Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa
File:                     3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          in3dMHtaCJ1z0lMRW94te48tMv3kzFq/ObxHf6Ph9ps=
Subject key identifier:   70:D3:CB:16:9F:37:20:FA:D2:B8:D6:CE:FF:A2:C4:D2:41:36:C4:C4
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       512463C638D1E99B23008AD4979391C71F3E8254
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:18 +0000
ROA not before:           Tue 04 Feb 2025 18:50:18 +0000
ROA not after:            Tue 03 Feb 2026 18:55:18 +0000
asID:                     14754
IP address blocks:        190.149.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:24:63:c6:38:d1:e9:9b:23:00:8a:d4:97:93:91:c7:1f:3e:82:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:18 2025 GMT
            Not After : Feb  3 18:55:18 2026 GMT
        Subject: CN=70D3CB169F3720FAD2B8D6CEFFA2C4D24136C4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:15:3b:eb:e1:2d:b2:7e:51:38:39:1e:94:
                    bc:a0:a8:b9:5b:ba:d4:fb:0d:b7:6a:0a:93:af:31:
                    2b:f5:fc:4f:62:9c:96:aa:4c:cd:88:da:75:ef:92:
                    5a:ba:c1:85:b3:d0:a4:35:b9:cb:eb:38:b7:33:f8:
                    46:0e:72:81:b2:ae:b0:80:ac:71:01:b2:d1:9b:b7:
                    76:1d:30:90:75:f0:42:cb:bf:02:96:0d:a6:72:4a:
                    e5:b9:c0:90:06:54:84:aa:fb:db:7c:d3:cc:45:45:
                    94:d1:4d:02:80:34:d2:04:08:29:aa:89:66:7b:39:
                    eb:dd:58:21:fc:cb:16:1e:94:38:e5:d2:6e:34:55:
                    96:10:c7:17:68:e2:6c:9b:2f:9a:d9:f9:ef:f3:7a:
                    d4:b1:07:73:6c:37:63:7d:1a:a7:18:78:84:6e:9b:
                    a2:c6:0c:37:36:ed:12:d5:54:a6:ae:f4:c8:bf:6f:
                    4c:c9:bf:de:a8:5a:3b:ae:aa:3f:d5:11:a1:76:e6:
                    91:94:5c:2f:5a:cc:7c:24:a8:23:28:5c:ca:20:93:
                    1d:3d:fa:34:61:7d:01:4f:af:0f:81:5c:4e:7d:a7:
                    91:a1:f6:68:de:22:8b:7e:fe:a9:b7:e5:bc:a3:84:
                    da:20:1c:a0:b5:c8:a5:92:76:10:c3:03:4a:50:09:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:CB:16:9F:37:20:FA:D2:B8:D6:CE:FF:A2:C4:D2:41:36:C4:C4
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:6e:43:c2:60:24:20:1c:d2:a0:66:a0:9e:39:38:99:1a:dd:
         ec:9e:02:c0:ad:62:8f:4e:3d:3a:08:8c:a6:ad:6c:c2:40:cc:
         88:c5:e6:be:e1:c8:e9:73:0c:89:64:e4:48:7b:67:af:af:ac:
         dd:03:34:b4:e4:b1:41:8b:8d:21:09:71:f5:23:42:38:64:0f:
         b7:62:30:8d:86:2f:85:ff:e4:e6:d3:1b:de:18:ac:df:8b:cf:
         b3:a1:f7:a0:2d:b8:40:ee:4a:7f:5a:02:74:88:05:0a:b0:9f:
         e9:4e:8f:c2:ab:5b:c7:88:71:33:31:36:b7:93:89:85:87:3a:
         a1:c0:4a:cf:e8:5a:62:72:01:94:c2:d3:4a:f7:87:17:30:c6:
         a3:c6:58:48:1f:f1:f5:48:72:9f:54:47:55:27:63:dd:35:67:
         35:c8:39:24:ac:0d:09:7f:93:41:d3:19:d4:20:29:29:6c:99:
         45:18:74:45:c9:5b:a5:cb:b5:98:5d:94:8f:3a:0b:d9:51:32:
         94:30:e7:10:c1:a7:64:37:78:91:c0:79:7d:ae:72:a0:e1:e9:
         d0:be:cc:49:ac:e1:a7:11:ea:af:92:a3:1e:ee:b4:73:d0:ea:
         fa:0a:8b:79:3d:bb:12:61:32:6f:7e:dc:6b:59:30:47:84:be:
         0d:c5:47:19
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUSRjxjjR6ZsjAIrUl5ORxx8+glQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMThaFw0yNjAyMDMxODU1MThaMDMxMTAvBgNV
BAMTKDcwRDNDQjE2OUYzNzIwRkFEMkI4RDZDRUZGQTJDNEQyNDEzNkM0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6hU76+Etsn5RODkelLygqLlb
utT7DbdqCpOvMSv1/E9inJaqTM2I2nXvklq6wYWz0KQ1ucvrOLcz+EYOcoGyrrCA
rHEBstGbt3YdMJB18ELLvwKWDaZySuW5wJAGVISq+9t808xFRZTRTQKANNIECCmq
iWZ7OevdWCH8yxYelDjl0m40VZYQxxdo4mybL5rZ+e/zetSxB3NsN2N9GqcYeIRu
m6LGDDc27RLVVKau9Mi/b0zJv96oWjuuqj/VEaF25pGUXC9azHwkqCMoXMogkx09
+jRhfQFPrw+BXE59p5Gh9mjeIot+/qm35byjhNogHKC1yKWSdhDDA0pQCc9tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcNPLFp83IPrSuNbO/6LE0kE2xMQwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDM5MmUzMTM0MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvpWQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCnbkPCYCQgHNKgZqCeOTiZGt3sngLArWKPTj06
CIymrWzCQMyIxea+4cjpcwyJZORIe2evr6zdAzS05LFBi40hCXH1I0I4ZA+3YjCN
hi+F/+Tm0xveGKzfi8+zofegLbhA7kp/WgJ0iAUKsJ/pTo/Cq1vHiHEzMTa3k4mF
hzqhwErP6FpicgGUwtNK94cXMMajxlhIH/H1SHKfVEdVJ2PdNWc1yDkkrA0Jf5NB
0xnUICkpbJlFGHRFyVuly7WYXZSPOgvZUTKUMOcQwadkN3iRwHl9rnKg4enQvsxJ
rOGnEeqvkqMe7rRz0Or6Cot5PbsSYTJvftxrWTBHhL4NxUcZ
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:59 2025 by rpki-client