Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa
File:                     3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa (raw, json)
Hash identifier:          0zoza4FrxqW2uKP+ATDfO0xmHXh9UDDtrsvqoR2EgV8=
Subject key identifier:   89:96:71:0E:CA:CB:E0:C8:D3:34:A1:71:0F:CA:29:96:8D:4C:D7:A4
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       6E09E3747D7C349169116FB31C50EAA763CEC76A
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa
Signing time:             Tue 04 Feb 2025 18:55:29 +0000
ROA not before:           Tue 04 Feb 2025 18:50:29 +0000
ROA not after:            Tue 03 Feb 2026 18:55:29 +0000
asID:                     52451
IP address blocks:        190.149.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:09:e3:74:7d:7c:34:91:69:11:6f:b3:1c:50:ea:a7:63:ce:c7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:29 2025 GMT
            Not After : Feb  3 18:55:29 2026 GMT
        Subject: CN=8996710ECACBE0C8D334A1710FCA29968D4CD7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:9c:32:ef:f9:8c:20:20:12:81:8a:a6:f8:
                    a5:44:c6:14:1c:f6:4f:d1:ae:88:41:74:6d:ba:1b:
                    29:dc:fe:53:8f:b9:2a:41:46:cf:25:2a:f8:10:13:
                    65:eb:26:13:07:7e:0a:31:4e:58:23:56:cf:d5:7c:
                    85:95:30:c5:0f:1c:12:47:a3:69:6f:bf:22:93:a5:
                    87:95:7e:87:f1:2a:43:10:25:48:eb:6f:a5:90:04:
                    3e:27:ec:d2:7e:e2:90:0b:10:2b:52:8d:58:a5:28:
                    64:59:6f:7b:b5:3e:d8:ca:98:74:67:bb:9f:c3:5e:
                    e0:c8:d0:7e:a4:f7:42:f6:70:84:c4:3d:3b:2a:68:
                    c7:e6:f9:fe:00:09:c9:eb:42:4c:2c:9a:11:59:0e:
                    5e:e3:5b:05:2d:72:6a:a0:12:99:75:35:09:68:86:
                    17:09:98:e0:45:8a:26:3f:dd:a3:a0:88:64:67:6b:
                    d4:22:95:8a:d9:27:17:38:f2:e2:00:c2:e9:ac:1f:
                    68:79:fe:4a:8d:dd:de:f5:18:a8:6a:d6:70:69:a8:
                    62:6b:ef:14:ef:a1:e0:e2:75:1a:2e:39:b0:a7:9f:
                    a1:88:93:ee:67:8c:c3:c0:4e:8b:9e:ac:40:21:23:
                    ed:27:97:d9:0f:79:b5:5a:77:ed:0e:00:e5:1a:1b:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:96:71:0E:CA:CB:E0:C8:D3:34:A1:71:0F:CA:29:96:8D:4C:D7:A4
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:34:f4:ce:23:5f:e1:03:4e:dc:5f:0a:c6:a2:5f:f2:92:
         54:51:d7:20:aa:e0:c4:9e:a8:44:6a:ef:f4:7b:2c:cc:78:9a:
         f1:d8:3f:cc:29:ed:65:4e:16:a4:71:96:8e:51:93:df:a0:eb:
         ec:bf:cb:d4:b8:8b:89:2b:5e:18:ed:80:b5:0a:35:34:ee:0f:
         17:d7:3e:07:a0:6f:b5:2f:cc:56:27:1c:47:65:a3:a8:ba:7c:
         8f:00:da:e9:83:79:64:dd:67:68:e4:c3:e1:bd:e8:42:97:4d:
         5c:10:c4:b4:9f:b7:1d:e5:f2:07:69:60:4a:81:ee:67:b5:3f:
         3d:ba:c0:c0:24:90:c0:03:ae:09:4a:f2:4a:21:9d:eb:07:af:
         38:4b:12:47:68:ec:58:1d:fd:1d:92:93:f0:e6:6f:96:94:f0:
         c5:ba:69:fd:20:47:6a:4d:ba:eb:1c:e1:15:ab:ae:9b:2e:88:
         3b:98:cf:10:da:e4:cf:39:3b:b1:d0:e9:5b:01:9f:67:b7:e6:
         1d:04:9a:db:03:2d:ba:b3:4f:30:e3:5c:62:66:9e:1e:8d:7a:
         d2:d4:3e:fb:4a:28:5c:e1:66:3a:7c:6f:bc:c9:6a:35:df:b3:
         32:50:fd:1f:00:5f:c8:bf:f0:1a:3a:57:44:de:6b:be:98:93:
         f4:00:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:06:06 2025 by rpki-client