Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3234302e302f32302d3234203d3e203238303533.roa
File:                     3139302e35322e3234302e302f32302d3234203d3e203238303533.roa (raw, json)
Hash identifier:          ejobmq6xdNo/0nmFz0jC+OKQ404eEkgWMM17y6vZcUk=
Subject key identifier:   43:E3:C4:04:8D:4E:03:D6:C4:F9:64:43:64:25:9B:75:3D:0A:26:E6
Certificate issuer:       /CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
Certificate serial:       21D1058E323CE5091A83EB01CECBC7497222BB1D
Authority key identifier: 07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3234302e302f32302d3234203d3e203238303533.roa
Signing time:             Tue 04 Feb 2025 18:23:17 +0000
ROA not before:           Tue 04 Feb 2025 18:18:17 +0000
ROA not after:            Tue 03 Feb 2026 18:23:17 +0000
asID:                     28053
IP address blocks:        190.52.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d1:05:8e:32:3c:e5:09:1a:83:eb:01:ce:cb:c7:49:72:22:bb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
        Validity
            Not Before: Feb  4 18:18:17 2025 GMT
            Not After : Feb  3 18:23:17 2026 GMT
        Subject: CN=43E3C4048D4E03D6C4F9644364259B753D0A26E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:fe:09:23:b6:34:e7:b2:66:0e:39:8f:b2:
                    0d:73:6b:20:8a:19:da:04:fb:9c:7b:2d:89:1d:72:
                    06:2d:12:5a:b7:67:65:f9:06:2f:68:7b:b1:8b:c4:
                    cf:92:58:06:a0:ab:e1:d1:b1:9d:af:9c:d1:89:09:
                    c1:da:fa:4f:d4:63:a8:ce:99:f9:6e:14:60:f4:3f:
                    ed:61:36:b7:73:83:0b:fd:7a:1c:74:7f:dc:0b:5a:
                    3e:b9:6b:7a:d6:e4:93:65:47:54:0a:55:6b:95:9b:
                    6d:49:fa:b8:30:1a:6c:4f:3a:7c:90:08:9e:30:54:
                    28:92:17:f2:23:c9:07:d3:d8:0c:b8:51:ff:4f:e4:
                    c7:95:16:2c:bd:ad:15:95:3c:04:78:84:ce:f2:dc:
                    33:cc:90:6b:91:c9:2a:a5:c8:60:16:e4:e8:ee:15:
                    7e:a8:80:c0:61:68:94:0b:82:f6:62:c7:b5:db:b0:
                    5d:c0:8d:f2:61:f5:9a:c6:25:66:6d:40:ad:d0:e7:
                    14:88:42:5d:ba:4d:6a:fb:9c:39:67:13:d1:01:67:
                    cb:e4:0f:08:75:8e:09:c2:69:91:ab:a0:86:5a:da:
                    68:7e:ba:9c:98:ec:58:1b:3c:dc:75:21:a3:23:2b:
                    b9:c2:aa:cd:6a:b9:0b:be:d8:91:db:b8:cf:a9:84:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E3:C4:04:8D:4E:03:D6:C4:F9:64:43:64:25:9B:75:3D:0A:26:E6
            X509v3 Authority Key Identifier:
                keyid:07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3234302e302f32302d3234203d3e203238303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:49:0b:c8:81:b8:a8:61:1f:3d:a9:0d:ca:ba:a8:86:f4:
         4b:ea:5f:81:71:ea:94:9b:a6:e6:72:83:b2:1c:60:96:a9:97:
         63:4a:ef:af:2b:dc:5a:bc:07:08:c3:4e:f2:e8:26:02:a8:bc:
         3e:23:43:49:5a:e4:83:d0:13:ca:b3:53:64:4b:f5:8f:22:d9:
         57:f5:43:78:21:d4:42:be:52:d1:65:1d:52:a2:01:81:fb:56:
         3a:fc:55:f2:38:71:a3:9e:33:90:7c:76:60:47:0a:aa:75:11:
         10:66:2c:0d:fd:a6:f8:1d:33:3f:55:bb:9b:56:b5:67:11:f6:
         c9:b4:97:a6:63:d0:e2:71:ba:b7:77:99:f4:78:20:94:03:b5:
         f3:67:5c:71:b9:91:7c:60:59:ba:d3:9c:19:21:a4:12:df:f5:
         9e:52:c8:e6:fb:f5:ba:e7:f9:43:4f:ca:4e:01:08:2c:38:c8:
         bb:5e:68:f2:31:89:2d:b1:9f:03:2c:06:e2:f4:87:ec:3d:07:
         29:15:9e:46:95:f3:0c:ed:9b:1a:3b:68:54:35:d4:b0:6c:8c:
         5b:30:f5:b7:35:87:6e:d9:64:04:0b:d0:4a:b7:ab:63:b1:3b:
         36:36:62:a0:16:45:d5:bd:96:10:65:d7:bd:31:c2:2b:cb:38:
         6d:9b:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:19:19 2025 by rpki-client