Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e20313938393439.roa
File:                     3139302e3134392e3136342e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          gK9TCiFixf0lW29F1dAHXrh/+72/5MZ983zFdWtTPSI=
Subject key identifier:   A4:88:7D:0C:12:49:CC:39:37:38:88:60:1D:AD:81:33:7C:2B:86:00
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       5DBD40D2612CAC0583BF7B68D3D0394B1E9DA6BC
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 04 Feb 2025 18:55:16 +0000
ROA not before:           Tue 04 Feb 2025 18:50:16 +0000
ROA not after:            Tue 03 Feb 2026 18:55:16 +0000
asID:                     198949
IP address blocks:        190.149.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 06:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bd:40:d2:61:2c:ac:05:83:bf:7b:68:d3:d0:39:4b:1e:9d:a6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:16 2025 GMT
            Not After : Feb  3 18:55:16 2026 GMT
        Subject: CN=A4887D0C1249CC39373888601DAD81337C2B8600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:67:05:ab:5a:15:f3:ea:3a:5e:64:d1:3d:
                    e7:d6:11:78:89:4b:0a:65:3d:25:56:fb:38:3f:68:
                    f6:ce:1a:a6:0a:9f:33:11:40:a1:1b:ec:1d:74:d2:
                    39:64:3c:88:ed:ee:2c:92:de:4c:dd:43:59:78:a1:
                    c2:b8:cf:e7:a9:54:8a:46:8d:ae:01:49:58:26:4b:
                    68:2f:52:27:a0:d5:5e:3d:70:2b:fa:76:20:48:da:
                    cb:4a:5d:4f:b6:0a:40:54:e3:82:df:dc:1e:c1:0e:
                    be:dd:6c:ca:98:b2:51:1f:e7:cf:7d:6f:be:85:8c:
                    06:95:27:e6:bd:a0:a7:81:f4:7a:25:76:15:f6:34:
                    b1:57:b6:7b:0a:e9:39:d2:92:7e:66:11:e1:a8:77:
                    25:b1:c5:2f:25:7f:76:17:25:0d:17:5c:86:38:7c:
                    17:2e:c9:a0:52:f9:9b:c5:ae:c9:be:19:ba:6a:a6:
                    eb:0f:0c:ae:6b:8e:ba:1c:92:4a:b8:85:80:43:61:
                    32:31:be:84:97:45:50:4a:ac:57:31:b8:b8:3c:27:
                    32:2d:e7:91:cc:45:0b:87:4b:a9:f1:ec:f2:5c:1c:
                    12:1b:6d:db:02:f5:a1:ff:92:38:a9:e4:de:73:4e:
                    6d:35:79:82:72:76:0a:eb:38:3a:b3:df:a6:7b:b3:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:88:7D:0C:12:49:CC:39:37:38:88:60:1D:AD:81:33:7C:2B:86:00
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b5:9e:cc:c3:93:88:57:ed:c5:0a:c3:b6:99:9e:9a:a4:85:
         e8:5b:a9:d9:77:4d:be:bf:cf:91:36:68:56:cc:ca:8a:09:b9:
         d9:95:78:cf:bd:b5:15:95:aa:0d:f2:fc:62:4a:23:15:96:96:
         a8:57:52:b3:08:d0:54:2e:84:ab:c6:a0:e0:e3:19:5f:24:83:
         ae:fa:8c:72:2c:e6:76:aa:8d:28:1c:53:73:68:73:dd:ad:b9:
         cb:39:00:6d:ca:1b:99:66:12:8c:07:e5:eb:84:76:a4:f7:8b:
         4b:ae:d2:95:8d:ea:29:f2:f2:95:ba:48:5b:a7:03:65:84:07:
         d7:87:7a:5a:54:6d:63:07:a9:33:c6:90:01:c6:fd:86:2d:7b:
         84:a0:3d:7b:77:92:9a:63:c0:e4:41:54:7a:5e:47:f2:8e:32:
         98:da:ec:1a:b0:23:11:14:82:cb:ef:87:20:b0:15:28:25:74:
         6b:55:e5:f3:fe:78:b0:ed:e6:85:72:28:61:ea:e1:e0:46:87:
         a8:f5:f3:b4:ef:02:b6:45:27:3b:b1:9b:5f:3c:1a:9b:67:bc:
         1e:07:ab:c1:0a:e1:8c:c4:03:2c:c6:c7:85:63:f6:c1:88:d5:
         73:da:be:be:4d:b8:04:be:5c:ee:30:66:60:c4:12:d8:51:68:
         ae:f1:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:43 2025 by rpki-client