Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa
File:                     3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa (raw, json)
Hash identifier:          g5fqF5dY8AAX12StCqKNz14P4w+FA74CODwHwDRr24A=
Subject key identifier:   25:91:1A:91:4E:5F:6E:D3:09:E1:8D:6F:A8:4C:32:32:E4:A3:32:87
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       1EC072FF9812DA92900C4C8C86A6924280B5A4F7
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa
Signing time:             Tue 04 Feb 2025 18:35:28 +0000
ROA not before:           Tue 04 Feb 2025 18:30:28 +0000
ROA not after:            Tue 03 Feb 2026 18:35:28 +0000
asID:                     52233
IP address blocks:        190.112.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c0:72:ff:98:12:da:92:90:0c:4c:8c:86:a6:92:42:80:b5:a4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Feb  4 18:30:28 2025 GMT
            Not After : Feb  3 18:35:28 2026 GMT
        Subject: CN=25911A914E5F6ED309E18D6FA84C3232E4A33287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:82:fe:81:b5:8c:fb:09:bc:fc:b9:c0:1a:
                    59:fc:cb:f5:e6:1e:56:7c:e3:e0:0f:16:b7:09:0a:
                    f8:07:ed:9d:ab:58:ba:d9:2c:73:f0:04:74:21:f0:
                    15:c8:da:aa:85:6c:b8:ed:96:02:40:71:36:8d:f6:
                    e6:ff:3e:af:e2:f2:c5:83:f2:12:77:a2:2a:e7:75:
                    23:84:0d:6a:c6:60:dd:41:be:19:cf:cc:69:0d:14:
                    ee:4a:5e:11:b3:80:7e:52:9d:78:c5:9a:ed:3b:45:
                    b8:f2:07:07:9c:0d:1d:ef:47:ae:41:4d:30:ba:d3:
                    7c:2f:8d:8e:a5:d4:b3:fa:00:c8:1b:7d:24:2b:1f:
                    0d:63:e4:dd:53:a0:01:54:46:33:39:7a:a5:2b:03:
                    1d:a8:ba:92:61:ed:18:98:cb:ff:1d:bc:30:e9:fc:
                    3e:92:06:62:06:f4:3c:c5:db:1c:17:0b:55:d3:46:
                    c6:12:b8:01:ab:b9:d3:17:0a:ba:75:89:6c:5d:5e:
                    db:f4:e8:97:b5:cf:16:00:f9:29:fe:19:50:57:5c:
                    0b:e4:7f:6d:da:53:d6:af:48:99:ef:d2:65:b4:a3:
                    60:1f:e7:ba:06:e4:33:37:f5:27:5e:f2:03:09:8c:
                    e0:b1:e0:9f:e0:e5:ba:16:14:f0:d1:0f:3b:15:b5:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:1A:91:4E:5F:6E:D3:09:E1:8D:6F:A8:4C:32:32:E4:A3:32:87
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:54:fc:18:1f:b3:88:26:06:72:12:1a:3c:fd:12:1c:b9:36:
         22:38:fc:94:5d:38:34:79:97:e5:3e:6f:28:f7:a6:77:b3:e6:
         f8:eb:e1:2a:0b:ea:b4:fd:57:60:fb:3e:b5:f1:66:e0:2d:11:
         73:86:8c:b4:b1:7a:36:d3:e0:ee:e5:ce:93:65:9d:49:99:4e:
         8b:2a:61:19:5b:e6:2d:c8:78:71:1d:ca:a4:ba:92:cf:8d:3d:
         76:a8:0e:4c:d1:89:0a:aa:37:a4:a6:f0:83:83:66:08:77:54:
         23:15:53:01:00:d3:eb:5a:39:b5:93:5c:bc:3b:b2:fc:d5:fa:
         ed:3b:ea:d2:e9:dc:83:34:a0:d0:c1:bf:f0:77:04:c7:8b:32:
         bc:b7:45:39:1a:50:ec:b0:4e:6f:df:55:28:4e:aa:a0:f7:0f:
         43:4f:f7:91:01:92:5f:82:f6:5f:56:ef:3b:4c:6b:35:3b:36:
         58:b6:d4:c9:3b:b7:3e:f9:21:08:7e:c8:6a:e9:62:83:23:a6:
         af:82:68:7e:d8:ae:32:3d:bd:5f:b7:97:6e:f3:bf:e5:3d:78:
         76:44:7b:c1:23:0a:83:1d:f7:6b:a7:a3:2e:c7:a1:85:a2:4f:
         c6:f5:4a:f2:34:e2:94:4f:ef:e2:e1:ef:e5:93:c1:3d:db:9a:
         f1:83:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 14 13:45:51 2025 by rpki-client