Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa
File:                     3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa (raw, json)
Hash identifier:          WR+TzWe25SdN0g66SCtLKH3AQxkWJN/bRmJf6cZWa9o=
Subject key identifier:   22:55:3E:24:BE:E5:0C:7B:36:6F:5E:9C:71:20:CC:15:29:7B:69:5F
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       7F9193CFB7AD853C56D541925DCEDE1C92BBAE2C
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa
Signing time:             Tue 04 Feb 2025 18:36:08 +0000
ROA not before:           Tue 04 Feb 2025 18:31:08 +0000
ROA not after:            Tue 03 Feb 2026 18:36:08 +0000
asID:                     52278
IP address blocks:        190.105.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:91:93:cf:b7:ad:85:3c:56:d5:41:92:5d:ce:de:1c:92:bb:ae:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb  4 18:31:08 2025 GMT
            Not After : Feb  3 18:36:08 2026 GMT
        Subject: CN=22553E24BEE50C7B366F5E9C7120CC15297B695F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ed:c5:43:e3:c9:18:ce:af:11:db:f1:e0:2f:
                    f1:7b:a0:9b:ee:ca:fb:de:d8:b2:b7:d9:c0:40:7f:
                    9a:69:a6:80:c8:9c:f0:99:3c:ea:c3:15:b7:76:a3:
                    9c:8d:c6:96:44:83:45:93:03:32:01:7e:04:d7:19:
                    86:85:f3:f0:6a:97:17:56:4b:77:a7:c5:9c:e0:52:
                    dc:ac:27:11:dd:fc:98:c2:f2:12:ad:b0:dc:8d:c2:
                    77:9c:2e:97:73:01:9d:34:34:27:cc:b8:3f:3b:52:
                    74:b0:10:5e:cc:3e:74:42:3d:e7:0f:be:fb:f9:04:
                    67:c6:70:7d:0a:73:75:ce:b2:db:16:8c:33:87:de:
                    33:1d:5e:44:62:76:ab:ed:7a:7c:a6:07:89:73:d9:
                    38:6f:34:c8:b1:61:00:c5:6a:2d:bd:db:e3:f6:e6:
                    f8:e5:69:d2:12:57:db:21:5b:a9:cc:3a:61:30:cd:
                    50:17:e8:d0:38:aa:df:2c:bf:b2:c6:65:fd:19:a2:
                    3d:36:ca:d7:4d:d3:1e:cd:d0:01:5c:09:ea:95:ef:
                    5d:ef:3f:f9:39:fa:33:e6:d4:59:5d:33:10:bd:bf:
                    8c:fc:9a:5e:9b:e0:bc:1c:34:62:b4:7f:e1:7e:96:
                    6f:10:94:bf:5a:b3:25:1a:6e:b4:0a:89:45:f4:68:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:3E:24:BE:E5:0C:7B:36:6F:5E:9C:71:20:CC:15:29:7B:69:5F
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:76:0d:39:0c:1e:6b:52:62:44:48:e8:8f:40:74:cc:e7:eb:
         b7:8b:79:2d:b7:74:c9:03:74:92:67:2b:f0:ef:e1:f0:ce:22:
         96:ca:05:67:ce:45:05:60:21:90:90:53:89:7d:43:5d:73:4f:
         c2:30:8a:d2:c7:36:e9:3b:fa:37:18:1e:34:9f:85:9e:4b:58:
         66:d1:00:0a:e8:ac:82:49:06:ad:ea:8c:b3:33:5c:c4:dd:01:
         e8:89:30:85:b0:25:86:99:98:20:12:d9:f2:70:6a:51:02:06:
         73:92:a3:b0:d5:3d:69:75:15:e4:18:13:8d:1d:23:48:43:09:
         7b:34:da:5f:2b:ea:28:c5:db:85:3d:13:05:fe:38:ba:71:12:
         de:e5:90:8b:4b:82:49:f5:c0:81:6e:53:e5:a6:f9:6b:49:d1:
         92:09:fc:73:d2:c2:c3:a1:33:b1:00:11:70:f5:aa:94:a3:f6:
         ad:b1:c9:b8:41:9c:f0:9f:15:45:04:18:7a:5a:80:ca:2d:d8:
         3d:ba:bf:ce:3b:82:64:19:8a:77:9e:f2:40:42:0a:8a:88:4c:
         59:f0:5e:da:ce:f9:d2:7a:cb:a1:8c:26:30:b9:31:51:cb:fa:
         98:6c:28:c2:bb:4d:92:eb:41:d0:8c:ad:c5:49:f0:bf:39:61:
         cc:00:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:55 2025 by rpki-client