Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa
File:                     3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          GkjfzmTdpT4vHcR0OMKX9CjE5+yXn9LjBmzCBblqGDA=
Subject key identifier:   87:1F:4A:1D:39:F8:60:B3:A0:2A:1E:FB:55:F7:66:EA:69:97:C6:CB
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       285779BA551B5F0D6FFC52961A6F6611CE60975D
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:30 +0000
ROA not before:           Tue 04 Feb 2025 18:50:30 +0000
ROA not after:            Tue 03 Feb 2026 18:55:30 +0000
asID:                     14754
IP address blocks:        190.148.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:79:ba:55:1b:5f:0d:6f:fc:52:96:1a:6f:66:11:ce:60:97:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:30 2025 GMT
            Not After : Feb  3 18:55:30 2026 GMT
        Subject: CN=871F4A1D39F860B3A02A1EFB55F766EA6997C6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:6a:ab:0c:0b:e9:96:82:a3:78:f0:73:9c:
                    76:64:be:a7:15:8b:63:9c:dc:4d:2d:aa:2e:85:69:
                    19:74:df:8c:92:f9:73:3d:12:6c:eb:9e:79:fa:7b:
                    46:b7:eb:2e:82:a2:49:db:9e:58:3d:3b:34:e7:c8:
                    4c:59:6b:d7:72:6b:b4:c6:d2:c3:5d:54:6a:0a:4e:
                    78:42:1e:43:24:87:0f:6e:a8:5e:ca:bd:21:43:cc:
                    6c:52:d6:0b:8c:f5:2f:bc:50:e7:05:75:68:d0:82:
                    e4:57:d0:c3:96:5b:71:b1:60:e3:33:e7:e8:71:d4:
                    c8:fc:db:b3:87:06:b0:04:32:c4:03:71:6a:7e:b5:
                    b8:56:24:f3:28:3a:ee:5c:5f:be:cf:94:a8:7e:16:
                    f0:c6:e7:cb:2a:f7:f8:c9:85:2e:c8:73:7e:e0:fa:
                    be:51:81:f3:67:d8:68:c2:22:86:81:29:9c:3c:a9:
                    31:40:d6:4d:79:9b:46:c8:df:e9:c5:c2:8d:bd:f9:
                    c6:03:7e:99:5a:21:91:aa:6a:23:d1:39:35:df:a1:
                    d3:6e:25:e8:a0:e7:e3:db:d2:80:44:80:8f:a9:e6:
                    dc:20:3e:52:0c:b7:70:32:3f:81:62:fb:ae:95:3d:
                    90:6b:b8:0a:c3:27:bc:6b:44:59:a7:1d:bd:0e:62:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:4A:1D:39:F8:60:B3:A0:2A:1E:FB:55:F7:66:EA:69:97:C6:CB
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:48:f3:86:94:8b:03:e6:00:0e:5d:3f:0b:e5:1e:f4:dc:7d:
         2f:2f:ab:d1:35:16:7e:0c:32:d3:fa:e8:ea:75:79:3f:63:91:
         ad:98:d6:bf:3b:5a:a2:99:66:b1:93:03:de:7a:8a:83:99:8e:
         5d:b8:23:4a:4a:19:fd:6a:61:95:58:77:8b:29:59:7b:e5:a0:
         0f:07:83:c8:9e:e1:5b:d1:79:14:8a:e9:07:09:58:bc:b3:29:
         1b:04:12:6e:2a:93:34:e3:79:89:89:a1:3b:6b:0b:fa:2a:86:
         6f:e0:49:a4:82:99:f2:7f:f4:1c:88:7c:a4:dc:cf:78:c5:a6:
         59:5b:f3:b0:6a:a8:80:54:88:c8:c2:ec:8f:7c:7e:70:5d:26:
         0d:d2:b1:ad:a2:88:f6:f6:13:0e:eb:44:b9:7b:0f:89:bc:8d:
         4a:cd:78:8b:42:90:3b:cd:57:47:1a:20:cd:e8:cc:dd:9e:7e:
         05:fd:36:23:95:81:f3:a8:6e:07:15:d7:8f:b7:97:81:34:05:
         59:ce:ad:cd:a8:dc:c9:8e:9a:25:c1:8e:8f:aa:a8:43:00:f2:
         e2:38:52:ef:55:02:17:57:bd:83:d4:dd:29:a1:12:cf:aa:77:
         b8:11:f7:98:b7:16:ef:ff:d2:48:88:3e:10:d2:c9:60:4d:33:
         22:c7:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:18 2025 by rpki-client