Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa
File:                     3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa (raw, json)
Hash identifier:          qrqTxiwXzbIUxhQw9ZQWLlLeOurm3fa2JzfTPhGMFgQ=
Subject key identifier:   1B:01:7A:4D:15:2E:7A:7F:9D:BD:5B:A5:4D:AA:95:93:E5:DA:7D:2F
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       5F7B7B57A0D518DC0FECBCD140336650AC30639A
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa
Signing time:             Tue 04 Feb 2025 18:36:10 +0000
ROA not before:           Tue 04 Feb 2025 18:31:10 +0000
ROA not after:            Tue 03 Feb 2026 18:36:10 +0000
asID:                     52278
IP address blocks:        190.105.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:7b:57:a0:d5:18:dc:0f:ec:bc:d1:40:33:66:50:ac:30:63:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb  4 18:31:10 2025 GMT
            Not After : Feb  3 18:36:10 2026 GMT
        Subject: CN=1B017A4D152E7A7F9DBD5BA54DAA9593E5DA7D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:5a:6e:f2:d3:f5:dc:f8:1f:74:92:3b:d9:
                    a8:65:e0:0a:59:95:83:d4:2d:6d:4e:71:70:cd:08:
                    94:77:55:dd:0a:ae:4a:6e:ed:8c:98:cf:21:b3:98:
                    33:9e:7b:2e:89:4a:64:5f:ca:2c:2b:2e:ae:02:b5:
                    1a:2d:8b:01:3a:da:52:59:44:00:0b:30:58:f8:24:
                    48:b9:d6:4a:38:ec:dc:58:53:eb:ab:cc:23:39:fb:
                    03:7c:4e:14:02:fd:f0:63:b1:f0:4f:16:40:f2:6c:
                    22:d0:81:b3:54:67:75:f4:28:a9:49:db:42:ee:f4:
                    7f:a6:3f:85:6b:c4:86:0b:bf:68:8d:e1:e7:dc:19:
                    a8:97:e6:0a:73:a5:4b:be:91:4b:7d:d1:ed:60:10:
                    27:8a:64:df:08:f2:7e:77:3c:74:30:b6:aa:78:5e:
                    fd:93:13:75:a3:19:b1:cd:18:8f:24:2c:fc:a0:5d:
                    2f:f8:50:76:5d:53:27:f1:21:e7:0b:00:65:94:71:
                    25:5d:9f:7d:ec:bf:b1:c0:af:3d:3f:f5:59:ee:9d:
                    c5:aa:e8:3a:9a:df:f2:86:cb:b0:cf:0a:7a:a5:78:
                    ab:28:dc:9d:14:bd:36:f7:63:31:80:2a:9c:6e:f8:
                    96:0a:db:18:8a:94:2a:ea:5b:00:ba:ca:1b:b6:0e:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:7A:4D:15:2E:7A:7F:9D:BD:5B:A5:4D:AA:95:93:E5:DA:7D:2F
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:ae:1d:36:e1:22:20:55:cf:df:37:e0:3b:a9:8d:f3:c3:
         ec:65:c8:40:5b:ac:13:ea:6d:05:0e:d2:c4:1e:c8:10:02:ff:
         13:e1:0b:94:4d:b5:0d:18:50:18:72:fe:12:e0:9d:c1:3c:14:
         46:f6:14:c1:ec:30:7f:26:26:6b:f8:cf:d3:0e:3f:ea:83:1d:
         73:16:a2:f4:2e:f7:9a:07:8c:9c:80:22:d2:a1:ab:98:64:be:
         ee:d0:f8:52:43:2f:e2:55:a3:e4:71:6a:c6:81:06:91:7b:2a:
         60:3d:b8:c8:18:69:9b:32:56:3a:aa:3a:b0:de:53:32:bd:9b:
         15:30:2a:5c:bb:fb:3d:24:4f:1d:43:ac:7e:a3:21:4d:c9:d8:
         3a:41:6e:17:e7:83:63:4b:98:e6:0e:bd:10:c3:38:9a:df:ba:
         ee:eb:19:7a:bc:9a:6f:30:f0:07:2e:c9:15:c9:1a:d1:54:08:
         ec:d9:be:b8:2f:26:e9:a7:b9:17:00:37:6d:15:72:c6:38:d4:
         2b:46:82:ea:e4:54:de:8d:00:c2:16:76:00:76:9c:0c:57:3f:
         cf:67:cc:45:84:84:bb:3d:f2:c5:c7:65:5f:89:81:cb:64:be:
         f6:c9:a9:17:6d:56:33:be:2e:30:bf:3d:d5:6f:4a:c9:f1:90:
         2b:96:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:33 2025 by rpki-client