Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa
File:                     3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa (raw, json)
Hash identifier:          Cd55MHsAKVIu4e0ymDmPye0lOO6ATQ8GPoT/nPjgKGQ=
Subject key identifier:   56:9C:F3:D1:8E:B9:EA:DD:E7:07:F9:A5:81:98:E7:04:C3:F3:91:EA
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       28AC946D7120A30204D9991B4DE82AB95B6942A2
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa
Signing time:             Tue 04 Feb 2025 18:02:19 +0000
ROA not before:           Tue 04 Feb 2025 17:57:19 +0000
ROA not after:            Tue 03 Feb 2026 18:02:19 +0000
asID:                     264628
IP address blocks:        190.103.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ac:94:6d:71:20:a3:02:04:d9:99:1b:4d:e8:2a:b9:5b:69:42:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Feb  4 17:57:19 2025 GMT
            Not After : Feb  3 18:02:19 2026 GMT
        Subject: CN=569CF3D18EB9EADDE707F9A58198E704C3F391EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:e8:eb:86:e9:f5:17:9b:73:6c:68:38:33:
                    c5:2a:cf:52:fd:2b:a6:45:8c:26:6b:78:bc:12:84:
                    78:44:b7:7a:5b:a5:ff:f5:9f:8b:0e:da:87:48:92:
                    40:0e:55:c2:3f:87:93:c3:61:b3:68:0b:91:ae:2e:
                    ae:c4:e6:1d:d6:2c:58:fc:66:3c:fc:7d:80:d5:46:
                    5c:c4:c4:e5:43:7a:e3:46:98:b6:50:40:b7:73:5b:
                    d8:5d:b8:f4:92:85:97:ee:5c:d9:52:f4:88:3f:57:
                    9a:8c:2a:23:15:ff:3c:e5:85:1b:3e:4c:8e:17:d8:
                    4d:bb:8f:31:d8:1f:d5:0c:94:08:12:38:bb:7f:79:
                    61:a5:78:8e:4f:df:92:88:3b:80:14:56:11:de:7e:
                    e2:d2:6a:1b:b3:fe:03:c5:85:6a:5d:8f:43:20:19:
                    01:a1:8e:ab:c8:ae:f2:2a:54:f9:50:b2:f3:53:36:
                    54:67:93:a2:c2:aa:16:9a:63:37:f5:04:f4:cd:c9:
                    9f:88:28:0d:a3:b8:df:41:57:9a:40:fd:3b:32:31:
                    ae:31:09:0e:ef:c3:b1:60:04:64:34:0f:72:b3:2e:
                    b9:65:d6:88:ad:73:62:85:ac:7d:69:36:37:92:0a:
                    5e:34:39:82:c5:3f:42:36:63:e1:c4:b1:0b:cd:8e:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9C:F3:D1:8E:B9:EA:DD:E7:07:F9:A5:81:98:E7:04:C3:F3:91:EA
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:4c:e3:8e:2f:36:c8:2e:c3:f1:79:54:3d:0b:f0:be:d4:
         01:b4:eb:79:eb:71:86:ec:28:89:5b:aa:c7:7d:62:bc:4e:8b:
         92:1e:6b:2d:50:24:be:d5:e6:00:02:ac:ca:d3:7e:99:0a:4c:
         5e:f0:e2:63:5e:35:9b:d9:1e:bf:c3:be:aa:db:a6:6a:6b:7f:
         e1:aa:43:09:3f:66:84:2b:e8:b2:1d:44:5b:04:dd:27:c3:3c:
         68:c3:ca:1e:22:6b:98:da:d1:6c:af:5d:3c:05:e6:f0:64:8f:
         7e:15:3e:7a:05:58:60:85:00:65:bc:1c:0b:47:d2:60:1f:d2:
         be:42:13:10:8e:7a:ca:a4:74:52:a4:44:60:44:16:00:29:0a:
         9d:96:b4:f3:06:89:7b:9b:70:77:16:ed:89:5e:42:b1:fe:2c:
         a6:ae:53:33:af:5f:3a:04:e0:b0:0b:21:1e:ea:28:97:dc:30:
         5b:7f:be:3f:6d:69:0e:82:b5:a8:5d:1e:06:b4:22:8c:05:06:
         a1:2f:72:26:1d:5d:c6:80:dd:46:35:12:8f:88:3c:c8:69:59:
         6a:f7:a4:6c:88:5d:50:fa:a5:78:36:52:2c:b6:82:b1:b5:84:
         3b:4e:46:68:9a:3c:93:02:b9:14:e4:f9:e0:b6:e3:58:e3:41:
         94:8c:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:15 2025 by rpki-client