Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          zzC42AE0+KuIli+wx1lQmFh3P9KWGid/KLt4RdeR4lM=
Subject key identifier:   DA:DE:2B:15:8A:86:6C:9E:A6:06:27:46:70:67:B5:ED:E0:7E:23:8A
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       6A8F4E4825B201BD187F9010E6819837610AEA49
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa
Signing time:             Wed 12 Feb 2025 20:09:40 +0000
ROA not before:           Wed 12 Feb 2025 20:04:40 +0000
ROA not after:            Wed 11 Feb 2026 20:09:40 +0000
asID:                     262182
IP address blocks:        190.52.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8f:4e:48:25:b2:01:bd:18:7f:90:10:e6:81:98:37:61:0a:ea:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 12 20:04:40 2025 GMT
            Not After : Feb 11 20:09:40 2026 GMT
        Subject: CN=DADE2B158A866C9EA60627467067B5EDE07E238A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:05:6c:55:c9:36:d3:70:d5:12:1d:0c:3b:
                    bf:1b:2d:9a:f8:02:d0:dc:df:07:64:cc:91:b7:f0:
                    eb:04:09:23:f2:3e:dc:bc:ae:ed:6c:2e:95:35:ad:
                    b1:0d:6d:34:f2:05:4b:a1:4f:65:13:af:a5:60:0a:
                    57:77:30:f1:5d:e2:51:08:b5:7f:01:c9:20:d3:26:
                    89:21:b9:e9:ea:fc:ef:a8:ce:f3:32:76:88:3e:1f:
                    2c:1e:c2:3d:b7:83:6f:a6:12:e1:d5:db:0c:18:d4:
                    09:b9:c9:07:59:61:a8:82:fa:46:a0:b0:87:23:ac:
                    ae:9b:1b:29:26:f7:17:77:a1:97:cc:71:8c:39:cb:
                    3f:bb:8d:c3:2e:c2:d0:17:1d:31:8c:22:ab:a3:90:
                    b6:74:a7:3c:28:c4:92:91:07:74:05:b6:69:2f:8c:
                    f4:39:59:e7:75:6d:b9:de:51:62:0a:95:56:83:51:
                    3a:dc:1e:bd:76:c3:c7:98:5f:82:71:8d:bc:2e:12:
                    0d:21:6b:6e:9b:c2:69:de:bb:26:52:f4:a1:80:d6:
                    7c:a4:d7:ef:36:69:e6:0b:6a:49:ea:c8:22:80:76:
                    67:32:81:40:71:b8:c2:d7:6e:04:08:1b:ea:11:6f:
                    fc:e3:5c:1d:0e:f7:98:73:04:16:eb:27:5e:3b:56:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DE:2B:15:8A:86:6C:9E:A6:06:27:46:70:67:B5:ED:E0:7E:23:8A
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:01:c6:86:26:71:4e:4f:b4:8b:36:ab:5f:db:90:f1:fc:90:
         25:1a:2f:39:d2:e7:59:28:34:fc:8c:e2:9a:cf:c5:2c:b8:b2:
         ba:87:be:46:37:6a:6d:94:ba:50:ef:92:41:ec:cc:59:d8:c3:
         26:35:a6:0c:24:9c:5a:41:d8:c2:2a:2c:38:e0:77:b5:e5:6a:
         f8:2d:54:4a:26:4e:ea:d4:d1:84:23:b3:69:8a:3e:27:73:fe:
         16:95:85:b7:cc:db:5b:27:ea:5d:47:09:8d:91:db:59:ad:0e:
         1c:d2:4d:c5:89:43:d8:e7:95:c4:d7:56:75:f3:96:be:b7:f7:
         48:e6:46:c7:f1:9f:cf:d0:44:af:a7:4c:dc:96:66:ce:c6:7a:
         a5:b8:91:b8:95:98:e0:0a:4a:41:0c:9f:b3:3d:e5:40:1e:9d:
         ba:54:d8:41:0a:2f:ce:de:dc:d1:97:3f:ca:c1:4f:f5:e9:b5:
         42:cd:60:e1:7b:ea:1f:7c:dc:37:b4:f2:1a:8a:ff:65:5e:10:
         81:35:b8:63:49:6f:dc:f3:08:da:03:30:1f:da:27:0a:11:11:
         36:33:f3:16:52:42:fb:77:4e:07:d2:01:bd:a1:77:53:57:63:
         87:3e:50:61:7c:ce:41:b5:8d:92:e9:5f:74:d9:1a:ae:93:bc:
         04:22:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:46 2025 by rpki-client