Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa
File:                     3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa (raw, json)
Hash identifier:          fUQMGB0+6iwiQF2xS4I1j6DSGaDAZNuVaYbmgzjonWE=
Subject key identifier:   B6:47:A9:03:B8:BB:B0:14:85:28:03:6B:5D:7D:95:F0:8E:48:6A:E1
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       70306C90199FC5849FC37E40299FB9CF7C266DD2
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa
Signing time:             Tue 04 Feb 2025 18:50:24 +0000
ROA not before:           Tue 04 Feb 2025 18:45:24 +0000
ROA not after:            Tue 03 Feb 2026 18:50:24 +0000
asID:                     272150
IP address blocks:        192.141.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:30:6c:90:19:9f:c5:84:9f:c3:7e:40:29:9f:b9:cf:7c:26:6d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Feb  4 18:45:24 2025 GMT
            Not After : Feb  3 18:50:24 2026 GMT
        Subject: CN=B647A903B8BBB0148528036B5D7D95F08E486AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:10:16:bc:fa:a8:1b:95:96:3d:5e:f4:fe:
                    4c:7e:47:5f:fa:d3:8d:d0:9c:b1:3a:b5:59:5f:2b:
                    06:c5:70:09:91:d8:f6:0f:df:2c:35:3c:88:78:eb:
                    09:09:ec:57:b1:8e:75:a2:10:01:29:57:ec:a4:c0:
                    4d:38:fa:1e:00:79:8a:0e:01:44:ec:0d:0c:ca:53:
                    d0:7d:c1:08:46:ef:6b:67:67:a3:82:c2:4e:14:53:
                    9c:3a:0a:c2:90:6a:a7:34:f2:a0:14:7b:07:7d:5b:
                    33:8a:61:e5:26:3e:7f:32:98:11:fb:c9:60:66:f6:
                    7b:0e:38:e1:e5:1c:48:64:09:05:d6:30:22:b1:db:
                    74:56:39:73:80:d1:25:e8:7d:e5:42:04:09:d0:67:
                    63:ba:a6:66:10:1e:ff:a4:90:80:e9:6d:fc:55:a1:
                    66:56:77:99:ca:46:3d:90:99:71:8c:83:35:7f:cf:
                    12:e3:9e:f4:60:53:da:27:54:8a:41:de:8c:aa:ae:
                    2f:68:ae:3a:04:72:d7:0e:4f:e9:9d:cd:12:1c:b9:
                    56:d2:d5:5c:ae:b0:1c:ac:91:d4:10:f4:d5:93:28:
                    c2:dc:6c:82:62:b1:a4:38:1b:e6:49:47:77:db:f3:
                    c3:e4:e9:f1:70:bb:29:60:ab:cb:e4:51:c9:d6:6a:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:47:A9:03:B8:BB:B0:14:85:28:03:6B:5D:7D:95:F0:8E:48:6A:E1
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:70:04:e0:f6:25:95:ba:f8:67:60:49:9b:87:11:b8:4e:
         e1:49:d4:de:2b:e0:db:13:db:db:25:54:18:da:2f:97:12:62:
         8b:12:b2:5a:d9:3c:a5:6e:59:d3:ec:85:f3:a1:8a:4e:5f:c1:
         c0:f6:6f:cb:b8:c2:34:4b:fa:e5:26:c5:60:81:eb:19:48:98:
         18:c5:e2:dc:fc:3f:4b:93:87:e2:85:82:32:d3:28:7a:75:30:
         02:06:ac:71:d8:e8:4a:cb:a8:c1:5b:a7:d2:60:14:3d:9b:8b:
         1a:68:87:26:a0:f5:ff:c2:1b:35:24:9b:33:6d:25:c2:ea:93:
         f6:1a:b5:7d:5d:97:86:f2:46:8e:4d:22:05:b4:39:32:bc:a0:
         72:e8:7b:9d:be:14:36:67:54:b3:07:23:d9:c0:ac:9a:39:b1:
         1b:06:84:61:12:50:38:16:54:6d:8b:42:25:bc:74:a6:dd:8d:
         c8:bd:7e:7c:f7:25:f6:c3:52:c7:f2:1d:21:31:61:1f:ab:68:
         ba:91:20:3f:d4:4b:f2:07:e9:2a:8c:ed:be:57:9d:89:9d:74:
         06:8f:5e:ce:0c:e8:99:95:06:d6:cd:e8:a4:c1:e5:2c:bf:ac:
         34:9e:66:44:17:13:ed:0c:99:d7:59:c9:46:3f:7b:d2:52:12:
         42:92:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:38:31 2025 by rpki-client