Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa
File:                     3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa (raw, json)
Hash identifier:          f0q27hMo1oPdKMo5aF2GRdsdwX1eJ9wkQki6am/SjkI=
Subject key identifier:   BC:CC:25:11:74:20:C4:FE:26:10:D9:DA:47:46:CC:60:4E:74:59:08
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       23FC1F5BBF59DE3B9CF8FECFE36AEB4EECAC292D
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:11 +0000
ROA not before:           Tue 04 Feb 2025 18:19:11 +0000
ROA not after:            Tue 03 Feb 2026 18:24:11 +0000
asID:                     23383
IP address blocks:        190.109.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 13:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fc:1f:5b:bf:59:de:3b:9c:f8:fe:cf:e3:6a:eb:4e:ec:ac:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:11 2025 GMT
            Not After : Feb  3 18:24:11 2026 GMT
        Subject: CN=BCCC25117420C4FE2610D9DA4746CC604E745908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:b7:65:e5:74:34:82:8a:01:01:2b:ee:67:
                    c6:a8:d3:64:a0:79:9f:f2:5b:35:3a:70:50:49:36:
                    c1:b5:c4:26:de:51:5f:9e:7c:6e:00:69:ba:b2:ae:
                    a1:e5:20:7a:39:e4:f5:1c:43:fb:7b:8d:08:f1:8d:
                    8c:da:29:15:15:a5:44:54:89:28:1b:4d:b7:b5:76:
                    8a:61:ff:06:3a:6d:11:78:7b:33:46:9a:bc:86:d6:
                    8b:de:b3:cf:0d:c6:39:8f:a9:7a:70:6c:82:3f:15:
                    95:27:9e:68:e8:17:fc:53:a9:7a:1e:1f:e2:56:57:
                    99:bc:84:ae:95:17:4e:de:9f:51:5e:b5:6a:5a:6d:
                    66:d0:3b:8a:c6:71:01:99:15:7c:90:3d:84:3a:ea:
                    c4:94:b4:fa:12:23:16:58:30:69:e6:56:57:c5:5a:
                    46:64:a3:ab:92:2b:95:d1:92:cd:61:d0:c9:d6:60:
                    5d:25:e3:41:ef:84:60:96:e7:31:ae:f6:92:fb:8c:
                    10:28:a7:59:ab:33:ec:fd:2c:53:80:68:e6:63:ef:
                    25:54:54:64:ef:25:35:51:c7:fc:67:1c:ab:19:ca:
                    c5:d0:21:90:5d:c9:64:4f:be:6a:43:a7:5d:13:e8:
                    a8:33:d6:0a:c1:40:a7:6d:d9:71:bd:d4:a4:57:e1:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:25:11:74:20:C4:FE:26:10:D9:DA:47:46:CC:60:4E:74:59:08
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:79:e3:7e:62:18:0d:23:f6:56:f3:79:fb:ee:25:5d:73:
         42:de:f2:f4:62:18:07:de:4c:30:67:7e:34:fe:bb:f2:b4:7f:
         bd:72:89:21:54:bc:d7:23:e2:76:3b:d7:97:75:80:49:88:10:
         f5:d2:94:86:20:cc:de:0c:1b:c1:61:90:ca:2a:ee:9a:59:3c:
         c5:9a:2e:ae:6e:53:fd:13:2a:e4:5d:cf:b5:16:e7:68:b2:6d:
         35:8b:f5:21:69:23:8c:c5:73:9d:42:6a:9c:69:6b:72:ea:1f:
         9e:80:be:1b:86:e3:74:ad:60:70:24:fa:88:a7:bf:6a:af:ff:
         0e:b9:2e:87:c3:8c:26:a2:5b:4e:bc:a2:7e:e3:2f:dc:a9:33:
         d9:cd:70:2d:85:9e:e2:b4:3f:6b:04:ac:d7:cd:f5:81:5d:3d:
         7a:fe:02:12:e5:97:19:9f:82:ed:71:e1:d8:f7:a5:7f:f9:44:
         2f:c7:14:79:f8:cf:7d:9a:fd:6f:46:2b:52:4a:42:c2:79:37:
         f5:c3:e0:37:0f:08:23:2d:98:4e:02:33:0a:17:bd:64:56:de:
         c6:9b:d4:7f:78:72:89:6d:70:c6:ab:8e:4d:dc:0b:ad:4e:37:
         00:79:2c:5a:83:7d:bd:a0:06:4d:d3:2e:2c:1c:38:17:8e:8c:
         79:4c:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:19 2025 by rpki-client