Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa
File:                     3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa (raw, json)
Hash identifier:          7vqdGpJTv/BudETST++j4njeqc5sUzgs6HXGhVeaLCs=
Subject key identifier:   57:3B:0A:0D:26:F3:91:7A:86:10:F1:13:C9:E0:0D:7C:C4:65:24:6F
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       1F528606039E2C4CCC87815FE00F321AD75C78EF
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa
Signing time:             Tue 04 Feb 2025 20:02:43 +0000
ROA not before:           Tue 04 Feb 2025 19:57:43 +0000
ROA not after:            Tue 03 Feb 2026 20:02:43 +0000
asID:                     272039
IP address blocks:        190.89.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl
                          rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:52:86:06:03:9e:2c:4c:cc:87:81:5f:e0:0f:32:1a:d7:5c:78:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Feb  4 19:57:43 2025 GMT
            Not After : Feb  3 20:02:43 2026 GMT
        Subject: CN=573B0A0D26F3917A8610F113C9E00D7CC465246F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:40:50:b7:6d:04:50:a6:6a:27:c5:3e:b5:
                    8a:c6:9c:29:0d:3a:73:c5:f6:96:18:60:0d:8d:83:
                    dc:94:8c:7b:4a:49:77:2c:54:7e:0b:f4:09:71:6d:
                    58:5d:f0:4f:6e:0a:4c:94:0c:4b:c5:a8:e3:11:8a:
                    97:20:83:ea:9e:3b:28:b1:03:c0:ba:dc:7f:b9:8e:
                    ae:c6:ad:34:49:a4:4e:52:30:a5:37:c7:2b:04:75:
                    db:cc:a8:ba:b1:bd:39:0e:80:f7:49:aa:14:99:74:
                    d3:7e:f0:d8:f6:d2:fe:5d:8a:ac:71:3c:a2:4c:18:
                    00:ba:cb:43:6d:5f:ca:89:2f:91:e1:32:9e:f3:0c:
                    ea:59:9d:22:0b:72:28:cd:08:e3:38:4e:57:cb:b1:
                    b2:a0:fd:53:9b:bf:92:55:65:05:ed:4c:28:f4:f2:
                    80:44:9e:da:c2:17:07:41:c5:f7:28:8a:f7:fe:b3:
                    bd:8f:de:7e:38:f8:24:07:57:b5:ea:d8:f0:9b:1d:
                    ae:a2:bb:fc:a4:34:2e:75:b1:3b:51:f1:5b:dd:8f:
                    6e:e8:d1:ea:b5:4a:a2:fc:8c:46:b6:13:06:77:e9:
                    ed:ed:2f:c4:33:9d:db:3b:aa:38:92:61:3b:bc:08:
                    03:de:ae:76:1a:d2:65:08:cb:58:bd:f7:12:b7:2e:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:0A:0D:26:F3:91:7A:86:10:F1:13:C9:E0:0D:7C:C4:65:24:6F
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:21:46:d9:3b:61:99:7c:5b:01:fc:19:5f:90:b4:e6:ab:
         b3:4c:d1:bf:51:e7:7c:4c:41:c3:08:9c:01:66:31:b1:e9:96:
         98:f4:27:35:46:d4:b9:b5:ce:63:46:2b:df:5c:6a:11:a4:57:
         dd:ca:d3:31:d8:2f:b5:5f:e4:f7:5c:45:b5:f8:ec:58:a7:e3:
         e9:ee:eb:2e:ed:dd:6e:cf:86:43:a3:c2:55:e8:a8:14:da:e0:
         a1:1b:25:b7:5e:2e:05:70:5f:5f:7d:0e:67:92:f8:59:31:e9:
         be:bb:d9:6b:a9:c1:e5:6a:ec:ee:a9:0a:99:fa:5c:89:0e:93:
         10:dd:30:7d:e8:4d:9e:70:90:45:2a:c6:1c:14:85:56:09:de:
         3b:aa:0d:df:ca:0f:06:5a:6f:90:9f:e0:03:f4:e3:0d:23:97:
         08:21:2a:e5:09:60:5a:b8:04:a8:0a:a0:89:6b:9b:fe:78:12:
         dd:78:f8:34:66:37:47:c2:eb:89:6e:bb:dc:05:80:49:ee:6d:
         19:94:b3:ad:46:a5:8f:ec:0c:6b:ab:e1:5e:1f:8f:2d:b5:e6:
         24:4b:f7:09:41:9e:bb:a5:eb:2f:08:7d:da:ed:88:01:09:e0:
         99:c7:89:82:25:1c:da:88:94:27:3e:93:e2:81:98:22:b2:af:
         18:f5:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:52 2025 by rpki-client