Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa
File:                     3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa (raw, json)
Hash identifier:          qTXa3twa3j5K6VRmm2/M40qOHDlB76wDXO6SLBkfZTI=
Subject key identifier:   C9:0B:D0:20:86:96:04:B1:E2:02:F4:39:0D:5D:D8:05:EF:24:69:30
Certificate issuer:       /CN=53953B71C225D2143C92C173E8F140C5C5F22612
Certificate serial:       324D2543ADFA99A302E465E433970AF1CBC8023D
Authority key identifier: 53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa
Signing time:             Tue 04 Feb 2025 18:46:17 +0000
ROA not before:           Tue 04 Feb 2025 18:41:17 +0000
ROA not after:            Tue 03 Feb 2026 18:46:17 +0000
asID:                     52337
IP address blocks:        190.105.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl
                          rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:25:43:ad:fa:99:a3:02:e4:65:e4:33:97:0a:f1:cb:c8:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53953B71C225D2143C92C173E8F140C5C5F22612
        Validity
            Not Before: Feb  4 18:41:17 2025 GMT
            Not After : Feb  3 18:46:17 2026 GMT
        Subject: CN=C90BD020869604B1E202F4390D5DD805EF246930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:37:c1:aa:70:ba:c1:74:88:f3:b7:00:40:
                    05:b4:76:b0:fa:8a:8b:38:b9:33:8d:ef:4c:00:f2:
                    2d:5d:ab:b4:db:58:1d:8f:81:eb:65:6e:c3:0e:80:
                    44:bf:3e:5f:0e:44:35:5b:d9:30:d6:58:77:db:53:
                    49:99:bf:95:70:1c:7d:1e:5c:d7:15:d2:e6:7e:17:
                    f5:40:8e:d5:a2:8e:40:9b:4f:97:46:72:48:3f:86:
                    50:46:44:6e:df:b1:0d:f7:1a:94:f8:41:78:51:5f:
                    2f:74:81:60:40:39:90:48:3b:95:e5:11:4b:1b:05:
                    de:8d:26:96:b6:b1:35:46:af:4d:b6:ed:b0:01:eb:
                    be:7b:a0:ec:0c:cb:2b:79:93:c9:f4:2c:fe:3e:08:
                    f7:ef:b4:0c:b0:0c:ed:54:d2:be:6f:8a:26:3f:8a:
                    d1:45:88:50:dc:b4:bc:02:75:c2:cb:60:5a:7a:27:
                    76:a7:f0:0a:9c:2b:5a:62:85:7f:b6:57:f2:c0:58:
                    38:44:c4:cf:f1:95:e1:d8:1a:4c:82:5c:6a:61:98:
                    5c:bd:ef:41:6e:25:c4:e0:b5:c5:ef:77:4a:ed:ee:
                    50:be:63:52:0e:c8:0d:a6:90:6b:fb:2c:a3:b6:e7:
                    5a:de:44:f1:9c:28:01:96:35:26:f3:b8:b7:e6:22:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:D0:20:86:96:04:B1:E2:02:F4:39:0D:5D:D8:05:EF:24:69:30
            X509v3 Authority Key Identifier:
                keyid:53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:89:89:c2:01:2a:47:22:b2:b4:4a:07:04:b3:b4:39:54:49:
         80:b8:9d:0d:5c:6d:35:23:27:a4:15:5d:82:7b:80:bf:d4:18:
         20:12:50:7f:f5:e6:62:3d:55:c5:2a:39:87:5f:9d:9a:11:09:
         43:00:a8:5f:38:1e:68:98:60:3b:3b:14:b3:45:b8:ab:26:e6:
         62:6a:da:c5:ba:4a:5b:e3:e8:90:2b:71:7c:de:fc:ca:ec:1d:
         c6:f8:49:b7:a9:96:d5:3d:78:ba:7e:6a:f0:f6:ae:16:99:4c:
         c9:81:eb:d0:2c:d9:2a:9b:92:78:45:f8:bd:c9:2c:32:ef:a0:
         91:be:90:96:2b:40:66:76:10:6f:04:f4:39:b3:d7:d4:42:6b:
         24:ea:86:73:ea:63:55:6a:1c:71:57:e9:99:d6:0c:0a:c3:e9:
         51:16:28:d4:8c:52:d0:b5:65:95:fc:95:d9:b5:79:80:fe:66:
         b8:82:60:6c:c9:d6:28:05:24:ba:e1:24:47:5d:5b:26:aa:fd:
         44:d9:25:7e:e5:2f:9e:fe:0b:29:64:52:94:9a:dd:85:7c:d6:
         6a:04:49:f5:3e:20:db:8e:41:cf:2f:dc:91:ff:78:06:65:41:
         cc:3b:4a:93:ba:a9:86:d1:1c:8d:02:61:07:39:60:0c:ab:b6:
         6d:86:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:00 2025 by rpki-client