Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa
File:                     3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (raw, json)
Hash identifier:          p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=
Subject key identifier:   86:ED:F6:37:4E:FA:2C:74:3B:50:0D:37:12:05:8B:91:10:3A:A6:26
Certificate issuer:       /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial:       27136F41E754D4CE272AF6C4B072B1BA5EB8A6BB
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa
Signing time:             Tue 04 Feb 2025 19:59:46 +0000
ROA not before:           Tue 04 Feb 2025 19:54:46 +0000
ROA not after:            Tue 03 Feb 2026 19:59:46 +0000
asID:                     264856
IP address blocks:        190.14.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:13:6f:41:e7:54:d4:ce:27:2a:f6:c4:b0:72:b1:ba:5e:b8:a6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
        Validity
            Not Before: Feb  4 19:54:46 2025 GMT
            Not After : Feb  3 19:59:46 2026 GMT
        Subject: CN=86EDF6374EFA2C743B500D3712058B91103AA626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6c:59:14:50:73:4c:87:ff:78:b0:ec:d1:59:
                    85:06:83:b8:87:25:c4:2d:af:f1:6f:75:f0:9c:e6:
                    35:d7:91:ff:9c:34:ec:48:66:89:14:41:fb:ed:e7:
                    5a:68:89:48:f8:6a:f2:cc:06:e7:f3:d6:fb:07:12:
                    4b:61:75:c1:55:27:8c:77:d0:b0:5e:a8:c8:1a:db:
                    0d:0e:05:b4:37:28:97:86:e8:84:68:b2:6a:86:59:
                    0a:6a:b9:c4:68:38:db:f0:4e:22:14:63:40:0e:b3:
                    0a:5a:d4:ac:4d:f3:98:47:a9:22:0c:fb:76:cf:e3:
                    a1:2f:a9:63:a9:c5:a2:b2:5f:37:df:db:30:ac:1d:
                    5c:ad:a8:d8:5d:0c:4c:63:98:99:21:80:0e:21:19:
                    14:b2:70:ff:80:65:20:99:eb:79:76:f0:7f:31:0a:
                    bc:0a:e3:72:32:79:ac:de:09:fd:8b:19:b7:c4:1c:
                    b6:87:cd:71:7f:f2:5e:98:07:cb:01:2a:36:22:3b:
                    5c:64:eb:2b:de:8e:b7:d5:b6:e6:73:d2:86:17:3f:
                    28:9e:f1:fa:07:05:52:d6:29:cb:f4:55:db:7a:86:
                    99:77:52:f0:ad:23:f0:48:df:84:6e:4a:f7:81:65:
                    d8:42:6a:f9:13:a0:5c:d5:55:a9:dd:4d:ef:65:47:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:F6:37:4E:FA:2C:74:3B:50:0D:37:12:05:8B:91:10:3A:A6:26
            X509v3 Authority Key Identifier:
                keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:ae:7c:3e:63:10:c8:a6:86:f9:6e:ed:47:99:8e:f3:47:
         bb:f4:5f:f6:77:f7:01:e6:5c:62:12:6b:5a:38:de:ab:5b:2b:
         bf:28:57:40:92:55:f9:c9:76:c2:68:05:08:b0:46:5b:63:c0:
         91:71:39:22:bc:82:04:a3:6a:96:32:83:28:2d:f2:79:d1:4b:
         e0:20:9c:c3:ff:5f:08:3f:da:69:e9:c2:b7:4a:7d:72:46:db:
         4d:d4:97:dd:37:0d:3b:df:f5:6e:ea:38:76:90:a7:05:90:d6:
         b7:9f:e6:c3:66:39:82:77:6b:92:e3:6b:b7:dd:07:a9:e3:00:
         25:6d:f4:37:0d:ff:89:bd:f9:ab:c8:89:1d:79:9b:41:6e:e2:
         aa:5b:49:e0:ec:b6:4e:65:3d:19:26:8c:64:37:f1:81:e6:c9:
         f6:80:25:fc:6b:94:46:dc:ef:61:89:83:79:ae:ef:50:28:7b:
         7a:c0:c6:4e:de:35:d2:f7:f8:4e:ec:e9:76:9f:58:cf:b6:e8:
         36:95:64:c8:5f:99:31:a1:29:2d:18:57:82:fa:df:41:5a:e0:
         35:72:d5:2a:28:b2:41:76:02:a1:a9:7b:56:db:35:1d:d9:4e:
         f7:f1:f2:cd:f1:e0:92:fc:13:49:1a:eb:27:9b:75:f7:a1:be:
         d3:57:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:08 2025 by rpki-client