Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          2W6IEmFusQcN/rHoCssfMEUp72mqNilwiRRZMg+WYtY=
Subject key identifier:   97:5C:91:61:91:52:CD:CB:E5:5A:0C:1D:E9:A0:24:BA:D3:2B:55:37
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       74F37636408CA16AFED20BD4F97A1CCF8E63CD20
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa
Signing time:             Tue 11 Mar 2025 08:30:00 +0000
ROA not before:           Tue 11 Mar 2025 08:25:00 +0000
ROA not after:            Tue 10 Mar 2026 08:30:00 +0000
asID:                     52278
IP address blocks:        190.105.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f3:76:36:40:8c:a1:6a:fe:d2:0b:d4:f9:7a:1c:cf:8e:63:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Mar 11 08:25:00 2025 GMT
            Not After : Mar 10 08:30:00 2026 GMT
        Subject: CN=975C91619152CDCBE55A0C1DE9A024BAD32B5537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:db:7e:09:91:8b:a6:e2:c3:0f:ad:8c:88:
                    64:fe:a5:a9:5d:cd:81:fd:01:e7:ea:d6:b8:95:8e:
                    08:96:53:1a:10:d1:7c:bd:18:34:e5:79:7e:f6:68:
                    08:ac:88:5e:83:90:71:8f:89:0b:b8:6c:df:b6:5d:
                    56:f5:2a:84:cc:54:32:44:00:dd:64:dd:77:ae:b4:
                    0a:90:6e:1f:39:e7:00:c5:fb:d6:2b:c3:85:84:26:
                    02:37:79:7a:a4:88:9a:2e:59:04:5e:8a:6d:08:8a:
                    10:13:d5:13:75:6f:0d:8a:b6:7a:3a:0e:44:9a:0b:
                    b2:af:18:19:c3:c3:d9:0b:97:14:75:b0:0b:01:49:
                    61:74:51:cd:5c:ab:95:90:65:cf:5d:41:70:b9:dd:
                    d0:b2:aa:3d:2e:42:27:ea:bc:6b:62:78:1d:1b:9b:
                    f4:7c:c8:00:0a:1f:17:28:26:c7:91:3e:18:d7:73:
                    a5:4e:58:ce:e1:19:18:b2:5e:0f:8c:a2:18:71:9f:
                    ed:d2:8c:ee:da:64:37:76:f7:e8:8a:c8:96:8e:61:
                    b4:1c:9a:27:f8:f2:fe:c6:45:16:55:ed:45:62:46:
                    6d:49:28:62:48:67:05:0f:bb:08:c9:aa:d4:86:80:
                    43:b8:a2:2c:4c:bd:e6:c9:cd:43:ea:9c:83:d4:55:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5C:91:61:91:52:CD:CB:E5:5A:0C:1D:E9:A0:24:BA:D3:2B:55:37
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a5:0d:01:d9:fd:5c:d1:59:79:df:a4:2b:dc:e7:04:d3:c4:
         8b:4f:eb:6d:88:20:77:93:b7:27:2a:2b:fd:fc:e5:2c:58:bf:
         fc:67:c3:6d:da:64:bf:48:96:11:41:27:ea:4c:d9:d0:fa:d9:
         f6:31:89:37:92:02:79:f4:aa:48:04:29:10:00:ee:90:81:e9:
         3d:da:6f:73:07:21:b7:0c:1d:57:1f:7f:37:fb:82:7f:65:4c:
         0d:70:66:75:44:a9:6a:13:b4:47:a9:bc:f1:b2:f6:58:6e:7f:
         b9:72:53:f4:59:fb:5b:3b:94:72:79:de:aa:0e:0d:ab:52:76:
         9b:8c:b5:a7:f1:71:40:e6:ed:76:c4:90:b8:8b:75:fd:d9:21:
         58:9d:89:1a:e5:c3:34:2d:f8:b5:37:70:d9:54:8f:55:5a:d9:
         dc:b0:5b:6a:d8:03:95:94:67:3b:15:fa:0b:26:e9:b8:df:54:
         1d:27:fe:26:05:05:93:fd:81:ea:0a:53:88:ff:3f:01:d8:e6:
         1a:50:10:b0:a9:fa:c3:40:b4:84:a0:f9:31:04:30:af:e5:a7:
         99:7c:ef:3a:d3:2b:32:a6:9b:d6:0a:79:17:66:6b:d9:40:8b:
         5f:9c:38:d3:67:8f:fd:d7:18:8f:41:67:98:07:3c:f9:fc:d0:
         db:4d:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:42 2025 by rpki-client