Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa
File:                     3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa (raw, json)
Hash identifier:          vbYFNhgcOCq8i2xpv+W6Cfnf6MufV877cbVPKKpYBYI=
Subject key identifier:   3E:22:3C:28:7D:38:0B:65:05:8A:70:19:16:10:C4:6F:93:2B:D5:86
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       6AD4683F0B9D4183E30714713295B4A050250405
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa
Signing time:             Tue 04 Feb 2025 20:00:15 +0000
ROA not before:           Tue 04 Feb 2025 19:55:15 +0000
ROA not after:            Tue 03 Feb 2026 20:00:15 +0000
asID:                     60022
IP address blocks:        190.121.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d4:68:3f:0b:9d:41:83:e3:07:14:71:32:95:b4:a0:50:25:04:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Feb  4 19:55:15 2025 GMT
            Not After : Feb  3 20:00:15 2026 GMT
        Subject: CN=3E223C287D380B65058A70191610C46F932BD586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:85:52:98:67:11:71:bf:2a:3d:9b:d8:25:
                    5e:74:8d:e3:5d:65:e9:77:e4:f9:bf:dc:9f:e9:76:
                    39:7d:52:48:21:06:98:d2:cc:2c:30:ec:a2:31:d1:
                    f9:c6:88:3a:4d:9f:d0:6b:8c:27:ce:b0:46:d5:c2:
                    44:30:f9:46:30:83:74:87:e9:35:56:c3:ef:69:6b:
                    ef:e7:b2:e8:50:0a:9f:07:18:c4:7a:e8:aa:69:12:
                    48:35:d3:63:a1:49:e0:2b:f5:88:df:30:72:01:57:
                    e2:87:5c:0a:36:51:71:93:19:79:fe:37:79:c6:ca:
                    38:33:1b:08:bc:41:c1:16:24:5e:e1:d8:46:e0:1a:
                    fc:c7:3e:ca:00:ad:61:e9:f7:41:61:3c:6e:b4:03:
                    0d:7f:b1:46:ca:58:d5:1b:ef:5b:be:9b:d9:06:53:
                    86:9a:c4:4c:6b:57:f3:f1:e1:f7:80:48:d9:be:f8:
                    b7:90:5c:92:a0:b8:07:98:7e:45:dd:69:17:cd:ed:
                    51:15:0f:43:90:31:c2:7e:1b:78:12:40:1e:8f:6f:
                    27:69:01:11:ea:7b:87:95:ea:3e:b7:39:4c:e5:56:
                    7f:b4:40:7b:c3:13:2c:07:d3:0a:52:a9:93:92:6b:
                    54:f6:f7:6c:4d:9c:80:4b:8c:fc:5f:ac:d6:1e:54:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:3C:28:7D:38:0B:65:05:8A:70:19:16:10:C4:6F:93:2B:D5:86
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:0b:f3:14:a8:34:ca:71:16:09:c6:30:88:be:87:57:61:
         87:b8:c0:81:36:eb:2f:39:bb:1f:92:01:0e:74:d0:15:14:8a:
         0f:da:6c:82:df:f3:ce:9f:5f:d6:9a:0d:e0:f7:df:83:f2:e6:
         98:55:a6:0c:37:10:c6:10:85:da:26:7c:a8:66:0c:c6:ff:94:
         5d:13:75:a9:9d:b9:10:c2:57:72:18:a4:de:6a:c8:d5:52:77:
         3d:16:38:c7:d0:78:49:38:69:02:5e:1d:c8:8c:c4:d7:db:8e:
         d6:49:9a:79:60:84:c9:0c:71:05:60:12:6c:17:a8:b7:9e:a3:
         b8:50:23:0f:97:6c:0d:cb:53:b6:11:ff:17:e6:1a:66:3a:70:
         8f:58:72:85:b3:48:6f:00:91:ae:77:f2:2e:3d:5e:1d:9a:f6:
         8b:39:09:89:ac:d0:94:69:6a:42:00:6d:9d:4b:22:fb:74:36:
         4e:41:0f:9c:a2:8f:97:67:14:30:43:9f:cd:63:a4:b7:5c:1b:
         de:7f:49:19:cc:90:07:9e:1e:08:ed:b6:26:09:fa:9a:c5:ff:
         17:09:a6:42:fe:ec:ed:37:d1:8e:f9:78:43:95:9b:a8:33:43:
         8b:d2:8c:84:82:e1:71:e0:cb:0a:d7:98:0a:97:2f:02:6a:4e:
         2a:dc:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:36 2025 by rpki-client