Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa
File:                     3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          esqB3tTY4zYMnHiGCeOTRrAkW9ZeXGb1u6AO/rI1Nt0=
Subject key identifier:   42:90:76:05:AD:7D:4E:15:62:E2:97:FD:76:F8:1E:25:C6:08:48:9D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       357D0A08EC6040FCD343C18DF4E78A06EBBB1D2E
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:18 +0000
ROA not before:           Tue 04 Feb 2025 18:50:18 +0000
ROA not after:            Tue 03 Feb 2026 18:55:18 +0000
asID:                     14754
IP address blocks:        190.149.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7d:0a:08:ec:60:40:fc:d3:43:c1:8d:f4:e7:8a:06:eb:bb:1d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:18 2025 GMT
            Not After : Feb  3 18:55:18 2026 GMT
        Subject: CN=42907605AD7D4E1562E297FD76F81E25C608489D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:8b:34:dd:1b:8b:87:b6:48:f7:da:db:37:
                    45:19:9b:30:13:77:63:fb:40:9b:10:4c:c9:5c:d3:
                    ad:16:a2:37:0f:35:68:be:df:aa:3c:1c:04:30:af:
                    04:5a:5b:b8:69:4b:69:df:5a:b7:d9:6b:c3:95:84:
                    2a:b2:c8:4e:3f:89:98:f3:6e:65:61:21:50:80:f2:
                    ae:97:7c:15:1b:ef:a8:0c:1a:32:45:b8:c5:6b:d3:
                    a9:18:7c:8c:9d:b2:a6:19:5d:2e:e5:f9:1e:ff:d8:
                    c3:37:58:ce:4e:b2:cb:c0:fa:98:e5:e7:69:49:57:
                    3b:e5:23:4d:00:a7:f6:44:0e:c9:70:23:14:2a:5b:
                    ce:60:6a:01:2c:4d:cf:52:2a:f6:5a:00:51:b3:d2:
                    28:93:d2:f7:e8:61:dc:11:9f:b2:1c:9c:3d:93:b9:
                    8d:71:d8:88:0f:70:a5:98:19:53:95:26:ae:23:1b:
                    1f:2d:2f:71:2b:4e:1b:77:41:b1:32:76:cb:96:d2:
                    21:5d:d6:d8:41:98:28:e3:ef:e2:db:a9:1f:d4:d3:
                    c3:ac:f1:69:63:c3:47:ae:2c:98:f3:7a:98:94:b4:
                    1a:b3:35:12:1a:31:f3:23:67:92:30:1b:fa:cb:f3:
                    36:84:be:94:5a:61:ef:1e:08:e6:a6:8b:32:ba:3e:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:76:05:AD:7D:4E:15:62:E2:97:FD:76:F8:1E:25:C6:08:48:9D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:8b:27:e4:67:a4:fb:70:e9:f4:eb:79:3f:b6:b7:9b:e9:
         0d:f4:27:0a:39:09:37:78:bf:06:6d:31:3b:d7:83:cf:f3:ae:
         da:80:53:dc:d8:27:4b:cc:a2:28:d2:14:60:39:96:5a:90:90:
         50:e1:39:58:7e:e9:85:0c:7c:b3:c5:49:fe:ba:db:6b:5a:be:
         0b:b3:61:bc:97:4b:26:b0:07:1d:e4:6c:b5:55:71:12:3d:3c:
         0e:5d:bf:4c:c2:6b:83:d6:9c:8e:38:e3:db:3d:c7:02:9e:4b:
         18:06:cc:86:86:46:e6:28:d5:4b:5b:e7:3a:bf:d9:e5:3a:b3:
         80:49:7a:65:3c:44:f3:16:ca:a8:55:bf:4d:27:8f:62:aa:ba:
         d1:eb:4a:15:78:70:f3:b0:5b:34:80:2c:94:9e:d2:7a:20:7f:
         9c:a8:e7:d9:a3:46:32:d3:87:88:d3:2a:58:f6:31:6c:99:27:
         75:46:44:27:4c:3d:5a:b7:43:41:5a:dd:f9:0b:e3:93:4f:4c:
         b9:79:ec:6f:58:58:fb:1c:d8:26:61:5e:d4:3e:b2:e2:b9:01:
         36:34:8b:82:c6:3b:06:1a:eb:83:82:5b:9d:73:13:cd:9f:04:
         8b:7f:fe:49:0d:1d:cd:f8:12:4d:f2:fc:38:bc:c7:4e:bf:32:
         61:49:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:57 2025 by rpki-client