Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa
File:                     3139302e31342e302e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          4FAM7RI0K85SYEdxLyKY1EaSo/M3pE4xFdvkGyNOPJE=
Subject key identifier:   76:82:85:EF:13:04:66:68:DF:61:1D:2E:0D:6B:74:F4:BC:9C:5D:15
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       442381EE368EC5C9874B8CC02BBCBB9D40B82EA9
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:38 +0000
ROA not before:           Tue 04 Feb 2025 18:10:38 +0000
ROA not after:            Tue 03 Feb 2026 18:15:38 +0000
asID:                     26617
IP address blocks:        190.14.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:23:81:ee:36:8e:c5:c9:87:4b:8c:c0:2b:bc:bb:9d:40:b8:2e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:38 2025 GMT
            Not After : Feb  3 18:15:38 2026 GMT
        Subject: CN=768285EF13046668DF611D2E0D6B74F4BC9C5D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:a3:5f:e6:46:b4:36:20:04:99:1d:e5:0a:
                    6f:95:d9:7a:68:e4:9b:e5:2e:4b:6e:0c:ce:07:18:
                    3a:6d:6d:ac:93:08:37:50:d2:48:c0:f3:64:25:fd:
                    d9:53:d5:45:4b:c1:b2:cb:7e:94:74:49:84:b6:05:
                    e2:d9:89:75:23:c8:7c:86:27:79:75:0d:58:dc:b5:
                    78:05:b5:f2:30:89:05:ff:8c:9f:a1:b7:78:7e:12:
                    0d:bb:7b:ca:f3:26:6d:4d:7d:2e:1c:dc:2b:e4:08:
                    1e:02:18:ca:97:c5:81:94:29:57:48:35:2e:7c:26:
                    6d:67:c5:e8:3f:94:f3:fd:45:79:88:89:bb:3e:c2:
                    20:26:01:04:89:cb:37:4a:87:bb:ab:a7:46:54:14:
                    87:0b:c8:ac:9b:8e:9d:45:fa:f8:6c:c3:bb:2d:ae:
                    5e:77:17:2f:14:eb:c6:51:93:f8:32:6d:5a:26:85:
                    55:ce:b1:e6:c9:58:4b:92:47:3c:52:98:51:8a:53:
                    28:95:d5:38:d0:26:bf:e9:83:b2:ef:9b:81:e4:54:
                    d5:59:9a:15:b0:21:21:d3:a1:c4:28:fd:ca:9c:5c:
                    b4:ee:fd:f3:6a:2f:51:b2:91:cf:56:b5:a4:df:c5:
                    93:b3:b7:83:df:87:70:11:0e:f1:5c:2b:27:f7:0d:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:82:85:EF:13:04:66:68:DF:61:1D:2E:0D:6B:74:F4:BC:9C:5D:15
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:2b:43:14:b6:f7:85:22:48:35:4b:43:64:91:1f:2a:5c:af:
         42:e4:63:73:c1:76:b0:e0:52:69:47:4e:65:0d:f0:60:11:a5:
         81:c9:94:df:ff:5a:44:f4:d3:b9:b1:c3:0a:76:b7:19:09:9f:
         62:a2:5a:01:d2:da:05:2d:87:0c:9f:a6:f4:e1:be:10:64:e4:
         b8:27:e2:fe:b0:ea:15:cd:5c:dd:d1:3d:04:51:78:4d:38:c7:
         0b:c5:ee:7a:fd:3f:24:14:2b:d9:12:9d:6d:06:3b:29:af:74:
         b5:1c:da:35:e6:40:b9:1a:14:4e:c4:28:68:88:f4:ee:f9:1a:
         d7:23:bc:08:9f:55:db:24:eb:3c:2a:fb:75:66:46:d5:f6:36:
         54:37:a7:c2:cb:8e:f7:be:64:62:0f:13:00:3d:5f:52:97:41:
         01:b3:85:0b:c4:b9:d8:3e:ad:bd:1c:3c:d9:46:e3:0e:09:b4:
         9b:a3:c4:e8:7e:81:68:75:73:18:55:ff:ac:06:86:98:8e:18:
         5d:c9:31:f3:99:92:56:5c:d3:a3:c1:10:23:70:83:40:b8:02:
         fe:e6:e3:8a:3a:0d:dc:a4:67:98:89:49:bf:ab:4a:44:22:69:
         81:e3:22:88:f5:60:74:50:b3:2b:65:8d:1c:97:98:6d:e3:c0:
         8c:98:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:03 2025 by rpki-client