Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa
File:                     3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa (raw, json)
Hash identifier:          lFSysIKlLWf7JB59Euh1O3A3OikH4P+rns7uXXpwjWg=
Subject key identifier:   EA:9B:99:D3:9F:F1:AE:B0:2F:0E:74:C9:05:14:80:0A:1A:43:3C:40
Certificate issuer:       /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
Certificate serial:       5D4B068455097B75BB5FEADB7652B4B427D53F63
Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa
Signing time:             Tue 04 Feb 2025 19:58:13 +0000
ROA not before:           Tue 04 Feb 2025 19:53:13 +0000
ROA not after:            Tue 03 Feb 2026 19:58:13 +0000
asID:                     271864
IP address blocks:        190.113.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4b:06:84:55:09:7b:75:bb:5f:ea:db:76:52:b4:b4:27:d5:3f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
        Validity
            Not Before: Feb  4 19:53:13 2025 GMT
            Not After : Feb  3 19:58:13 2026 GMT
        Subject: CN=EA9B99D39FF1AEB02F0E74C90514800A1A433C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:9c:ad:3f:a6:1f:1e:be:c2:c6:c7:9e:b0:
                    9d:6a:4f:93:2b:db:23:85:73:ca:65:91:64:b7:4e:
                    3b:cc:a4:1c:4e:8f:12:9c:5e:2b:5a:1e:ec:5d:2b:
                    75:b3:58:ff:7a:97:e5:0f:a0:d4:0d:5c:51:b8:fe:
                    7d:54:a3:cb:da:f3:c1:b0:72:3c:e1:f0:ba:66:63:
                    75:b3:57:58:c5:ca:8d:58:72:ab:b9:53:6a:58:1f:
                    bd:06:cb:e6:c1:ca:e3:68:8d:05:a1:2d:83:1c:70:
                    bf:5b:6c:e2:c8:3f:62:a0:16:b2:bc:e1:03:98:df:
                    69:10:28:b4:d9:b2:48:24:72:96:3a:b8:fb:c6:b3:
                    4c:c0:bb:a8:88:63:23:d9:78:ab:4c:63:88:13:76:
                    20:dd:f6:12:2d:5d:47:51:bc:09:75:d9:43:cc:c3:
                    94:d5:e0:ee:0f:1a:99:55:0d:6f:ad:f7:97:5b:78:
                    8b:aa:66:e7:f3:dc:34:f3:5f:75:f9:a3:a9:5e:a4:
                    46:df:a1:b3:aa:cb:d9:ef:ee:f5:2d:31:fa:18:9e:
                    9e:ba:66:40:87:82:75:e9:d8:31:2f:aa:f1:50:30:
                    01:d4:8d:7d:74:a9:11:78:d5:97:58:af:45:7d:8e:
                    a6:33:ac:da:f0:fc:ce:26:01:37:94:43:2e:68:23:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:99:D3:9F:F1:AE:B0:2F:0E:74:C9:05:14:80:0A:1A:43:3C:40
            X509v3 Authority Key Identifier:
                keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:eb:3f:03:e4:27:ca:6f:68:46:12:f2:5f:2d:24:4f:97:
         b0:4a:5e:04:3a:ba:b2:e4:7d:cf:0e:5d:ed:00:82:63:65:7d:
         92:54:00:14:46:01:c1:e1:b4:9f:d1:69:1d:e9:40:e7:3b:08:
         5b:ea:48:93:6a:03:3d:04:c4:66:5d:96:3b:10:6b:b7:19:35:
         2f:4d:1f:63:1c:48:2b:27:54:e5:0e:c1:c3:a0:86:26:3a:07:
         6e:39:7d:21:7d:4b:53:f8:9f:52:5e:99:95:69:25:ed:a2:cf:
         60:0e:c9:a5:e6:a5:25:0f:cb:b8:4d:e3:e8:a6:f8:99:cf:69:
         6d:61:7f:51:b3:b0:c6:3b:c6:96:b2:3b:8b:d4:de:26:a7:6e:
         d5:b7:f4:66:87:9e:9c:ca:0e:06:66:b0:4b:2a:58:1c:2a:74:
         b9:d6:83:b6:63:6b:ae:a3:3c:db:01:e5:51:0c:62:3c:b6:d2:
         fd:3f:98:80:83:44:b9:c4:5e:08:af:9e:f9:79:4d:d6:9b:c2:
         b0:a6:8f:9c:08:e8:c8:ef:80:1e:c5:17:0f:93:88:29:c4:bf:
         65:eb:4f:a8:ec:af:76:f5:6b:ee:43:d5:cf:4d:d3:14:3e:42:
         47:29:58:d0:71:6b:2d:c0:b5:c1:b2:1d:e8:c3:17:81:09:59:
         09:eb:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:10 2025 by rpki-client