Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231312e302f32342d3234203d3e203432373038.roa
File:                     3139302e3132312e3231312e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier:          SBnmM7D6HfH+vwFSmrz+vPFa28RHb/AXuLARuurihkM=
Subject key identifier:   20:83:AB:93:3C:4E:9E:E9:B7:B1:D7:3A:79:D2:F1:96:72:8E:1C:C5
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       01595F759CA4813AD42678467F3EC4B9D3BBC990
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231312e302f32342d3234203d3e203432373038.roa
Signing time:             Tue 04 Feb 2025 20:00:14 +0000
ROA not before:           Tue 04 Feb 2025 19:55:14 +0000
ROA not after:            Tue 03 Feb 2026 20:00:14 +0000
asID:                     42708
IP address blocks:        190.121.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:59:5f:75:9c:a4:81:3a:d4:26:78:46:7f:3e:c4:b9:d3:bb:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Feb  4 19:55:14 2025 GMT
            Not After : Feb  3 20:00:14 2026 GMT
        Subject: CN=2083AB933C4E9EE9B7B1D73A79D2F196728E1CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:3a:92:16:89:8f:b9:af:01:04:de:37:b6:
                    1b:2d:09:8d:db:90:f1:dc:7f:6c:7a:e7:c9:a6:77:
                    c5:df:b8:9e:26:24:d8:f2:07:84:c3:a2:57:c3:71:
                    ba:71:78:0f:20:d3:1c:c0:14:2f:67:d8:92:a6:35:
                    78:15:54:83:43:2c:f4:04:23:e7:09:76:1d:e9:3e:
                    a2:cd:fd:34:3a:7c:26:24:5d:84:aa:f6:be:bc:a9:
                    fc:ed:fe:1a:40:fe:a2:4c:57:83:ac:79:52:0f:6c:
                    eb:f6:3a:c0:e1:05:64:b4:35:2a:d7:c6:50:15:03:
                    8a:a4:77:9f:b7:39:6b:87:30:72:60:2f:a0:dd:cb:
                    b0:bd:77:b8:5a:06:24:ff:bf:1c:28:9b:0f:18:41:
                    70:37:f1:44:83:fd:03:49:a6:b3:fd:ac:6c:1f:40:
                    80:b1:32:7b:03:36:6b:34:2c:0b:5d:9f:da:2a:d7:
                    0e:a5:9a:e8:c9:01:34:00:11:b8:a9:73:16:33:d5:
                    6b:d4:e3:77:22:4a:10:7d:bb:c2:00:aa:fe:07:6e:
                    2f:2f:aa:3c:a5:42:6a:bb:b3:99:9a:40:95:f5:fa:
                    05:ba:dd:f9:94:d2:53:da:2d:8a:5e:de:5b:df:ce:
                    6f:8d:b1:f7:26:aa:c0:40:2b:1a:dd:23:49:27:6b:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:AB:93:3C:4E:9E:E9:B7:B1:D7:3A:79:D2:F1:96:72:8E:1C:C5
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231312e302f32342d3234203d3e203432373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:84:7d:8a:11:7e:d7:b0:1c:77:12:da:3b:13:31:75:bd:
         68:ec:6b:fb:f0:10:69:dd:22:c1:9e:ba:f7:6b:3d:60:19:b9:
         99:fe:85:bf:78:fa:67:4e:bc:96:bd:9f:d7:cf:79:42:58:39:
         a0:f5:73:da:58:b9:91:16:ca:39:0b:99:1f:b5:0c:bb:9a:38:
         c6:7d:98:ea:f0:48:55:1f:fc:00:fc:0d:18:81:0e:28:94:e2:
         f7:29:b7:fa:42:0f:f2:05:c4:82:84:02:cd:22:05:70:ee:70:
         d2:34:cd:0b:da:83:ff:a6:22:25:ae:5a:3a:d2:da:9d:e5:e9:
         cb:08:76:f0:c7:b6:c0:22:2b:04:b9:e0:c5:53:15:3d:ce:0b:
         1c:0d:f3:10:66:9b:e3:34:46:74:d8:17:ad:48:6a:7d:c3:cc:
         c1:db:05:7e:ff:37:07:23:e3:bf:2a:e9:0c:b5:40:86:54:68:
         fe:48:bf:fe:a0:b0:a2:5a:9b:97:2b:0b:de:37:30:a6:26:b0:
         f1:24:f5:0a:8c:63:81:91:3a:c0:aa:9a:6f:9b:78:75:b0:f8:
         85:4f:b9:d0:03:6b:2f:f4:d5:2d:90:02:0c:b8:f1:5f:d8:79:
         27:81:ae:84:c7:e3:b5:e5:b2:6e:53:3b:58:4c:c3:98:65:34:
         31:4a:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:35 2025 by rpki-client