Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa
File:                     3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa (raw, json)
Hash identifier:          whz10X8rtZzGp5KMzk05l4IUJVXM4z7n6YqJR8ewZes=
Subject key identifier:   7A:76:AE:04:A2:14:3C:54:00:60:4B:17:5A:70:20:69:45:E4:49:CB
Certificate issuer:       /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
Certificate serial:       5F801CFA1DC0DF41BA81848FF3FCBE50CCE4476A
Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa
Signing time:             Tue 04 Feb 2025 19:58:14 +0000
ROA not before:           Tue 04 Feb 2025 19:53:14 +0000
ROA not after:            Tue 03 Feb 2026 19:58:14 +0000
asID:                     271864
IP address blocks:        190.113.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:80:1c:fa:1d:c0:df:41:ba:81:84:8f:f3:fc:be:50:cc:e4:47:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
        Validity
            Not Before: Feb  4 19:53:14 2025 GMT
            Not After : Feb  3 19:58:14 2026 GMT
        Subject: CN=7A76AE04A2143C5400604B175A70206945E449CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:79:c6:cb:7f:25:15:e7:2e:29:62:33:7a:d7:
                    da:7c:d3:74:e1:91:44:cc:ed:80:57:77:55:99:d2:
                    16:61:01:a5:f7:fe:0f:04:dd:80:9e:cd:f1:74:11:
                    dc:eb:09:d1:2d:4d:17:0d:df:db:93:53:b8:49:f8:
                    07:78:44:18:95:d0:6d:08:0b:6c:3f:9c:7b:36:d9:
                    1b:e6:a5:99:99:63:58:c6:80:b8:d5:f6:14:21:af:
                    52:54:4d:b4:54:00:d3:44:23:cc:d9:7c:13:da:7a:
                    b6:c5:98:06:c1:7f:02:15:cd:6e:0c:4b:b8:db:5e:
                    75:c5:d3:ea:95:3e:b7:77:43:f1:e5:4f:3a:59:5d:
                    31:3f:6b:ea:39:d8:69:a2:16:60:c3:e8:e8:c5:23:
                    4c:55:ea:8c:57:62:36:03:d8:ba:c7:9c:f8:39:12:
                    96:2d:b7:d2:f2:7c:c2:48:93:f3:b1:2f:8d:ab:9e:
                    1d:56:41:46:4a:9b:ce:a4:35:cb:0c:c2:7d:1f:77:
                    e0:aa:6e:6e:6a:14:69:c4:9d:bb:48:a6:eb:d5:f7:
                    63:26:54:ee:c8:3e:af:2a:e8:52:fb:1a:dc:22:eb:
                    38:8a:d2:6e:5a:4f:b0:cd:ea:fe:60:f9:a8:54:48:
                    03:22:43:c4:dc:63:48:15:1d:71:0e:7a:fe:22:41:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:AE:04:A2:14:3C:54:00:60:4B:17:5A:70:20:69:45:E4:49:CB
            X509v3 Authority Key Identifier:
                keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b3:43:92:53:cb:f1:33:cf:15:3b:e2:33:26:ed:fb:8b:e2:
         64:ba:94:7f:a6:6e:c0:b2:84:b6:65:97:36:b0:f2:62:95:cf:
         d3:3c:6c:ff:0a:32:a3:c4:0d:37:b1:e5:21:da:09:c5:88:12:
         d8:aa:99:42:e2:3d:97:d3:da:7b:d4:99:99:00:32:68:20:b0:
         ac:9c:10:47:18:24:55:19:a1:93:2a:36:ea:60:2f:51:bd:4c:
         c5:8d:a1:9b:f1:05:15:c6:5f:25:38:31:c0:e5:4c:8f:fb:db:
         99:a7:0d:78:b8:2e:86:af:ae:cd:e8:3c:20:d8:3c:d9:01:76:
         c0:3c:ca:f7:6b:0d:8f:0e:79:48:31:8e:f7:02:60:c5:3b:30:
         c1:20:96:a4:97:bb:24:a6:6b:b8:12:99:2a:21:0e:a7:a7:86:
         81:2b:0a:75:e9:e7:cf:22:ff:ff:2b:e4:84:e2:e0:d8:f4:de:
         f0:6a:ca:cf:60:9e:0d:b0:7a:9b:c6:89:6d:4e:e0:83:1b:c0:
         fb:e4:5f:73:fe:f5:fa:74:35:1e:8a:e2:5d:7c:28:f3:c1:2c:
         ce:0a:60:cc:df:fd:7e:36:7d:f7:dc:b5:fb:46:17:d8:57:5e:
         0e:45:99:95:74:8c:13:0d:17:ad:49:e7:62:a8:be:5d:7f:d1:
         8a:ac:7b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:51 2025 by rpki-client