Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa
File:                     3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa (raw, json)
Hash identifier:          m9uwQJv9YdBCtPTiKgCAuHSGHd6iEG2Qzfy5VSbATOQ=
Subject key identifier:   E8:80:2A:6D:A3:E0:2F:84:F9:A7:D8:EE:19:11:A8:3C:EC:24:0E:55
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       14230D928D76585B8FAED6A58E8D12EB65BACFE7
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:32 +0000
ROA not before:           Tue 04 Feb 2025 18:17:32 +0000
ROA not after:            Tue 03 Feb 2026 18:22:32 +0000
asID:                     27831
IP address blocks:        190.120.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:23:0d:92:8d:76:58:5b:8f:ae:d6:a5:8e:8d:12:eb:65:ba:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:32 2025 GMT
            Not After : Feb  3 18:22:32 2026 GMT
        Subject: CN=E8802A6DA3E02F84F9A7D8EE1911A83CEC240E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:b2:0e:b7:bd:0a:00:fa:4b:67:1a:16:77:
                    0c:aa:10:2e:3b:8b:1d:6d:20:11:c7:c3:48:56:42:
                    31:0e:72:88:d3:71:6c:42:be:78:70:5f:e9:5e:9e:
                    35:aa:22:c7:e7:80:79:c9:3a:45:a3:03:f9:e2:9a:
                    d0:e6:cc:41:02:cc:b7:c5:15:27:8d:b5:9a:13:33:
                    ea:80:ec:9e:41:00:21:c1:d9:b4:33:9a:57:63:75:
                    71:1c:31:c1:15:df:d1:17:9f:4b:e3:6f:f9:78:99:
                    8e:e4:db:2f:1c:2d:ef:a0:23:2a:79:5d:7d:38:1b:
                    26:d5:dd:a9:22:4e:06:fe:2e:1f:22:67:59:5b:62:
                    21:fc:01:20:f0:8f:f8:a4:b1:d8:06:03:f2:fc:eb:
                    15:cd:a6:92:35:91:a4:45:2d:e6:69:7b:0b:b3:dd:
                    94:0c:70:ac:1b:be:91:ec:f3:98:1f:40:33:b5:bd:
                    c1:2b:b4:d1:6c:15:64:cd:d1:d9:e9:49:cf:e6:6f:
                    80:89:09:c3:41:98:11:e2:e7:7b:75:b4:94:9d:ab:
                    3c:08:80:79:85:a2:85:fa:ba:96:49:6c:49:da:03:
                    c3:58:6f:fe:43:ab:ab:c1:d7:f3:12:21:47:a7:85:
                    b1:28:e7:b5:e2:d7:c9:56:84:90:40:6f:1a:3c:51:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:80:2A:6D:A3:E0:2F:84:F9:A7:D8:EE:19:11:A8:3C:EC:24:0E:55
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         de:d0:64:45:c0:d4:fd:a9:68:d7:55:15:68:47:7a:39:73:35:
         3f:60:de:6e:1d:39:bb:3c:40:83:cb:75:c8:0d:6f:49:5d:7a:
         7d:7c:3c:86:09:bd:58:98:6b:a8:96:4c:1a:c1:66:b0:1c:fd:
         c3:82:05:03:15:9b:4b:ec:57:05:b5:a5:a0:78:f6:53:3a:e6:
         f3:b1:3f:2a:46:84:4c:a0:44:95:e5:84:52:14:61:1e:4a:4f:
         1c:4b:5d:0a:ed:19:49:8e:09:ce:8b:07:fa:53:07:b5:ce:97:
         4f:fa:78:7b:1e:54:ce:96:b3:a9:23:08:90:59:81:b1:be:df:
         83:24:e1:a6:d2:4f:d5:6c:bc:64:ac:10:f2:78:c1:a5:8b:36:
         3d:02:79:a9:d8:61:e8:19:bd:ba:9f:a5:02:e1:ef:16:39:9f:
         de:5f:23:a6:68:f0:93:aa:51:82:8a:ab:f7:c9:78:d4:72:2b:
         4a:fe:2e:70:3e:e5:4f:73:1e:5e:cf:e3:73:31:1a:d3:b4:5e:
         8b:1a:49:2c:94:eb:9d:55:65:ea:ac:c4:f3:b6:87:7e:15:c7:
         96:8a:f6:a2:28:e5:f4:47:21:06:dd:a3:6d:84:93:a4:8f:33:
         91:14:24:7f:ce:a1:60:88:4a:38:ac:02:d6:22:7f:31:74:84:
         31:df:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:15 2025 by rpki-client