Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3130342e36372e302f32342d3235203d3e20323733383830.roa
File:                     3139302e3130342e36372e302f32342d3235203d3e20323733383830.roa (raw, json)
Hash identifier:          YmmdI4Pptegqryz6RTQWWERbkzc7bNzeBGOLXkhiXhY=
Subject key identifier:   80:47:98:C9:B1:74:3C:3E:A6:BA:6E:0F:42:F7:9A:F4:B2:8B:E4:0E
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       04B12104928DE93AF6CA91AD3979B28269C6E21B
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3130342e36372e302f32342d3235203d3e20323733383830.roa
Signing time:             Tue 11 Feb 2025 11:30:00 +0000
ROA not before:           Tue 11 Feb 2025 11:25:00 +0000
ROA not after:            Tue 10 Feb 2026 11:30:00 +0000
asID:                     273880
IP address blocks:        190.104.67.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:21:04:92:8d:e9:3a:f6:ca:91:ad:39:79:b2:82:69:c6:e2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Feb 11 11:25:00 2025 GMT
            Not After : Feb 10 11:30:00 2026 GMT
        Subject: CN=804798C9B1743C3EA6BA6E0F42F79AF4B28BE40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:30:ca:b8:9b:8c:b9:ab:33:1c:82:c4:ad:
                    3a:78:8e:ae:8a:39:2d:e2:4b:fd:57:3e:43:d0:30:
                    69:63:f5:ad:94:bc:47:6b:e7:f9:c9:d7:4a:3c:0c:
                    de:0f:46:63:26:1f:b1:59:d9:53:d5:8b:0a:44:84:
                    21:c5:a3:9c:f7:c9:8e:1c:6b:df:00:7e:81:10:7a:
                    79:73:8e:9a:c9:e2:91:7b:ae:be:9a:cb:80:c9:4c:
                    7c:0a:f9:87:b3:4f:f6:20:8e:b8:2d:b7:10:5e:70:
                    ca:b0:fb:03:1b:d0:83:1f:ab:bf:b2:60:8c:f3:19:
                    3e:17:89:8a:4f:d5:0b:33:ed:27:4f:e8:ca:79:1d:
                    8f:c7:c4:e4:13:68:cf:5d:58:b7:c4:40:d6:9f:47:
                    07:1e:0f:b5:e8:5b:cf:31:eb:2c:30:1d:9e:bf:4d:
                    d8:99:15:44:34:7f:77:6a:8d:ad:6b:68:cd:9c:7d:
                    f3:5b:2d:d9:e8:14:38:ba:f1:b6:23:e2:d6:f4:f6:
                    a7:0f:3b:58:2a:38:ff:83:5d:45:91:19:0b:37:18:
                    46:0b:e5:09:53:fe:07:91:58:fe:92:cf:b6:38:3c:
                    5d:cf:63:42:8c:68:a8:c0:3d:5f:f8:da:5e:6e:d7:
                    70:0d:5b:4a:b3:15:5f:9b:ea:c2:00:00:40:9f:49:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:47:98:C9:B1:74:3C:3E:A6:BA:6E:0F:42:F7:9A:F4:B2:8B:E4:0E
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3130342e36372e302f32342d3235203d3e20323733383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:33:d6:a2:82:8a:fb:f3:fd:0d:36:e2:81:49:4c:30:e7:32:
         f4:d9:e0:92:41:ef:12:d6:3b:ce:0c:e7:57:22:8b:75:e0:43:
         be:68:47:48:d5:30:2e:dd:08:39:9c:95:b9:60:ff:66:4e:70:
         c5:e5:a8:53:ab:70:4c:36:11:f3:06:6e:08:4d:b8:bd:e2:fe:
         7f:0b:ac:e7:c3:fb:53:1d:0f:bb:13:fd:dd:a3:39:8f:81:fe:
         05:27:82:ec:1d:fb:3c:b5:4e:12:d7:46:b0:83:e4:46:4a:59:
         0d:b1:0f:1d:0c:a6:da:61:24:22:e1:2c:51:e1:e2:aa:6e:09:
         bb:ec:bf:a3:7c:56:b1:19:49:bf:9e:09:f8:db:59:3d:08:86:
         e7:77:88:c9:b1:fd:47:99:9d:98:3b:b4:b2:61:74:d1:a8:f7:
         cc:17:1a:58:9f:ba:9c:10:c8:cf:3b:22:80:52:63:9b:8b:e3:
         f1:ae:cb:72:c0:81:e3:f6:80:77:11:57:d7:f9:aa:4b:68:40:
         37:9c:14:2c:c5:37:9d:71:cb:d2:45:79:42:52:4c:cd:4a:5b:
         13:04:75:e2:90:6d:5f:4e:74:dd:af:93:18:26:78:17:f9:dc:
         5e:2a:31:5a:42:b2:cc:61:86:f4:d2:63:dc:5f:bd:47:45:5f:
         e8:a3:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:54 2025 by rpki-client