Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f31392d3234203d3e203133363832.roa
File:                     3139302e3134332e3139322e302f31392d3234203d3e203133363832.roa (raw, json)
Hash identifier:          Yam+5Vco3Rz1681lXDb3hCJsd5KcrbNfyn+ZJqmPcdc=
Subject key identifier:   B8:25:CB:E6:2C:23:35:E8:1C:C3:CE:57:43:94:40:ED:A7:CF:55:3B
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3FA4E02643A562B5632FE8547E791BB8294964B1
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f31392d3234203d3e203133363832.roa
Signing time:             Tue 04 Feb 2025 18:55:27 +0000
ROA not before:           Tue 04 Feb 2025 18:50:27 +0000
ROA not after:            Tue 03 Feb 2026 18:55:27 +0000
asID:                     13682
IP address blocks:        190.143.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:e0:26:43:a5:62:b5:63:2f:e8:54:7e:79:1b:b8:29:49:64:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:27 2025 GMT
            Not After : Feb  3 18:55:27 2026 GMT
        Subject: CN=B825CBE62C2335E81CC3CE57439440EDA7CF553B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:96:0a:94:bc:3c:37:70:41:76:92:9b:19:
                    59:db:7b:11:64:33:2a:10:dc:77:be:a8:56:f3:f5:
                    96:5c:63:67:b7:21:a5:0f:38:da:b8:74:5e:27:a3:
                    ab:05:a4:cf:a9:af:05:93:1d:0b:9f:c5:3d:02:da:
                    01:e0:3e:a7:5e:35:7f:b8:c9:1b:b7:f7:b5:c9:d0:
                    8d:f4:ba:1b:d4:59:9e:77:f9:56:05:41:3e:7e:61:
                    58:30:67:ce:17:ac:ee:77:60:fa:b9:d9:74:95:d8:
                    ec:bf:b8:33:76:0d:da:e4:c6:0d:10:19:e3:fe:51:
                    f3:eb:ec:3c:0e:66:ae:59:0f:17:75:89:c9:2e:63:
                    38:77:c1:bd:81:43:76:fc:50:ad:9d:03:f2:80:64:
                    b5:10:1e:da:71:29:11:0b:de:47:04:b7:3f:f2:03:
                    0c:14:70:c9:12:c4:74:7f:32:d6:4d:5f:3b:5a:76:
                    ef:8b:77:22:aa:7b:1d:70:95:d7:22:b7:21:79:0d:
                    d3:4a:51:c5:95:34:6f:2e:76:01:fa:3a:80:47:af:
                    33:22:c4:2f:f4:24:44:d9:e9:62:5c:61:68:00:1f:
                    b0:df:df:b1:2e:e6:02:e3:cf:cf:a3:38:4b:02:80:
                    1f:d2:d2:25:47:a6:fd:cc:c4:69:d3:e8:29:98:6d:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:CB:E6:2C:23:35:E8:1C:C3:CE:57:43:94:40:ED:A7:CF:55:3B
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f31392d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:44:3b:e3:96:92:5a:50:23:a4:fb:44:89:96:81:90:a0:11:
         c8:9e:fd:f9:73:10:04:fb:64:e4:5f:10:c1:98:75:e0:21:93:
         4d:e7:1a:61:53:48:8a:24:bc:ba:b6:b1:db:f1:04:77:73:31:
         11:c1:31:c7:6e:ff:93:c6:de:e6:7a:6c:63:db:4c:1e:22:9c:
         4f:96:76:31:ed:1c:4b:d0:a8:0d:19:56:1a:61:6b:66:51:66:
         81:25:1b:a4:ff:9f:3f:79:bc:e5:97:84:b0:1c:d9:31:29:13:
         20:9d:20:85:25:66:2b:b3:5e:12:de:de:62:ca:2a:dd:3f:53:
         2c:c9:8f:65:dc:46:93:29:c9:0e:a0:7d:4d:97:7a:43:73:d7:
         eb:4b:a1:4c:d4:16:83:db:81:87:87:2d:97:35:5d:64:19:03:
         15:70:a6:7d:22:06:05:b8:77:0a:e7:ae:ae:66:2d:37:d2:49:
         1d:2d:06:06:2c:09:cd:c5:21:8a:b8:63:15:63:55:e6:b6:f4:
         54:d5:38:33:3f:5b:cc:47:f7:0f:89:a3:8b:ba:f0:66:ba:96:
         c8:1e:f8:cd:3c:1b:f8:86:01:e5:bb:99:06:d5:04:30:40:28:
         7c:92:d4:4f:96:21:ab:b4:c6:87:be:05:40:25:f0:b5:ee:91:
         49:36:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:24 2025 by rpki-client