Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa
File:                     3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          y/EegyqfnBqOTzHqyqn7ldWbLIIfneKPb8BeWjcLmC8=
Subject key identifier:   C7:93:95:5C:67:15:93:22:71:A0:26:C6:A1:EB:DB:0B:46:7F:2D:99
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       411AC42718853873A28FF2DE05AA63F99E5F4CC0
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa
Signing time:             Tue 04 Feb 2025 20:00:12 +0000
ROA not before:           Tue 04 Feb 2025 19:55:12 +0000
ROA not after:            Tue 03 Feb 2026 20:00:12 +0000
asID:                     13213
IP address blocks:        190.121.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1a:c4:27:18:85:38:73:a2:8f:f2:de:05:aa:63:f9:9e:5f:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Feb  4 19:55:12 2025 GMT
            Not After : Feb  3 20:00:12 2026 GMT
        Subject: CN=C793955C6715932271A026C6A1EBDB0B467F2D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:da:56:1f:c5:62:af:54:5e:6c:36:5c:24:
                    ad:f0:54:55:a5:01:04:47:b4:57:6a:14:40:7d:ff:
                    fb:a8:a5:19:28:e5:cc:60:9a:66:58:d0:e7:c8:21:
                    15:9f:e1:95:37:89:29:d5:ea:a2:d7:e4:6a:75:3e:
                    c1:23:98:da:b2:4c:1e:c4:f9:74:87:a1:79:72:2a:
                    15:56:b1:b8:08:08:21:7f:b6:f7:79:7a:32:8e:cc:
                    d8:79:9f:17:29:49:fb:e8:fd:5b:10:ff:aa:94:ee:
                    e8:4c:0e:67:ff:2a:d3:3d:8f:4d:8b:a8:86:66:55:
                    bf:fd:b2:4d:c3:4d:a5:ed:0b:82:03:7a:b3:7e:7c:
                    53:94:3e:ed:ca:a0:4f:a1:58:13:3e:56:b0:a6:15:
                    fd:08:81:5e:15:8f:ed:32:7e:8f:dc:fd:f1:40:2b:
                    40:95:07:be:ef:ed:59:0b:3d:ce:2d:28:d1:4d:f5:
                    c7:f9:ec:22:12:d6:35:e7:8c:86:58:cb:0e:24:a6:
                    69:16:18:b6:05:ac:b5:07:c0:8b:c3:71:01:00:f6:
                    16:29:68:95:a1:6c:17:59:e9:f9:b0:b0:70:a5:ff:
                    af:65:f6:85:c7:43:62:57:28:89:7e:93:ad:71:f1:
                    9c:8f:fe:8b:55:50:2a:0d:03:04:5c:98:45:24:0f:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:93:95:5C:67:15:93:22:71:A0:26:C6:A1:EB:DB:0B:46:7F:2D:99
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:59:69:9a:0c:41:c2:28:c6:24:c5:ca:08:13:58:de:72:7e:
         fd:35:e8:1b:ac:a6:ca:5e:a4:ed:30:f1:68:26:2b:c0:57:d4:
         91:33:68:19:bc:4e:2e:6b:6e:dc:9f:10:ef:81:78:83:04:bf:
         61:ea:f2:e3:7c:cd:ea:77:b2:e0:e4:f5:c2:e0:d1:d7:22:c0:
         a2:94:f5:e1:56:4e:ed:6b:a3:f6:99:7a:14:6f:28:34:1c:38:
         c1:34:31:50:0b:91:59:10:c6:8c:46:c6:2d:a2:1c:d0:ce:ab:
         36:12:ab:9d:30:e0:22:88:ef:70:8a:7c:32:65:d2:16:3b:65:
         71:9b:18:04:aa:7a:9e:b6:52:5f:0d:cc:65:ad:fe:10:3c:4f:
         a1:22:fd:23:c6:af:bc:6c:e2:e7:48:44:84:50:0b:61:81:33:
         ce:90:88:e4:54:27:77:62:81:0c:2d:dc:64:66:e8:a8:d0:27:
         77:f6:92:0b:76:fc:79:4c:44:19:ae:a3:15:06:73:89:ac:1f:
         76:07:c8:31:2e:55:12:0f:54:88:72:54:63:e0:a8:20:6a:15:
         8a:b2:ad:4f:b3:f0:77:b6:08:91:d2:a6:92:0a:d0:26:ff:42:
         1c:c8:34:e7:3c:39:54:83:b0:b4:aa:23:dc:e3:92:72:ea:4e:
         22:c0:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:14 2025 by rpki-client