Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e33322e302f32312d3231203d3e203532333437.roa
File:                     3139302e3131312e33322e302f32312d3231203d3e203532333437.roa (raw, json)
Hash identifier:          4Jn9/Fea90x7rxMihGwAC3BzEUhYjKT/UqDTu6l8gys=
Subject key identifier:   C4:F9:80:AB:35:8C:D2:A6:15:E6:6B:BF:43:D4:EA:E3:88:37:CC:86
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       6D1C7053929E3349D6718F41618EEAE19630F2BF
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e33322e302f32312d3231203d3e203532333437.roa
Signing time:             Tue 04 Feb 2025 18:20:10 +0000
ROA not before:           Tue 04 Feb 2025 18:15:10 +0000
ROA not after:            Tue 03 Feb 2026 18:20:10 +0000
asID:                     52347
IP address blocks:        190.111.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:70:53:92:9e:33:49:d6:71:8f:41:61:8e:ea:e1:96:30:f2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Feb  4 18:15:10 2025 GMT
            Not After : Feb  3 18:20:10 2026 GMT
        Subject: CN=C4F980AB358CD2A615E66BBF43D4EAE38837CC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:6c:3f:a7:65:12:fb:7a:9d:45:9e:dd:f5:
                    c4:b4:4a:1e:8e:7b:a1:13:df:6d:cf:7d:4b:4a:2a:
                    a5:56:71:d6:69:11:da:70:92:6a:3c:d7:77:20:df:
                    af:3b:32:7e:18:c7:52:3c:ec:27:17:d5:c7:e1:43:
                    82:34:4b:c9:4b:d2:82:e1:f4:dc:4e:5c:a3:0b:99:
                    52:4e:2d:e0:96:c8:46:00:42:2d:74:fd:d6:58:ab:
                    54:83:4a:d8:7f:2c:d0:44:55:b4:37:e5:f4:dd:91:
                    fc:24:80:4d:73:a1:b8:d3:67:15:e3:96:e7:e3:e5:
                    2a:91:ca:19:34:f7:7e:88:1b:85:09:6e:31:1e:58:
                    69:71:c3:ca:03:e1:70:b5:6a:a4:c2:ad:c6:a2:d0:
                    89:35:f2:52:b7:02:38:e3:75:d8:9b:f1:80:1e:20:
                    77:f8:fc:2d:13:49:87:91:36:44:e7:96:0a:18:f5:
                    55:f8:8f:ca:9c:a1:d8:87:15:f0:92:3d:0a:9c:9e:
                    f5:c9:5f:ec:34:64:1e:1a:5c:5f:5d:01:7f:b4:8b:
                    73:54:59:24:c0:10:8f:9c:30:ca:3c:0b:dc:3c:48:
                    ad:c7:16:43:e0:ab:ca:54:e1:75:d9:15:d0:0d:7a:
                    a7:ce:98:64:92:de:35:b6:98:7e:ef:5f:4b:40:d3:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F9:80:AB:35:8C:D2:A6:15:E6:6B:BF:43:D4:EA:E3:88:37:CC:86
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e33322e302f32312d3231203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:92:96:19:be:08:84:69:37:bd:c1:14:af:9c:92:ae:1a:96:
         77:27:78:19:ea:81:6c:aa:25:9b:1b:df:74:e5:ea:5a:26:e8:
         b8:f9:a5:49:1a:d4:b9:82:2c:71:52:9d:6f:e4:ce:83:70:bd:
         b7:94:df:0c:00:7c:6b:4f:89:24:82:7d:4d:3c:e4:1f:ec:0a:
         51:ea:b6:6b:85:b7:43:74:0b:68:0a:b5:fb:d1:d7:82:75:48:
         b5:3f:4f:c8:0c:26:7d:7e:60:60:68:16:23:c8:49:d0:74:28:
         d7:a9:3b:79:8b:86:86:d2:04:0a:23:aa:a3:d2:78:ff:97:8c:
         22:0a:fc:d2:46:04:0f:ca:9c:fa:ac:65:0e:31:2d:9c:98:cb:
         89:5f:98:37:2c:08:1a:31:a8:13:80:46:59:21:96:49:bc:0f:
         52:53:4d:b8:54:83:fa:d2:38:3c:fc:92:d6:8a:ad:ab:c0:a5:
         4e:0c:c8:cc:33:76:a1:f9:ad:3b:cc:8c:58:bb:c3:3f:88:16:
         67:62:d6:2d:ed:d0:e4:90:83:bb:fa:77:aa:9f:3e:9e:fc:b0:
         6b:44:2e:53:42:db:00:4d:17:7a:94:bd:04:3c:21:ec:15:20:
         50:27:22:fd:52:30:49:20:e5:a2:9c:e4:21:1d:33:61:82:b4:
         72:50:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:45 2025 by rpki-client