Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa
File:                     3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          FodDaqE8nD1eOb6fX4ERjlWv9/thpjL4VTmC76pQIyY=
Subject key identifier:   6A:03:2B:2F:89:36:DC:CF:B1:3C:24:05:28:6B:D6:39:55:27:44:F1
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       5F74E91F1942A88407BCA7EF0FBF711C2BBED707
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:28 +0000
ROA not before:           Tue 04 Feb 2025 18:50:28 +0000
ROA not after:            Tue 03 Feb 2026 18:55:28 +0000
asID:                     262172
IP address blocks:        190.143.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:74:e9:1f:19:42:a8:84:07:bc:a7:ef:0f:bf:71:1c:2b:be:d7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:28 2025 GMT
            Not After : Feb  3 18:55:28 2026 GMT
        Subject: CN=6A032B2F8936DCCFB13C2405286BD639552744F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:71:13:2c:03:5f:19:8b:e2:6f:50:ba:8a:
                    ee:26:ea:ef:57:e1:53:09:14:7b:84:a2:fb:6f:6f:
                    fd:ed:6e:31:e9:ca:15:8b:f1:a1:cd:b1:11:43:b8:
                    ad:f9:f8:a6:5e:fb:64:f0:60:33:d5:a4:1e:7e:ff:
                    fd:ea:2f:78:b7:cf:b0:69:1d:e6:7b:f6:49:1b:0e:
                    82:8d:d5:79:16:85:34:cb:c2:c4:86:61:91:f7:07:
                    dd:66:bf:66:bb:0e:9b:f7:f1:e4:9a:ec:95:4e:0c:
                    0d:58:c5:9d:fd:5c:4c:69:f9:f0:37:88:5c:1e:2f:
                    8c:46:22:42:f2:58:f5:31:f7:4c:5c:df:c9:e5:37:
                    ab:d2:8b:ac:9b:f7:ed:80:9c:fd:85:d2:99:b3:e0:
                    37:bc:a2:f8:17:23:e2:9c:3c:a6:0f:85:a0:e9:ca:
                    50:58:b6:37:e9:06:13:c9:26:d0:7f:fd:34:64:83:
                    46:69:b4:58:25:da:e8:a0:be:4c:f0:a0:72:d3:bb:
                    ff:8e:87:38:96:12:b0:75:07:95:9d:da:61:39:b5:
                    2b:25:f6:22:e1:70:99:27:d6:bc:9b:33:d8:69:c5:
                    ab:db:96:84:ad:c6:b1:1b:9f:2d:37:92:5d:19:e1:
                    91:da:6f:95:04:20:12:37:f9:0c:ba:f4:a3:23:78:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:2B:2F:89:36:DC:CF:B1:3C:24:05:28:6B:D6:39:55:27:44:F1
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:e3:a8:d6:80:ce:39:c1:b9:13:a4:d0:2a:34:a0:d1:94:
         b2:af:48:c0:01:33:0c:21:54:97:04:66:2c:86:3a:6a:08:b7:
         80:29:0e:41:47:d8:21:6a:44:91:7a:8c:71:20:36:99:8d:9d:
         cf:c4:9e:c5:4a:be:27:c3:dc:2b:d4:86:36:35:3d:f7:62:19:
         19:70:ea:af:0f:e8:23:92:3d:73:31:98:b6:24:4f:cf:94:08:
         7b:3c:c6:e5:9a:8e:49:42:fc:93:7e:81:f1:4b:03:bf:73:4d:
         84:e9:1c:b1:71:48:57:e5:6d:f3:97:0c:ad:20:a2:cf:6b:ac:
         78:92:d8:3e:b8:dd:98:01:8e:02:ed:68:72:9f:dd:a8:0f:f0:
         60:8d:17:99:4d:1c:4e:ef:f9:7d:fa:b7:7a:5b:22:78:ae:20:
         46:08:99:e4:46:4a:2e:f9:b1:4a:4d:8f:9d:f6:4d:3f:99:d1:
         5b:8f:d4:a0:7d:bf:9a:08:17:59:19:e9:5d:47:2b:64:e4:bb:
         89:e7:a2:71:8c:79:a8:de:bb:c9:ae:c6:6d:90:43:09:5e:a3:
         12:66:5a:99:cf:33:04:32:2a:34:80:a3:01:fe:31:c9:64:9e:
         6f:29:42:9d:78:12:55:83:9a:c6:3c:ad:24:6b:48:53:a3:bf:
         fb:5b:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:27 2025 by rpki-client