Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa
File:                     3139302e39342e3139322e302f31382d3234203d3e2038303533.roa (raw, json)
Hash identifier:          IPMD8kuynWrsEtizKrAveXdlskajrhnBSRrWB8eHthI=
Subject key identifier:   D3:81:78:3E:20:BB:FD:37:CA:47:E7:A6:C3:3E:22:17:99:0F:08:50
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       2AB66D5E2678ABF3734E835B4AEADC9A2FB39AA4
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa
Signing time:             Tue 04 Feb 2025 18:46:26 +0000
ROA not before:           Tue 04 Feb 2025 18:41:26 +0000
ROA not after:            Tue 03 Feb 2026 18:46:26 +0000
asID:                     8053
IP address blocks:        190.94.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b6:6d:5e:26:78:ab:f3:73:4e:83:5b:4a:ea:dc:9a:2f:b3:9a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Feb  4 18:41:26 2025 GMT
            Not After : Feb  3 18:46:26 2026 GMT
        Subject: CN=D381783E20BBFD37CA47E7A6C33E2217990F0850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:5a:13:32:01:ed:80:c9:f3:14:b8:fb:ce:
                    eb:b8:24:aa:91:15:7a:e1:62:3e:26:69:7d:05:4b:
                    42:5d:e6:7e:5b:fc:af:52:cc:e2:73:31:27:7b:e9:
                    70:3a:a4:47:59:4b:c1:f8:89:1f:c4:e1:c5:94:9b:
                    99:db:9c:4d:f0:34:e5:26:8c:cf:01:92:31:74:a3:
                    c9:14:e7:6b:ab:3e:db:2c:42:87:21:b1:7f:f2:89:
                    6b:9f:7c:ec:2e:a8:c7:6f:1f:e2:ae:58:67:30:b0:
                    c3:48:c7:99:3b:25:0e:c8:07:e3:9b:4e:5f:3a:0e:
                    4f:93:17:48:a9:f8:c2:64:5f:df:4a:62:c0:32:55:
                    21:13:1f:99:0b:38:c8:16:ce:13:79:c9:35:37:74:
                    fa:ce:0e:ca:5a:08:9e:46:c9:39:ab:80:7c:3c:77:
                    ff:c6:d9:65:e6:8d:71:73:71:f4:38:d1:18:07:10:
                    ff:ba:ff:4d:98:11:e5:57:66:2d:15:97:90:c8:a0:
                    f0:d6:a0:04:12:a7:aa:52:da:7c:7f:52:57:54:f7:
                    a5:32:79:63:d4:3f:9e:28:8c:7b:8c:0d:8f:9c:43:
                    30:a0:d6:50:50:c5:c5:3b:c8:ea:9e:57:5a:f0:9f:
                    58:bf:b7:03:3d:ce:78:5d:db:96:e0:8a:04:83:69:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:81:78:3E:20:BB:FD:37:CA:47:E7:A6:C3:3E:22:17:99:0F:08:50
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:66:5f:72:69:e5:b0:74:6d:7e:22:73:da:d1:20:11:3e:
         de:98:6d:fd:b5:18:ba:f0:e5:9a:fe:79:93:c6:c5:90:11:82:
         df:d5:a6:f2:de:93:94:a2:06:60:d3:3a:fc:d3:91:d6:29:00:
         6e:df:15:59:35:fb:03:60:10:a4:dc:8a:3d:c1:85:e3:6d:b7:
         da:2d:39:f7:b2:7a:e7:1c:06:ec:0b:b9:1a:1b:76:ff:54:64:
         77:96:87:9f:17:b3:3c:cc:e7:5a:82:ea:26:0e:83:65:bf:76:
         ad:d2:db:6f:5f:91:06:4b:ba:18:4c:ad:34:d5:df:00:a9:09:
         7f:15:1f:46:a6:14:c4:cb:79:19:d4:57:f1:60:dc:19:f3:27:
         0c:10:ca:73:e4:34:6a:cb:ff:18:d6:40:c7:7d:c5:70:92:26:
         ba:68:6c:24:8b:94:46:df:56:18:a5:0b:a3:48:80:8f:9f:0c:
         ca:02:92:a6:00:72:40:52:0a:55:be:8a:fc:e7:b5:ad:2a:b2:
         77:81:ff:4c:ac:a1:ec:71:37:52:e0:bf:1d:85:11:8a:6d:84:
         09:50:bd:65:9d:eb:56:ff:21:f7:ac:fa:82:32:e2:b3:db:3c:
         d5:7d:e5:d8:c2:40:e1:f5:1e:09:81:d3:37:95:61:cf:01:3c:
         88:b6:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:10 2025 by rpki-client