Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa
File:                     3139302e392e35382e302f32332d3234203d3e203238303936.roa (raw, json)
Hash identifier:          F//qUYXWucbFFaDXNg3xcrQXgPQPk5OjLcvMMtC9PLs=
Subject key identifier:   C2:C5:09:E9:5D:83:4F:58:D8:AB:C5:9B:05:FF:9E:5A:A8:27:32:D5
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       45FDE83BA11C6D3C4889B05FE192E78F3992F336
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa
Signing time:             Tue 04 Feb 2025 18:34:23 +0000
ROA not before:           Tue 04 Feb 2025 18:29:23 +0000
ROA not after:            Tue 03 Feb 2026 18:34:23 +0000
asID:                     28096
IP address blocks:        190.9.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fd:e8:3b:a1:1c:6d:3c:48:89:b0:5f:e1:92:e7:8f:39:92:f3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Feb  4 18:29:23 2025 GMT
            Not After : Feb  3 18:34:23 2026 GMT
        Subject: CN=C2C509E95D834F58D8ABC59B05FF9E5AA82732D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:b7:31:3e:e0:a1:72:9b:87:6c:d7:69:86:
                    e7:64:da:32:c5:ed:e5:c9:eb:4f:05:70:8d:e1:07:
                    b2:5f:99:11:ec:0a:30:e2:ba:ef:23:ce:87:74:0e:
                    a1:e6:6a:1b:03:48:0b:64:43:e5:5b:6c:3d:cd:c5:
                    4b:a1:ef:1f:db:7b:9a:75:1b:8f:e4:22:58:9a:4d:
                    f1:97:8b:4a:c0:12:0f:ad:a6:31:3c:1c:fc:6e:69:
                    b9:ee:02:8e:11:bc:a1:f5:a6:13:7f:3f:36:92:3b:
                    bc:5b:fb:c0:1d:25:a5:77:37:ef:7a:9c:0a:c1:e5:
                    2b:ae:c1:83:f9:5b:f4:4b:52:a7:e4:41:8a:9e:e6:
                    2b:b3:ff:82:fc:a3:15:50:47:10:56:94:16:a8:48:
                    aa:0c:b0:4e:a2:44:c4:5c:0a:13:06:92:97:1e:dd:
                    8b:f7:ee:6f:7e:cd:87:8b:0b:9e:28:74:02:48:8b:
                    08:88:d2:8a:03:2b:ff:bc:8e:fc:d1:6e:7e:ef:2d:
                    07:11:98:74:40:bc:db:4c:f1:04:38:ae:43:71:13:
                    68:33:42:45:06:e6:b4:39:14:ce:f5:41:81:2e:ab:
                    3c:3e:88:a0:d0:bc:32:dd:a3:6b:ee:99:85:2e:5e:
                    27:d9:4f:05:87:b6:92:5d:c8:b2:47:0e:58:1b:ee:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:09:E9:5D:83:4F:58:D8:AB:C5:9B:05:FF:9E:5A:A8:27:32:D5
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:47:b9:01:6a:cc:f0:bd:c6:1b:46:fc:0c:30:c3:23:50:
         7e:d8:ed:db:32:da:fc:8d:e2:6b:6b:bd:fc:4f:1d:dc:d8:5e:
         90:23:dd:6a:e4:13:92:c5:5e:9c:aa:14:86:f0:c6:3f:42:5c:
         26:88:a3:5b:39:b0:6e:59:3f:81:19:2b:80:34:f0:8e:a4:dc:
         4f:ee:f4:08:b5:a2:23:fa:e0:50:a4:dd:9f:3f:54:23:51:bf:
         74:f4:0b:ab:44:2a:dc:d9:77:b3:02:83:16:bd:1c:02:fc:00:
         b3:a1:75:1c:2d:a5:ea:02:67:ae:42:29:4d:24:65:29:f7:8f:
         81:66:d8:13:11:a3:48:7a:28:ef:4d:3a:0c:db:69:7d:63:9f:
         ec:ae:24:3f:ff:63:32:f2:f9:d5:9a:34:ad:6b:eb:2b:e8:ee:
         3a:4d:4d:6a:7a:55:70:ee:e1:b2:a7:35:f3:35:f8:e3:45:24:
         6a:3d:4d:2e:ce:bd:7e:b3:60:90:33:25:a3:29:25:7b:f5:ba:
         94:34:0b:e0:fa:ea:c1:56:06:f8:41:51:c0:8b:02:a9:6a:3c:
         93:6a:4e:55:c2:d2:a6:62:86:34:68:22:23:42:16:64:6d:15:
         84:97:ee:32:b5:b6:4b:46:45:61:f8:10:e6:50:48:7c:23:cf:
         1f:da:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:10 2025 by rpki-client