Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34332e302f32342d3234203d3e203237373432.roa
File:                     3139302e35332e34332e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          D5s1g3W+VAr6sZxF6HEtV8sKY8Xg3Ln8yPgbqaWALVU=
Subject key identifier:   E9:4F:BA:77:70:CA:36:32:75:48:0A:DD:E1:B6:29:2B:86:9E:F0:3F
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       727CB33292354FA0C120180DF5B573227C008F7B
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34332e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 20:02:14 +0000
ROA not before:           Tue 04 Feb 2025 19:57:14 +0000
ROA not after:            Tue 03 Feb 2026 20:02:14 +0000
asID:                     27742
IP address blocks:        190.53.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7c:b3:32:92:35:4f:a0:c1:20:18:0d:f5:b5:73:22:7c:00:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:14 2025 GMT
            Not After : Feb  3 20:02:14 2026 GMT
        Subject: CN=E94FBA7770CA363275480ADDE1B6292B869EF03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:a6:7f:61:be:26:91:a3:48:10:91:ad:d6:
                    ff:30:08:48:42:d7:8d:64:8c:8d:db:46:3b:8c:9c:
                    2c:3d:5c:64:8b:8b:c4:74:ea:06:86:19:79:66:af:
                    72:e4:60:d6:64:a9:02:9a:69:f7:9a:c5:fd:9a:fe:
                    b3:de:97:0c:00:66:79:9f:d5:a1:21:ee:2d:7a:2e:
                    91:dd:19:a1:bd:25:9d:87:f4:0b:0f:ff:a7:f8:b3:
                    1f:25:78:0f:90:10:58:7c:59:f1:ab:1f:d9:3a:cc:
                    9d:58:40:23:34:28:cd:19:d1:66:59:3e:02:ac:b3:
                    7e:b2:79:ea:ea:70:c1:af:5c:33:da:2a:65:b0:b7:
                    8e:6a:e8:14:6f:78:0e:da:34:4c:a9:26:a7:44:3b:
                    e7:ed:d8:50:ba:02:64:2e:c9:08:09:9d:24:7d:62:
                    91:ed:11:c4:cc:07:22:c9:90:99:2e:8b:1d:d0:8d:
                    2f:fa:aa:1b:30:79:1d:44:32:ef:69:dd:1a:dc:ca:
                    49:b1:7b:ea:9a:5c:31:a7:47:a1:7e:f4:d1:55:20:
                    31:ac:dd:b5:23:b6:d7:eb:6b:97:c3:6b:c3:14:13:
                    41:5a:5b:1b:62:f5:fd:a5:cd:85:63:68:b1:8d:80:
                    67:65:00:18:85:ad:26:b4:b0:d5:bc:81:c5:35:4b:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:BA:77:70:CA:36:32:75:48:0A:DD:E1:B6:29:2B:86:9E:F0:3F
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34332e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:0d:43:b6:1e:fa:43:e6:84:a8:42:91:e9:e7:3b:0b:6f:
         56:7d:20:7a:6c:3c:3d:ef:4e:dc:34:21:f8:85:56:8c:f8:b7:
         7b:c0:b5:31:a3:1b:84:16:c3:a4:24:2d:91:2e:0a:38:27:95:
         de:8f:a2:87:41:de:ce:bf:c7:c6:4f:62:5a:f1:55:48:75:ab:
         e1:23:be:38:68:12:7a:5e:c1:fc:89:7a:a5:b4:7a:ba:05:76:
         fe:52:b6:b9:05:02:e5:c7:40:2e:c1:be:8b:ac:bb:9e:2b:a8:
         c1:c8:e5:08:a5:c4:ad:a4:96:ca:c3:ff:2a:04:2f:4b:20:2c:
         f0:f1:87:09:02:f6:3c:d3:5a:93:75:e5:da:63:e1:b5:41:9f:
         78:21:77:ef:49:56:33:ce:da:69:2e:04:cf:3d:41:ad:bf:5a:
         6c:1a:56:53:7c:46:81:09:48:1b:de:21:8d:8a:9a:1a:0b:06:
         2f:e0:34:e2:30:46:ad:5d:31:3f:c1:8b:d8:a0:2d:27:42:51:
         9a:13:fa:3a:82:a2:02:81:d0:c4:db:25:b2:05:ec:e2:b5:ec:
         ac:5d:ac:dc:34:c1:8e:d1:8a:76:bc:89:2d:ba:8f:c8:c9:8c:
         ba:7d:b0:5b:c4:a9:c0:39:53:2c:eb:39:65:be:de:34:52:93:
         bb:8d:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:46 2025 by rpki-client