Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136302e302f31392d3234203d3e203134373534.roa
File:                     3139302e3134392e3136302e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          RHM7F9NZfJWESpm98DQFsgbg6GPh8ehOdyXMMUkCya0=
Subject key identifier:   2E:2D:1E:48:A3:35:03:16:59:47:33:5F:3E:49:A2:3A:96:70:61:99
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       4452E71BE3D63998FAA7C76EBA3C6C1C4342588F
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136302e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:26 +0000
ROA not before:           Tue 04 Feb 2025 18:50:26 +0000
ROA not after:            Tue 03 Feb 2026 18:55:26 +0000
asID:                     14754
IP address blocks:        190.149.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:52:e7:1b:e3:d6:39:98:fa:a7:c7:6e:ba:3c:6c:1c:43:42:58:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:26 2025 GMT
            Not After : Feb  3 18:55:26 2026 GMT
        Subject: CN=2E2D1E48A33503165947335F3E49A23A96706199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:4b:8d:c6:b0:5b:b8:7a:85:0c:d4:8b:8d:
                    06:dc:9f:94:61:3e:63:05:26:f6:f7:3a:50:49:e2:
                    22:13:0b:fd:4b:10:2f:1e:45:36:8c:6c:76:46:62:
                    70:1f:36:e8:f5:d0:aa:99:53:c1:e6:b3:e2:12:22:
                    92:3f:d7:3b:c6:0c:96:47:b0:f4:01:b7:d0:d6:0a:
                    c4:ce:63:0a:53:b9:15:5c:aa:3b:1e:2e:dc:e4:58:
                    1c:6c:94:0b:e7:b3:8b:8b:b8:d3:13:59:31:dc:7d:
                    5f:df:a9:b1:30:c7:96:18:5a:2a:c5:cf:e9:55:66:
                    27:b5:e3:72:e7:72:43:4b:a4:0b:51:16:85:5c:29:
                    db:cf:2f:55:23:26:6b:1b:d2:d3:91:59:14:de:a4:
                    2c:5e:4c:ae:1e:1f:61:90:60:3b:a4:87:49:61:c8:
                    cd:df:05:d2:e6:27:0f:0e:de:a8:6c:5e:40:2d:57:
                    68:9e:db:93:d2:de:0b:51:92:a2:25:fe:89:94:ba:
                    04:11:0d:0d:eb:68:63:d7:78:cc:78:93:be:0c:90:
                    e3:70:12:fd:13:76:e0:eb:c7:50:cb:04:b2:ca:d4:
                    dc:19:5e:c3:e3:19:06:58:30:da:b2:ee:de:50:97:
                    cc:55:75:4a:b4:e1:0d:17:c6:9a:74:2a:a8:54:5e:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2D:1E:48:A3:35:03:16:59:47:33:5F:3E:49:A2:3A:96:70:61:99
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136302e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:f9:c2:72:c4:ec:f6:5f:bd:14:22:fc:22:b4:52:88:44:
         0d:e0:24:a9:24:96:59:8a:04:b9:bd:75:e5:3f:59:c7:d6:e4:
         3a:f2:9c:af:52:59:32:d6:d1:83:f9:2e:be:1c:f5:8e:d2:43:
         1d:e9:3c:ce:6f:23:fd:cc:61:ea:82:c4:7e:ff:18:5a:ca:cb:
         ca:22:dd:c1:b9:e6:2f:cf:52:0d:e4:36:9d:fd:31:97:43:58:
         ea:57:71:e6:65:2e:3f:d8:53:fd:90:db:e8:b9:31:12:18:18:
         ec:1a:ad:06:52:8d:95:c9:f0:a1:bf:81:23:3a:bf:73:77:97:
         72:22:6c:a0:d2:04:bb:38:e7:b6:51:41:b3:8e:23:98:87:5d:
         96:74:19:62:7d:4e:3e:bb:a9:3b:df:43:ac:19:49:d4:0c:9f:
         e6:c1:b6:1d:73:2d:1a:9d:0b:2e:1e:a3:f2:64:1d:14:4b:76:
         16:11:ae:51:da:e9:d2:fb:f2:2b:d0:54:38:61:c2:7e:06:f4:
         0d:a1:1a:e3:36:1a:96:b8:0b:9f:38:ae:a6:06:81:0d:78:9b:
         43:29:96:90:c9:34:33:22:a3:48:5f:f2:b6:ca:f9:48:51:59:
         b0:df:7a:09:70:0c:2f:72:5f:18:22:e6:17:fe:0e:66:3e:65:
         0d:81:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:20 2025 by rpki-client