Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31392e302f32342d3234203d3e203233333833.roa
File:                     3139302e342e31392e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          mrexGe/BAwzfhlnv3whO2vr5iJBb/1nszrg0ZIYps48=
Subject key identifier:   11:FA:46:42:41:1B:C5:75:90:28:C2:DD:91:BD:E1:2F:57:27:02:2B
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       1048ABDAF9CB791AF12C618CE63CCE695A6EAFF8
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31392e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:15:23 +0000
ROA not before:           Tue 04 Feb 2025 18:10:23 +0000
ROA not after:            Tue 03 Feb 2026 18:15:23 +0000
asID:                     23383
IP address blocks:        190.4.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:48:ab:da:f9:cb:79:1a:f1:2c:61:8c:e6:3c:ce:69:5a:6e:af:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:23 2025 GMT
            Not After : Feb  3 18:15:23 2026 GMT
        Subject: CN=11FA4642411BC5759028C2DD91BDE12F5727022B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:fa:19:b2:58:f5:02:e3:c4:84:28:19:1b:
                    44:78:a5:d1:98:cb:ef:87:02:ca:89:cc:2c:44:e2:
                    8b:49:4d:1a:b9:3d:85:7a:78:50:0f:fe:64:15:f4:
                    d7:a3:78:ff:66:ce:73:ea:3b:93:6f:10:a7:ef:2a:
                    02:cf:ee:7f:f9:c5:87:d1:c8:ce:37:ac:4d:b9:58:
                    6e:11:a0:28:2a:f7:ba:1f:5b:90:db:a7:6d:c9:7f:
                    00:2e:f2:79:b2:2d:3e:64:aa:7f:33:97:fc:76:0e:
                    8c:30:16:3c:69:d5:e3:fb:b1:1d:a7:aa:25:63:12:
                    13:8b:10:b7:60:9c:30:b7:ab:5f:1f:95:c2:ac:f2:
                    a6:2f:fb:21:35:f7:c9:3a:4b:11:c4:ea:6b:f4:fe:
                    ae:4a:ab:45:f9:3a:73:8b:9c:72:a0:90:77:a6:db:
                    dd:5c:6c:ef:02:e9:73:03:73:33:f8:da:08:ea:98:
                    75:b0:30:9b:9d:55:ed:c2:3e:bf:12:86:80:6a:6f:
                    af:e8:ca:48:fe:66:05:f1:18:65:be:29:2b:90:58:
                    41:30:3e:ca:b2:1f:74:65:b2:c0:4a:a7:70:83:6e:
                    e7:9c:a6:c4:68:3b:38:78:64:e6:56:a3:7f:3c:ea:
                    21:4f:4c:52:80:4f:8a:06:c3:e6:cb:90:76:ef:b5:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FA:46:42:41:1B:C5:75:90:28:C2:DD:91:BD:E1:2F:57:27:02:2B
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31392e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:31:20:dc:68:21:f5:a7:51:8e:b2:06:f3:c3:06:30:29:7c:
         ca:25:4b:90:6b:57:93:e1:ed:0a:29:4e:6f:30:19:c9:a5:0f:
         c1:fd:c7:35:90:f8:28:71:66:2c:73:84:43:ed:06:fd:00:0d:
         7f:28:58:dd:16:bc:b4:0e:df:be:07:f9:96:4e:86:57:03:78:
         2b:23:d3:d1:51:ef:a8:58:ef:fa:3c:7d:1a:50:4c:18:5b:66:
         5e:a7:b2:d9:0d:76:b4:d2:39:91:30:a1:4a:d8:ea:60:a4:0b:
         94:30:18:c6:91:64:4f:14:da:a0:4c:2e:cf:85:d9:98:98:ab:
         ee:4e:51:21:ab:1d:67:67:bd:fa:b1:c4:74:9f:34:65:fb:e8:
         98:d7:31:a7:54:59:f0:2e:1d:e8:49:7f:9f:6c:02:d7:ed:05:
         4c:b1:4a:33:04:d9:92:04:98:bf:3d:f5:4e:79:69:1f:44:9a:
         c8:4e:f4:ab:98:c7:9a:49:3d:81:96:23:a9:c0:e5:aa:c6:dc:
         56:5c:b6:47:79:9e:09:70:bc:20:c4:95:40:93:08:37:27:46:
         8f:1e:e6:44:b4:aa:f6:ff:59:18:86:ee:6a:d3:6e:84:9f:f5:
         06:1a:ab:5c:46:32:b4:12:d9:71:dc:d1:dd:bd:9c:19:07:a9:
         ee:e6:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:36 2025 by rpki-client