:0b:92:ee:6b:b8:b3:
         74:7b:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:51 2025 by rpki-client