Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e39362e302f31392d3234203d3e203134373534.roa
File:                     3139302e3134382e39362e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          cGayFnomFAwXGxyMcfJn2g226SuCyWRlUS08+kUBSUY=
Subject key identifier:   31:6E:6F:C6:F7:43:F8:73:AA:53:FA:46:33:77:C4:38:BD:16:2F:52
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1C1153F380C08F3BED0542CAB6A35B674F516A44
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e39362e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:21 +0000
ROA not before:           Tue 04 Feb 2025 18:50:21 +0000
ROA not after:            Tue 03 Feb 2026 18:55:21 +0000
asID:                     14754
IP address blocks:        190.148.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:53:f3:80:c0:8f:3b:ed:05:42:ca:b6:a3:5b:67:4f:51:6a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:21 2025 GMT
            Not After : Feb  3 18:55:21 2026 GMT
        Subject: CN=316E6FC6F743F873AA53FA463377C438BD162F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:3b:49:e7:3c:a7:17:3a:d6:07:35:40:cb:
                    0d:13:83:65:90:e5:44:7b:64:d2:f0:25:d0:85:73:
                    7d:4a:a4:26:bf:9e:cf:4d:5a:a0:9c:23:16:ca:e8:
                    0f:0c:e5:3c:fc:2b:88:93:07:3a:09:c9:41:38:16:
                    98:8d:72:fd:0a:df:66:3b:e5:a0:84:f6:97:e5:5a:
                    25:5e:90:a9:83:f7:e0:1c:44:1c:a9:5f:73:20:9b:
                    c3:7f:a1:af:97:c8:d7:06:9d:e8:46:b4:08:5d:1d:
                    d3:3c:0c:d5:9c:3f:c1:3d:c0:00:13:a4:6d:84:9a:
                    f2:cc:1d:e0:35:be:00:c7:d0:c0:15:85:94:a9:12:
                    3c:d5:8b:b9:c0:37:fe:47:52:2a:82:1a:9a:e0:6a:
                    89:f3:f2:30:9a:21:7c:98:60:77:23:53:4f:06:6d:
                    00:06:e6:3b:17:ff:a5:c5:63:ee:4f:8a:00:60:6b:
                    0b:31:5a:52:ae:b2:88:3e:9f:3c:1d:51:de:04:a4:
                    77:41:30:4a:71:8d:13:0d:ea:29:ca:a5:a1:2d:fb:
                    1e:25:57:1d:1b:d8:21:fd:d2:e4:90:1a:b9:ae:74:
                    7c:05:94:fd:11:d9:4d:79:03:2e:ee:8b:22:1e:ce:
                    24:52:6e:a6:a4:da:c6:99:6f:61:3e:c6:d2:ec:d5:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:6F:C6:F7:43:F8:73:AA:53:FA:46:33:77:C4:38:BD:16:2F:52
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e39362e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:43:0b:ae:a2:a4:91:57:fe:b1:e7:42:c6:80:5f:79:75:
         d0:58:41:47:31:d4:ff:34:8b:01:af:ad:14:58:47:b2:85:a4:
         06:c8:e4:da:07:5e:12:4e:b5:ea:97:f1:23:d7:d9:27:4a:b5:
         51:c3:a5:b2:08:3f:33:0d:01:35:d0:39:0d:1a:4d:9e:ea:b9:
         38:30:fa:2f:78:e4:68:46:0d:3e:52:a3:06:9c:16:1a:5b:16:
         c3:86:f3:48:3c:f4:6e:55:8b:7e:bc:d0:dd:e2:7b:6f:8f:43:
         25:b9:ff:8d:c8:e7:5f:c3:21:bf:35:59:67:d1:6f:c3:4d:a6:
         e1:7d:be:16:28:07:33:0d:2f:7b:af:b6:19:f1:3d:e0:bc:73:
         38:d7:55:02:ea:fe:2c:c7:bf:ce:4d:e4:72:48:68:95:a1:85:
         f4:0b:4b:ec:cc:dd:e3:06:12:4e:51:f5:3f:8f:c2:f5:36:4c:
         9e:e3:d4:04:2b:a2:78:a9:34:ce:b9:79:10:7e:e2:63:b2:ea:
         85:fc:42:7d:77:74:12:aa:2b:2a:51:cc:1a:ee:16:50:df:ce:
         28:5a:49:15:02:e2:64:77:41:85:01:f2:80:62:4b:33:95:56:
         c3:a7:95:60:7b:79:57:9f:8d:80:91:df:d0:db:b6:fd:11:9f:
         99:c3:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:17 2025 by rpki-client