Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e20323632323536.roa
File:                     3139302e3131302e3132302e302f32312d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          L0sUMo9ZrvKG5N4+RDntICSDY3tCAgLej8lYYUypSUk=
Subject key identifier:   30:A5:71:0D:60:A0:98:8F:77:DF:BD:07:2C:7C:3B:32:A9:E1:F2:6E
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       1532269DE0C48DD0D348F9D93C8D5F861767F4EF
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e20323632323536.roa
Signing time:             Tue 04 Feb 2025 18:19:31 +0000
ROA not before:           Tue 04 Feb 2025 18:14:31 +0000
ROA not after:            Tue 03 Feb 2026 18:19:31 +0000
asID:                     262256
IP address blocks:        190.110.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:32:26:9d:e0:c4:8d:d0:d3:48:f9:d9:3c:8d:5f:86:17:67:f4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Feb  4 18:14:31 2025 GMT
            Not After : Feb  3 18:19:31 2026 GMT
        Subject: CN=30A5710D60A0988F77DFBD072C7C3B32A9E1F26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:4c:b6:02:57:93:88:42:1e:8e:de:4b:0c:
                    05:6e:5c:88:da:c4:45:93:de:89:85:4b:6b:50:0e:
                    f6:ec:77:66:7c:75:07:aa:e1:5d:36:32:fe:d9:b6:
                    66:25:6f:41:52:25:40:a5:71:da:89:a1:e4:b4:f4:
                    79:05:93:b3:4a:82:1d:31:0b:69:d0:35:6e:fc:05:
                    b6:a0:14:c6:6d:0f:43:6e:88:32:4b:66:e6:c8:4f:
                    7f:d7:07:f2:8a:ae:9a:e6:cd:6d:cb:d7:15:08:32:
                    e6:ab:ca:2b:9c:1f:0e:28:02:1f:db:d7:48:a6:93:
                    c4:07:2f:79:c1:d0:c7:b1:b5:63:a0:a4:b1:7a:27:
                    fd:c2:c3:ab:e7:f4:f0:6e:31:67:bb:f6:89:82:fb:
                    51:31:90:c9:59:d3:dd:86:49:ed:e6:ed:8d:2f:0b:
                    f1:e4:fa:04:aa:18:18:b2:9b:71:ce:9e:12:c3:5e:
                    64:c6:a5:74:67:af:71:d2:53:a1:b1:ab:3a:32:41:
                    35:d4:17:dd:03:c2:92:ae:82:ce:32:2b:e3:84:22:
                    f0:a4:b1:14:e9:bc:92:92:e4:c9:65:4c:d9:96:a2:
                    eb:af:fb:c3:12:33:ed:70:2c:4f:0c:fa:58:ce:1a:
                    f1:4b:1c:59:d3:ed:9e:af:8c:02:0b:0d:6f:bc:fb:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:71:0D:60:A0:98:8F:77:DF:BD:07:2C:7C:3B:32:A9:E1:F2:6E
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:b3:41:a4:31:a5:5a:3f:7a:5b:c0:91:ef:33:1e:00:b0:
         ea:9e:34:bc:54:4f:7c:67:3f:89:24:30:e9:49:7f:8e:57:9d:
         bd:ef:bf:e8:a8:a2:70:61:0d:90:a8:0f:82:02:8b:0d:fd:8a:
         6d:1c:1d:fd:b1:ea:39:08:51:0d:37:11:b2:05:97:5f:2b:05:
         c0:5b:09:38:ff:46:79:58:40:90:52:be:10:65:73:b2:10:46:
         2f:fe:6c:13:78:9a:2f:25:f4:5f:82:3b:ce:97:a8:14:71:62:
         11:4d:a7:82:0d:64:45:f1:90:02:3f:eb:51:a3:a2:8b:bb:62:
         9a:8b:d9:25:3c:78:d5:65:65:61:7e:d0:ef:32:f8:c2:61:8a:
         0a:08:92:18:e8:c9:12:b5:0c:d5:96:f2:9a:5e:af:2a:62:db:
         b3:a3:a6:ca:17:86:da:f9:b5:2f:cb:85:5c:97:8e:04:07:68:
         1c:51:a3:34:8a:fe:04:93:8f:ac:7c:84:28:cd:27:b7:aa:e1:
         43:6c:42:93:64:ce:46:8e:4b:92:f4:32:e1:c3:e4:cf:8f:e7:
         fb:da:64:82:90:22:11:fa:3f:f9:57:78:2d:72:40:4a:64:d9:
         31:06:91:93:0d:5d:19:d8:61:5c:cf:80:a8:01:02:40:01:c5:
         a3:81:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:00 2025 by rpki-client