Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa
File:                     3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa (raw, json)
Hash identifier:          xQQACx5JVcl1tADMXgJzQfXLoOvv7UJGaw1hIbRn0os=
Subject key identifier:   2A:75:D1:05:28:44:10:CE:B6:BC:CB:09:5A:D0:63:8E:B5:E5:94:47
Certificate issuer:       /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial:       5F5B77D374CC4DC8787AEE2D35D4A7BEF3BFF716
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa
Signing time:             Tue 04 Feb 2025 18:39:57 +0000
ROA not before:           Tue 04 Feb 2025 18:34:57 +0000
ROA not after:            Tue 03 Feb 2026 18:39:57 +0000
asID:                     52485
IP address blocks:        190.123.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:77:d3:74:cc:4d:c8:78:7a:ee:2d:35:d4:a7:be:f3:bf:f7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
        Validity
            Not Before: Feb  4 18:34:57 2025 GMT
            Not After : Feb  3 18:39:57 2026 GMT
        Subject: CN=2A75D105284410CEB6BCCB095AD0638EB5E59447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:49:f8:d3:42:2f:e9:91:4c:8b:f0:44:d0:
                    fe:9e:92:3b:b7:a2:11:02:1c:ad:19:0b:4d:48:79:
                    9f:7b:67:d3:72:c1:23:12:8c:2f:15:bc:ab:f8:2c:
                    e0:19:1c:d1:ae:ef:a6:c3:be:38:1c:76:85:fb:1f:
                    a3:da:c7:71:c1:93:b0:38:3b:ea:d5:a6:9c:2d:62:
                    98:e0:2d:0e:46:14:15:df:44:f7:01:21:df:a9:7f:
                    d7:9f:cf:67:cf:dd:96:d5:44:77:42:64:77:97:05:
                    a4:27:31:25:f5:dd:bf:1f:b3:85:e2:8b:db:2e:21:
                    51:65:34:cd:d8:3d:66:50:ef:5b:b1:ec:4e:d5:bb:
                    92:5e:e6:c8:f5:ac:8f:2b:cd:ac:4b:5e:35:31:12:
                    69:46:45:6a:e0:5f:6b:f0:46:a8:54:ea:a0:a5:8f:
                    72:23:1d:d8:fa:93:15:93:c3:17:3d:38:6a:2b:fc:
                    76:e8:ba:0a:7e:eb:6d:44:28:76:9e:99:6c:e4:e5:
                    95:9d:06:79:4b:4a:3f:70:a2:42:89:2f:a5:e4:82:
                    04:e7:21:9f:e3:45:eb:99:32:5e:0a:58:a7:c5:8d:
                    30:c3:a4:cc:74:fa:08:e7:86:0f:28:77:d2:53:2c:
                    e1:6e:38:1b:6e:7a:7f:6e:af:7b:06:79:09:ab:85:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:75:D1:05:28:44:10:CE:B6:BC:CB:09:5A:D0:63:8E:B5:E5:94:47
            X509v3 Authority Key Identifier:
                keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:55:57:9f:d9:99:44:a9:6b:d9:4a:b2:30:94:3e:60:ea:
         a8:a0:41:58:25:09:87:98:01:44:87:a3:c1:58:a5:c8:46:54:
         93:1a:6a:34:cc:6c:b9:fe:3a:0f:69:8c:b5:8d:6d:38:8c:6f:
         97:f4:44:a4:53:de:05:97:3d:dd:0a:ca:2c:28:4e:89:24:61:
         ee:1f:2f:43:0e:da:d4:fc:ef:8e:fb:53:69:7a:07:38:40:e5:
         56:9b:63:f1:3f:ec:d6:c0:66:5e:d7:1d:23:c7:2b:4b:3e:34:
         3c:5a:06:dd:e5:6a:3a:ad:ff:c9:e5:38:02:02:d8:31:10:24:
         ef:7d:64:49:15:fb:4d:b1:76:25:b9:e5:d6:1d:48:62:85:96:
         a9:b6:fc:cf:91:f2:5a:bb:f1:0f:a9:99:90:d7:51:ea:50:98:
         23:be:d2:44:df:0a:b9:b1:6e:b6:57:ad:a1:d8:0b:81:e1:d3:
         03:c1:95:04:14:57:05:2b:ac:0a:3b:55:0d:c0:87:2d:aa:ed:
         3a:ad:84:3d:86:a8:ce:25:f8:69:84:e4:3c:82:47:9d:cd:b3:
         14:c6:84:e6:80:10:d5:1d:d1:1b:2b:ea:cc:f8:db:bb:44:b0:
         f7:c5:63:63:88:a6:fd:20:f2:b9:8a:66:e4:37:2b:6e:81:84:
         61:79:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:27 2025 by rpki-client