Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/3139302e3130372e302e302f32302d3230203d3e203237373235.roa
File:                     3139302e3130372e302e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          P0sbXsVPXbeauxRwkgldyQHMLVk5NSiCpkEuuhF6Fac=
Subject key identifier:   E0:12:83:89:C2:A8:8B:C8:90:B3:19:C8:E6:9C:EC:94:E6:7D:CD:3E
Certificate issuer:       /CN=608403E4E091D1384C3276F193B3EB9DAFFAFFE2
Certificate serial:       76EB9D90A2BC39489D59839EAB5197EE0FEDC4B8
Authority key identifier: 60:84:03:E4:E0:91:D1:38:4C:32:76:F1:93:B3:EB:9D:AF:FA:FF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/3139302e3130372e302e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:16:55 +0000
ROA not before:           Tue 04 Feb 2025 18:11:55 +0000
ROA not after:            Tue 03 Feb 2026 18:16:55 +0000
asID:                     27725
IP address blocks:        190.107.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:eb:9d:90:a2:bc:39:48:9d:59:83:9e:ab:51:97:ee:0f:ed:c4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608403E4E091D1384C3276F193B3EB9DAFFAFFE2
        Validity
            Not Before: Feb  4 18:11:55 2025 GMT
            Not After : Feb  3 18:16:55 2026 GMT
        Subject: CN=E0128389C2A88BC890B319C8E69CEC94E67DCD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:98:6b:f5:ec:5d:88:be:60:7d:1a:8c:71:
                    6f:4c:70:86:2b:b7:3f:04:ac:d4:12:c8:49:83:65:
                    23:1d:f5:ac:ff:b3:0b:96:cc:c7:b9:cb:c2:cd:6c:
                    21:89:cd:c2:f6:f6:44:0b:a2:20:6e:66:45:83:45:
                    bb:d2:6f:52:58:90:0a:3a:7f:ea:05:9f:98:b7:d4:
                    7d:c5:23:09:7b:af:73:55:e5:72:31:5d:bc:51:89:
                    b4:2f:83:ea:b4:5a:a2:6d:30:ca:a4:42:34:c0:79:
                    76:2c:ea:ac:10:9b:f0:6f:83:22:13:4a:ac:fd:d9:
                    fe:af:ee:b7:c3:1f:9b:70:1e:1e:29:46:ed:14:80:
                    ba:79:7e:38:d9:19:70:5b:12:6a:06:7e:23:2a:1b:
                    69:a0:89:5a:a0:41:a0:1c:0b:f8:b8:13:08:16:cf:
                    b7:68:d3:b4:f6:1b:57:2a:76:f9:c2:8b:dd:e8:bd:
                    06:19:ea:fb:2c:df:4f:58:34:65:58:32:e6:8a:c4:
                    b8:73:8a:5f:6b:4b:2c:4a:9f:eb:a9:37:57:8f:c0:
                    df:6e:2c:7b:0a:b7:eb:47:c1:19:8e:17:63:ae:77:
                    cd:6b:ab:fb:2a:85:db:1c:d4:88:13:3b:fb:ab:fc:
                    c6:26:a2:09:f0:da:50:1a:7e:af:95:bf:83:06:7f:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:83:89:C2:A8:8B:C8:90:B3:19:C8:E6:9C:EC:94:E6:7D:CD:3E
            X509v3 Authority Key Identifier:
                keyid:60:84:03:E4:E0:91:D1:38:4C:32:76:F1:93:B3:EB:9D:AF:FA:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/3139302e3130372e302e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:a8:ed:03:1c:70:22:7e:9b:56:18:6e:d6:df:5c:c9:0d:
         0d:f8:76:1c:21:fa:ff:29:d9:c8:d2:23:66:24:8b:7b:43:87:
         08:32:62:1f:29:b6:aa:f3:8e:bb:7c:52:65:5e:aa:46:f6:77:
         8c:c5:dd:6b:72:25:9a:b7:f8:ed:fb:23:d8:0d:22:00:16:35:
         5c:fb:15:5d:ea:a9:4d:af:83:bb:30:44:bc:1b:f7:23:b2:c8:
         9a:6e:4d:df:a6:82:95:74:93:11:8e:21:9a:18:6c:1e:e2:7d:
         30:f9:25:96:3b:0c:d4:77:af:19:bc:72:3c:f3:a2:dd:32:7d:
         20:cd:45:01:4b:c5:f5:d9:49:b0:0e:ed:bc:cd:47:fc:00:89:
         fb:23:89:8d:e6:f5:a2:71:1e:21:d7:20:22:5f:2c:93:c2:cb:
         dc:03:f7:9d:6d:4c:ea:bb:19:51:76:08:54:c8:21:09:16:05:
         78:d3:a6:73:fc:58:c1:c4:cc:f0:5c:d3:1d:e1:a6:dc:fb:00:
         dd:50:00:0a:de:5f:4e:ee:be:65:62:7e:32:05:a8:59:46:2c:
         5b:c3:04:0e:20:dd:ec:fb:be:6b:f5:e1:9a:f0:b5:1d:ef:ed:
         94:4c:f0:7f:d1:6c:e0:aa:d6:fc:a0:1c:26:fc:40:2a:7c:07:
         e2:f5:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:34 2025 by rpki-client