Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203133363832.roa
File:                     3139302e3134332e3132382e302f31382d3234203d3e203133363832.roa (raw, json)
Hash identifier:          ytm9DprD7491NYXGHnPcNfq6pSYS4mbPgJhkz6IANRo=
Subject key identifier:   B0:3A:FD:07:15:F4:FB:13:71:4A:BC:61:07:D9:3A:06:52:BD:A0:00
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       36B60AB2D2A1E38EDA1A02EA51F293BA0F50AF01
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203133363832.roa
Signing time:             Tue 04 Feb 2025 18:55:28 +0000
ROA not before:           Tue 04 Feb 2025 18:50:28 +0000
ROA not after:            Tue 03 Feb 2026 18:55:28 +0000
asID:                     13682
IP address blocks:        190.143.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b6:0a:b2:d2:a1:e3:8e:da:1a:02:ea:51:f2:93:ba:0f:50:af:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:28 2025 GMT
            Not After : Feb  3 18:55:28 2026 GMT
        Subject: CN=B03AFD0715F4FB13714ABC6107D93A0652BDA000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:06:2b:90:99:29:69:31:a9:ad:21:1d:3f:
                    5c:4a:14:04:89:04:2a:34:4a:b9:fe:26:91:dd:f7:
                    a0:b0:4e:d2:a5:f0:d3:c2:f4:1a:8f:03:29:26:d3:
                    a0:c4:5b:db:fd:b3:9a:97:0f:c5:9a:9d:83:bd:96:
                    58:55:cd:cb:c8:e0:95:44:91:b0:83:70:96:f0:2f:
                    56:bd:45:3f:9d:84:55:c3:32:58:a7:21:92:d8:fc:
                    f8:bb:a2:2b:3b:4c:a3:4c:dc:91:48:e6:35:b8:e1:
                    fe:18:ca:d3:4d:aa:1b:8e:d0:d3:b5:d1:d3:3a:0a:
                    0b:61:9f:ce:f8:48:f7:82:e4:3d:f7:54:07:49:d6:
                    54:0d:5a:4c:63:0c:09:9e:4f:6d:75:d7:af:45:30:
                    a1:8b:8a:5c:94:da:96:46:fa:73:e5:0d:b6:d0:5f:
                    a6:05:5d:7d:60:48:e2:01:f4:a7:90:23:35:4b:d6:
                    17:a0:32:0a:7a:ac:42:5e:6b:96:a6:0c:f8:16:1b:
                    e3:ce:08:29:0d:bd:12:9d:d5:f8:27:3d:53:46:e1:
                    a9:a7:9d:5c:92:0e:1f:3e:bc:b4:82:03:a4:66:23:
                    2e:d3:21:96:c2:47:c7:08:0c:3a:e6:a7:5e:fc:b1:
                    4f:10:73:d8:07:ff:5a:f3:c6:1e:72:0a:ed:63:99:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3A:FD:07:15:F4:FB:13:71:4A:BC:61:07:D9:3A:06:52:BD:A0:00
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:a9:c4:54:51:3b:14:10:ab:ee:51:48:50:97:8c:3f:2b:
         8d:5d:28:a5:cf:52:df:71:22:a2:98:89:87:23:0a:ac:73:96:
         9c:f6:73:46:8f:04:c9:9a:05:8c:bb:02:2a:25:da:45:a2:4f:
         5c:a0:46:5a:78:51:a8:22:50:4e:43:8c:4b:93:73:b6:24:2e:
         2e:62:45:2b:ca:41:80:d1:f4:52:ea:2e:97:0d:77:be:f6:74:
         27:05:45:d3:9f:e2:99:be:70:32:95:82:4e:2b:cb:ea:0c:9a:
         99:f7:8f:54:65:f1:05:64:d4:5b:f5:75:e9:ad:20:43:f8:b5:
         05:05:f8:dc:a9:b5:aa:6a:58:2c:f5:d3:cb:30:a2:01:a6:05:
         60:fa:32:f5:df:34:74:d9:dd:ea:6b:98:16:b7:74:69:62:b6:
         b2:a5:1b:bd:8d:38:a9:95:ce:3e:17:fb:a8:30:47:6c:82:72:
         e9:30:44:2e:90:42:fe:b1:fe:1b:a5:d5:28:29:9a:cc:44:26:
         7b:26:c6:5e:a8:11:40:1a:99:eb:28:82:b0:08:41:35:50:56:
         73:53:5c:78:77:56:77:40:0e:75:b7:50:b3:96:e0:17:ba:6e:
         80:d1:c3:2e:24:a2:47:c8:c1:be:eb:b1:4f:f1:a6:81:ca:d3:
         3b:8f:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:07 2025 by rpki-client