Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa
File:                     3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier:          eprmI8Tmc5VuIXsGORUZKdPZpWkPAgg6ntX63939ELc=
Subject key identifier:   AD:9F:74:93:EE:F2:98:8F:67:3E:A4:AA:96:7A:70:C2:6A:E6:24:C2
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       5DE0FA64A82CDFA8F339C577A00EDFDE03D26E74
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa
Signing time:             Tue 04 Feb 2025 20:00:12 +0000
ROA not before:           Tue 04 Feb 2025 19:55:12 +0000
ROA not after:            Tue 03 Feb 2026 20:00:12 +0000
asID:                     60781
IP address blocks:        190.105.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e0:fa:64:a8:2c:df:a8:f3:39:c5:77:a0:0e:df:de:03:d2:6e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Feb  4 19:55:12 2025 GMT
            Not After : Feb  3 20:00:12 2026 GMT
        Subject: CN=AD9F7493EEF2988F673EA4AA967A70C26AE624C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:63:5a:55:69:98:68:fa:c3:75:13:2e:52:
                    c5:47:fe:7a:26:45:d3:c9:d6:c4:69:50:f0:87:22:
                    35:7b:1d:92:04:65:ac:6b:14:3a:0e:ba:17:1a:c3:
                    98:c0:24:88:e4:0b:cf:2d:aa:94:f2:3d:0d:5d:c5:
                    d4:0d:23:5f:1f:bd:67:5f:a1:83:36:70:cf:7e:30:
                    b9:fd:30:e7:c3:7c:75:56:2d:4a:cc:32:3a:ef:69:
                    21:a1:5d:52:33:d7:e6:d6:37:dd:69:69:66:61:16:
                    a0:65:7e:6d:ef:c9:46:72:11:e9:e9:81:6f:21:b2:
                    b2:49:ef:55:8a:26:5f:c5:d8:79:22:12:de:62:a1:
                    ce:ba:8b:bc:41:c8:32:6d:b3:cc:5d:ac:06:dd:64:
                    33:97:10:c1:6f:50:ab:53:eb:1d:5f:79:8f:fe:86:
                    cf:fc:35:f4:e6:7b:10:36:3f:de:82:00:7f:f0:ae:
                    15:f1:ae:3e:bd:68:e8:76:29:ca:d8:9a:48:56:d4:
                    1c:88:df:c1:5f:db:8c:3d:0f:63:bd:2a:15:3e:65:
                    00:78:4d:c8:94:88:26:3d:9a:fe:08:11:2b:ed:0c:
                    b2:82:e8:4c:8d:ed:66:4c:8d:51:dd:82:06:bb:c2:
                    92:60:02:70:dd:94:17:48:2b:1a:a0:f8:72:ad:57:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:74:93:EE:F2:98:8F:67:3E:A4:AA:96:7A:70:C2:6A:E6:24:C2
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b0:51:20:e7:af:44:71:d0:65:14:86:9a:7a:c8:66:5d:c8:
         7e:a4:e5:3a:30:c8:87:44:76:f0:6c:cd:42:10:2b:3c:54:01:
         1a:9a:70:e0:45:6e:cb:37:ce:a2:1c:76:1b:1d:4d:20:e4:dd:
         8d:0b:39:6a:b1:f1:f9:c6:fd:43:09:66:3a:30:f5:e0:60:3f:
         21:c1:77:e7:a9:25:72:42:b2:45:c8:54:3a:48:f2:7b:c0:b2:
         35:88:4f:f7:4a:56:58:fd:de:c4:5d:67:87:f0:dd:d6:6c:68:
         16:f1:ee:15:6a:bb:a6:15:a5:83:d0:ce:06:ed:5d:25:33:13:
         f1:ce:28:31:48:1f:a3:e3:2c:52:aa:34:2f:aa:47:15:d6:86:
         08:a0:b3:80:d0:5e:b3:be:d4:8a:0e:7c:9c:a1:25:a5:ee:14:
         25:3a:c8:e2:af:27:25:63:ae:d8:e8:50:47:6e:72:1b:4a:47:
         56:83:51:2b:ef:90:1f:87:b4:cd:7a:b6:13:8c:71:db:01:70:
         80:1f:0e:39:be:8f:64:07:2a:ba:65:d1:17:06:67:05:e5:04:
         75:68:53:92:85:26:09:7e:2c:f4:22:f8:fb:d4:f1:f2:f6:a3:
         31:39:a2:a7:0f:16:80:a0:22:f0:c9:56:cf:5a:cd:b0:c2:45:
         dc:7d:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:10 2025 by rpki-client