Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33382e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e33382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          hSUmhzZqHyI6Gn/BzgFuCp4VxRXKw3qepwH6PV6Gk/4=
Subject key identifier:   5B:02:A0:D5:A6:7A:47:F9:9C:8E:EE:96:6F:06:9B:D6:DE:CB:92:84
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       21C02C8AB0C60F18B80EE8DDD3DA6A3B3B3989CA
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33382e302f32342d3234203d3e20313734.roa
Signing time:             Tue 04 Feb 2025 18:49:44 +0000
ROA not before:           Tue 04 Feb 2025 18:44:44 +0000
ROA not after:            Tue 03 Feb 2026 18:49:44 +0000
asID:                     174
IP address blocks:        190.93.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c0:2c:8a:b0:c6:0f:18:b8:0e:e8:dd:d3:da:6a:3b:3b:39:89:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Feb  4 18:44:44 2025 GMT
            Not After : Feb  3 18:49:44 2026 GMT
        Subject: CN=5B02A0D5A67A47F99C8EEE966F069BD6DECB9284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:d1:a2:31:8e:86:83:e3:cb:39:83:b3:8a:
                    b9:d9:b4:a8:40:5a:e1:9a:37:0f:c7:10:7d:8c:ef:
                    02:9c:de:a8:24:6b:48:c3:67:67:7e:9f:64:e5:fd:
                    36:dd:1e:e2:f6:ef:cf:0e:6f:3f:ae:6a:1c:5d:9a:
                    19:8a:27:6b:ef:ae:eb:14:2d:27:bf:60:ec:f9:4c:
                    eb:44:a4:65:cd:b0:4d:f6:7c:35:8b:a1:31:7e:46:
                    e7:c1:46:d2:e0:2d:85:96:8c:41:99:40:e2:51:93:
                    98:9b:6a:e7:b2:76:26:7a:19:0b:7a:24:4d:f7:da:
                    58:96:58:18:22:9a:6a:c8:ba:1b:d3:a1:79:81:fc:
                    b9:80:8e:5d:db:cf:6e:29:11:aa:e8:a7:83:2f:e8:
                    d1:7b:8c:31:05:69:b7:e4:7e:fc:81:37:73:b7:55:
                    9b:f6:52:61:f8:15:48:ae:7e:2b:57:b6:d8:95:93:
                    11:b2:9c:d8:cd:83:0b:a5:d7:a8:56:ac:df:c0:52:
                    3a:c4:c3:41:3f:2c:66:29:68:64:5c:57:86:75:27:
                    b5:d3:8d:47:eb:6c:94:be:d6:3b:81:9d:7f:07:b3:
                    d2:63:c1:26:4f:d5:4c:cf:8a:0c:b1:16:0f:7a:a1:
                    7e:6c:fa:1e:ab:26:61:10:b2:fc:71:3b:b8:a6:40:
                    bc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:02:A0:D5:A6:7A:47:F9:9C:8E:EE:96:6F:06:9B:D6:DE:CB:92:84
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33382e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:ce:95:4a:6a:e4:97:a1:c0:f3:42:b2:34:0d:21:f5:50:
         55:1d:d8:0e:c8:db:51:d9:1b:55:a5:b1:f2:85:e7:8d:88:1a:
         fb:9f:46:42:c7:02:74:56:f6:7f:f0:a1:9d:ae:9f:92:b2:8e:
         b4:54:b8:8a:4b:76:b2:83:08:9b:3b:fd:8e:7f:2d:9f:78:e5:
         5a:49:c3:0e:d1:81:b0:2c:47:78:fc:7c:8e:f2:e0:d5:15:b9:
         8e:24:1d:38:eb:32:7c:e4:db:58:c5:92:dd:e5:07:76:f3:9f:
         01:83:b7:93:fe:aa:62:cf:52:6f:11:1a:08:7a:b8:97:d6:b9:
         10:94:70:8b:82:35:43:7b:38:91:00:7c:0e:ff:15:f3:f4:5b:
         9c:3e:9f:6a:a6:97:e0:8e:b1:25:de:99:25:24:26:ba:fb:44:
         1a:a4:b4:31:8c:b6:0f:6b:57:82:16:fc:6a:39:09:82:9e:73:
         9b:e8:9d:b9:df:7f:67:70:52:fc:3f:1e:3c:48:01:94:23:6b:
         51:8f:27:5e:2c:e3:8b:5a:57:87:3f:c1:b9:11:14:54:59:ea:
         f2:3d:55:88:34:f8:7a:72:aa:d8:7e:a0:24:9b:3d:c0:45:ac:
         38:84:4c:64:94:22:d2:d2:d2:4a:e1:1b:34:cc:22:e0:7c:10:
         6a:1d:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:14 2025 by rpki-client