Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35372e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e35372e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          R8vRSuRnoNOaOM2Kjcn2UiNWJlp52AADnJdl8b3/qCY=
Subject key identifier:   7B:02:C6:D7:D5:CC:B8:EC:16:81:2A:84:A4:AA:EE:B4:E2:EC:5E:97
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       29BE1381EA21BEB709B5598AB2C473F2B6E85CB0
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35372e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 04 Feb 2025 18:20:11 +0000
ROA not before:           Tue 04 Feb 2025 18:15:11 +0000
ROA not after:            Tue 03 Feb 2026 18:20:11 +0000
asID:                     52347
IP address blocks:        190.111.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:13:81:ea:21:be:b7:09:b5:59:8a:b2:c4:73:f2:b6:e8:5c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Feb  4 18:15:11 2025 GMT
            Not After : Feb  3 18:20:11 2026 GMT
        Subject: CN=7B02C6D7D5CCB8EC16812A84A4AAEEB4E2EC5E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:1c:ec:e0:21:f0:c8:a4:00:78:d1:ae:1c:
                    cf:47:9b:9f:54:64:d8:30:d4:1f:c6:db:d1:63:95:
                    f5:b0:75:d5:66:d0:a6:57:e3:4f:ad:c5:da:08:86:
                    68:a3:bb:fb:49:bb:ca:ae:ee:63:64:45:0d:f1:b3:
                    be:68:87:86:8b:f3:40:e1:29:54:9b:c2:b3:73:20:
                    a8:2f:b9:03:f4:83:a7:47:d6:2e:77:0c:44:0f:ae:
                    40:65:14:e6:2d:ef:d7:93:a5:e6:08:ed:29:43:9d:
                    e9:45:de:38:f8:f8:73:ac:5c:78:93:be:12:fa:5e:
                    07:c6:74:d2:f7:70:43:a3:ae:34:03:5f:68:c3:8d:
                    67:94:8e:da:4d:a4:c3:05:84:4a:eb:bc:05:bf:e9:
                    db:dc:f5:70:0f:4f:d8:3f:12:07:61:66:ed:bb:a6:
                    bf:4c:99:9e:d2:3b:f2:78:ea:3c:e7:b0:b9:af:79:
                    ca:54:be:c8:da:8d:2a:23:95:25:c9:da:f8:13:14:
                    37:b5:91:3b:f3:6a:d6:18:a0:81:ee:b9:da:a7:33:
                    f7:c3:11:3f:53:b2:47:fb:0e:36:b1:96:27:94:7a:
                    c5:fd:cb:c4:82:1e:ae:89:3b:cb:b3:b2:b8:9a:95:
                    48:34:dd:7a:80:32:bb:86:cc:5b:de:d0:63:1b:58:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:02:C6:D7:D5:CC:B8:EC:16:81:2A:84:A4:AA:EE:B4:E2:EC:5E:97
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35372e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:87:7e:a8:61:bc:da:24:c3:86:2f:ad:e8:87:9d:e6:6e:
         a3:1a:6b:fc:ca:a7:bb:af:7c:46:91:0d:df:c4:0b:32:ee:2b:
         60:0f:c9:43:eb:e8:f1:da:e8:cd:c8:0d:01:02:4c:e8:4c:ed:
         27:16:84:bb:d9:2c:e0:0d:af:59:e5:32:83:de:b3:ab:34:2c:
         38:69:c9:fd:46:2b:f4:1e:9c:27:0a:5b:b8:93:de:b8:ca:b8:
         d4:2d:1f:76:09:6e:07:9d:15:4a:0f:da:a4:90:a0:25:b1:22:
         55:f3:6c:74:4c:dd:69:8b:b2:e6:0b:ad:9a:b6:35:9f:ff:b5:
         59:98:e4:34:b2:4a:bf:27:17:a1:4d:c1:e0:eb:2d:1b:ca:9c:
         0f:23:d9:10:f1:63:12:57:98:67:5a:ed:0a:9f:f4:2a:62:50:
         8d:34:fc:cf:37:7a:d7:a8:87:97:93:c8:ae:ae:82:ee:f9:54:
         7b:cb:97:59:43:50:21:73:f6:09:b3:7e:45:33:16:3b:c3:b2:
         6a:df:82:e6:f0:5e:9e:57:10:22:82:52:ce:a9:44:38:22:95:
         68:45:f3:8c:ed:31:1e:48:39:7d:96:c4:63:44:88:c0:22:44:
         c2:af:bd:6b:4c:26:39:5b:88:fb:e5:a4:70:29:2f:ed:00:25:
         ec:e2:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:45 2025 by rpki-client