Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e36332e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e36332e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          HcxLNUHxBZDY/rBplZT7TwYXmaHorfOXFklTMsY7N1Q=
Subject key identifier:   3B:A5:5E:86:F9:08:A4:2A:3A:F5:09:F9:C6:4B:E7:A0:0C:EE:D1:4C
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       3C2A2A1E5170370A3DFE840C38ADEAF9CC88454E
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e36332e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 04 Feb 2025 18:20:13 +0000
ROA not before:           Tue 04 Feb 2025 18:15:13 +0000
ROA not after:            Tue 03 Feb 2026 18:20:13 +0000
asID:                     52347
IP address blocks:        190.111.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2a:2a:1e:51:70:37:0a:3d:fe:84:0c:38:ad:ea:f9:cc:88:45:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Feb  4 18:15:13 2025 GMT
            Not After : Feb  3 18:20:13 2026 GMT
        Subject: CN=3BA55E86F908A42A3AF509F9C64BE7A00CEED14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:83:ed:8a:e5:d6:c2:92:55:9d:4e:8c:2c:
                    12:ac:59:c5:4b:74:eb:74:94:82:24:b1:58:6b:01:
                    03:33:9e:7b:08:e3:1b:db:12:df:c9:8a:32:4c:98:
                    74:11:d6:03:e5:bb:1e:b3:5e:c1:ed:3d:98:33:27:
                    f0:b6:df:7d:5f:ec:01:60:c0:cd:ed:1e:7c:45:38:
                    58:80:8f:15:03:53:82:21:3d:51:e2:7c:d0:05:bb:
                    18:cb:a5:9f:45:b3:99:2e:fe:8d:8f:03:55:75:cf:
                    06:a1:e5:48:52:8c:eb:08:b9:bc:c5:94:4d:c6:80:
                    d3:72:36:dd:8c:39:4a:63:31:b2:32:7a:b9:d0:54:
                    ab:24:77:36:03:12:b1:cf:3f:93:6d:6e:f5:a9:ab:
                    f7:7f:e8:c9:ac:07:4a:e0:3e:5c:aa:5b:7c:79:db:
                    a2:03:d2:49:53:46:c6:89:0c:5e:77:49:85:97:b2:
                    2f:3e:32:84:e1:bd:a9:7b:30:3a:04:a7:42:61:0e:
                    d1:c2:79:c8:f4:15:02:be:28:e2:f8:ae:fa:dc:70:
                    0f:03:4f:26:ed:6b:0b:68:75:6f:7b:20:44:39:3c:
                    24:08:59:91:b9:12:44:64:be:54:89:ac:8a:ec:d1:
                    54:05:f6:dd:8a:00:ca:c8:62:25:8f:aa:bf:e5:55:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A5:5E:86:F9:08:A4:2A:3A:F5:09:F9:C6:4B:E7:A0:0C:EE:D1:4C
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e36332e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:83:d9:5e:04:ce:da:8b:8a:15:ed:6f:e5:09:e5:a9:c8:
         a7:cb:ac:68:75:03:1c:13:30:2c:50:87:0a:e4:4c:fd:1c:d7:
         6e:a7:09:8f:b7:c2:1e:90:52:b5:a8:66:be:da:2e:2e:11:74:
         d0:70:9b:25:f8:7e:d8:58:01:10:f8:df:28:b2:46:1a:13:81:
         e4:6c:0f:06:da:2f:a3:d6:a0:d9:4c:e0:69:b4:0a:ae:de:6e:
         32:d9:21:c9:f6:00:b2:b8:5c:7a:3a:91:ac:98:c6:99:2d:97:
         5f:cb:bd:c8:97:b6:d0:02:ab:72:e6:88:40:0b:87:7e:e1:39:
         7c:0b:81:53:b2:f2:a3:01:41:e6:7a:a8:ff:01:bd:fa:e3:84:
         3c:a7:e7:e2:42:ed:45:93:12:a3:a8:fc:0e:5c:7f:f6:fe:31:
         1e:a2:8a:cf:b6:1d:f5:bf:f6:57:89:a5:86:05:8c:c2:22:d6:
         22:0d:95:19:59:94:bf:d7:11:7f:cd:c1:32:44:b1:ae:27:eb:
         fc:dd:dc:cf:c6:1e:b0:39:37:c5:78:44:fd:4f:66:b8:c9:51:
         1c:24:3b:0f:74:9b:c9:0e:ed:3a:27:0b:7b:29:8f:da:b1:13:
         c8:b4:ab:36:a5:9c:1d:e5:9e:67:8c:12:62:4b:69:ed:ef:70:
         f6:8d:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:46 2025 by rpki-client