Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa
File:                     3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa (raw, json)
Hash identifier:          VJxH/8Ptr4+6Foj0+j2LExLjI2Z85wlCD2eAlusLqqo=
Subject key identifier:   8B:4C:00:FF:AF:F3:0B:24:34:1A:EE:46:FB:25:FA:64:4F:74:8A:20
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       5250D4B74064AE601A33401BDA5CD983C3E21144
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa
Signing time:             Tue 04 Feb 2025 18:49:28 +0000
ROA not before:           Tue 04 Feb 2025 18:44:28 +0000
ROA not after:            Tue 03 Feb 2026 18:49:28 +0000
asID:                     52268
IP address blocks:        190.112.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 01:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:d4:b7:40:64:ae:60:1a:33:40:1b:da:5c:d9:83:c3:e2:11:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Feb  4 18:44:28 2025 GMT
            Not After : Feb  3 18:49:28 2026 GMT
        Subject: CN=8B4C00FFAFF30B24341AEE46FB25FA644F748A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:ab:68:3c:46:f9:f7:3f:22:a8:65:5f:29:
                    d4:91:ba:7c:c6:52:a5:c8:7e:47:4a:cf:68:17:26:
                    46:0c:ba:49:3a:96:4f:22:a6:4d:06:0a:13:58:3b:
                    59:a1:07:fa:c0:d2:24:0b:1b:d8:4b:19:09:94:66:
                    f0:3a:73:14:94:ef:5c:e2:9b:e7:be:1e:22:64:35:
                    9e:08:7f:98:e2:2e:d9:ba:45:f7:56:df:22:e7:78:
                    b7:ca:83:fe:f2:d7:6b:b3:b0:ee:55:6b:ea:82:a0:
                    b6:1f:43:7f:1e:94:30:6e:fa:6c:96:4a:f0:ca:76:
                    3e:48:31:02:6f:27:73:d6:e8:31:2b:84:95:8b:cf:
                    97:6a:38:c6:0d:c9:f5:ec:16:d8:b9:0b:5a:a3:33:
                    c0:3f:91:58:49:3e:e6:dd:96:03:95:ec:f9:b5:45:
                    ff:80:8a:9d:48:47:a1:ff:77:fb:46:3a:b6:80:15:
                    ee:d0:67:53:55:fd:5f:0a:68:1c:0d:c2:10:03:c4:
                    73:fa:c0:b1:0a:3a:c9:33:a2:bb:32:28:3f:45:76:
                    48:1e:42:cd:3c:fd:86:4b:d4:ff:e5:9f:09:1a:ea:
                    77:0e:c8:f8:e1:6c:c9:2f:c4:a2:5f:97:55:1a:66:
                    76:6b:c8:37:58:15:eb:3e:a7:28:2c:60:f6:24:54:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4C:00:FF:AF:F3:0B:24:34:1A:EE:46:FB:25:FA:64:4F:74:8A:20
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:1c:b6:b2:5a:02:e4:93:09:b7:79:c7:3d:9c:e2:ef:7c:
         8c:a3:8b:e5:d7:27:8e:2e:f0:1b:28:53:1a:1b:ae:53:d6:16:
         2b:fe:76:11:1a:86:11:0e:63:f9:d9:ef:ef:b4:c8:83:35:a6:
         31:75:fe:93:95:36:8e:ed:22:ae:18:2a:5c:45:aa:83:1a:08:
         87:86:6e:c9:7e:6e:f6:84:f0:73:9c:95:94:05:ae:62:70:f5:
         7d:18:a1:26:41:2f:f7:01:bf:21:cc:27:56:47:53:98:e0:14:
         09:60:f5:67:47:d6:dd:64:61:bd:c9:8f:d4:ad:67:38:ff:70:
         e0:21:33:38:94:38:16:9b:aa:c5:01:94:d8:36:e3:11:5a:28:
         76:ff:b3:69:36:0d:e9:7b:46:22:86:1e:1d:ec:55:0f:b3:de:
         ce:19:3b:4a:de:54:5a:04:1f:21:92:07:43:93:8d:c8:db:b7:
         4a:49:69:9f:57:3e:2d:b5:b3:c5:89:09:55:93:e9:2b:a0:83:
         89:70:a9:98:b0:fd:35:17:8f:42:7e:8f:f0:68:0a:30:8a:82:
         72:1f:35:22:d7:3c:a6:1e:0d:88:e1:f7:a1:f7:90:1b:c9:e7:
         0a:37:b4:14:2a:e8:73:7f:29:3a:1f:8a:6c:a4:ee:b5:69:ff:
         8a:01:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:48:08 2025 by rpki-client