Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3232342e302f32302d3234203d3e203238303533.roa
File:                     3139302e35322e3232342e302f32302d3234203d3e203238303533.roa (raw, json)
Hash identifier:          H6L59y607k/41TXE+e1bBwwQAMGgE2kNJgeTsktPr2o=
Subject key identifier:   E0:47:6A:E8:40:0D:D6:50:1F:E7:04:61:DF:D0:B4:31:95:89:4E:A6
Certificate issuer:       /CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
Certificate serial:       0E15610FA557F47017C4F2946507C2714A78EDEF
Authority key identifier: 07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3232342e302f32302d3234203d3e203238303533.roa
Signing time:             Tue 04 Feb 2025 18:23:18 +0000
ROA not before:           Tue 04 Feb 2025 18:18:18 +0000
ROA not after:            Tue 03 Feb 2026 18:23:18 +0000
asID:                     28053
IP address blocks:        190.52.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:15:61:0f:a5:57:f4:70:17:c4:f2:94:65:07:c2:71:4a:78:ed:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
        Validity
            Not Before: Feb  4 18:18:18 2025 GMT
            Not After : Feb  3 18:23:18 2026 GMT
        Subject: CN=E0476AE8400DD6501FE70461DFD0B43195894EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:37:33:e2:03:4a:5b:f9:ef:ac:36:40:4c:
                    d3:18:ca:40:e2:81:cf:bc:85:5a:d1:db:7d:00:4d:
                    64:b7:92:33:2c:95:96:e5:3e:12:5b:95:1f:5a:d9:
                    11:d4:d6:35:31:c3:18:2b:8a:8c:21:61:f8:17:fb:
                    31:46:93:60:12:d5:a0:63:87:86:c1:29:44:27:c8:
                    ab:9d:b1:fc:f5:a7:e1:33:c6:ef:00:53:42:e6:5a:
                    3f:6d:d9:c1:f3:d1:7f:ef:c3:11:d8:a8:8b:53:d5:
                    56:bb:55:f4:2b:d9:51:0d:21:cc:36:92:1d:fb:ae:
                    2a:f5:1b:fd:d7:53:87:36:e0:49:26:0b:80:ec:19:
                    d8:44:2b:07:ff:72:30:39:c6:c6:f8:93:7e:78:d0:
                    82:26:bb:04:8d:6f:5f:db:47:40:c9:7e:50:12:f7:
                    e2:f1:d7:dc:ac:7e:ef:ea:05:f3:f8:54:d4:2c:c8:
                    8c:08:29:71:b9:19:a0:f1:b2:cb:33:7f:e8:81:7a:
                    5b:62:3f:bf:0b:57:3c:da:de:69:30:b8:c4:36:7e:
                    16:6d:65:86:85:6f:ae:b6:26:50:ec:55:36:e6:55:
                    15:43:8f:14:3a:f8:0a:a5:03:1f:cd:ac:a3:67:4e:
                    85:80:f0:4a:5b:82:41:98:49:f0:5b:6a:ff:31:df:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:47:6A:E8:40:0D:D6:50:1F:E7:04:61:DF:D0:B4:31:95:89:4E:A6
            X509v3 Authority Key Identifier:
                keyid:07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3232342e302f32302d3234203d3e203238303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:97:71:50:f7:3b:04:69:69:fb:97:81:ed:3a:1c:a1:a9:
         09:c6:c7:e5:5f:7a:b5:ee:50:0d:d9:43:90:35:f8:8a:04:8f:
         c6:f1:9f:ab:5c:30:e8:73:56:c9:91:04:7b:dc:08:ff:bf:40:
         dc:75:9c:2b:9b:ef:63:e1:9d:59:7a:1b:c0:1c:17:d0:5a:2c:
         6d:c2:20:9b:9f:a0:aa:27:ca:ea:17:c4:ab:92:4e:d3:a9:c9:
         31:db:22:81:94:6e:2e:0c:cc:a9:fc:a8:05:c6:2d:bd:1d:32:
         36:a8:31:ba:0a:14:ce:47:a6:8d:19:62:ac:05:5d:43:d1:07:
         91:b7:85:d7:77:59:f2:39:05:39:46:5c:a9:5c:bf:b0:c9:45:
         3b:bf:8d:7a:9c:41:bb:0f:60:01:0a:f9:70:b0:a9:42:2e:60:
         6b:73:4c:8c:ab:58:d6:4f:f4:ee:66:e3:56:6e:57:71:b9:3c:
         0e:65:de:79:ef:82:b5:0b:d3:da:f4:3b:1a:d4:3a:3b:21:9a:
         00:a0:14:2d:e3:40:76:64:e3:64:d3:d3:a5:d5:c6:d7:bc:4d:
         79:b4:98:56:aa:1a:37:e1:bf:7e:b1:13:8f:3a:87:2b:1b:49:
         3b:5b:68:0d:0f:02:ca:58:c3:86:73:6d:ef:22:e4:d0:8c:de:
         0e:77:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:50 2025 by rpki-client