Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e34382e302f32312d3234203d3e203233333833.roa
File:                     3139302e342e34382e302f32312d3234203d3e203233333833.roa (raw, json)
Hash identifier:          yQvdSoXPNzDp0RyZNDEST9doHQWaA+C0tDKUIMfZqVU=
Subject key identifier:   07:35:E8:A1:98:05:00:08:CD:A4:0E:4D:86:31:A9:2F:3A:AA:13:72
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       749E35B7EC0CAE5D1985DF81A44D3C820FB2A48D
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e34382e302f32312d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:15:35 +0000
ROA not before:           Tue 04 Feb 2025 18:10:35 +0000
ROA not after:            Tue 03 Feb 2026 18:15:35 +0000
asID:                     23383
IP address blocks:        190.4.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9e:35:b7:ec:0c:ae:5d:19:85:df:81:a4:4d:3c:82:0f:b2:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:35 2025 GMT
            Not After : Feb  3 18:15:35 2026 GMT
        Subject: CN=0735E8A198050008CDA40E4D8631A92F3AAA1372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:3b:01:3f:89:c0:73:16:8b:c0:0c:f8:ca:
                    0d:14:4c:95:14:64:b6:c9:41:9c:41:b5:fc:89:17:
                    a6:07:3b:5f:5a:06:5e:6a:91:dd:79:d2:91:21:0e:
                    e7:af:b0:e8:a8:12:3b:9c:5c:cc:56:b0:d0:1c:c1:
                    b6:d4:2c:dc:ab:52:a3:b0:5c:d8:13:c8:74:92:45:
                    5b:ef:54:22:7b:dd:05:a5:7f:8e:33:30:be:60:0d:
                    4c:aa:28:9c:8f:97:67:67:67:66:85:9c:ba:4c:e2:
                    03:58:d8:89:f6:82:77:a8:79:3c:46:03:ad:8e:3d:
                    a1:e8:b3:cc:3f:4c:93:11:8e:1d:57:f8:27:77:b9:
                    42:af:e9:70:3c:bd:86:32:32:01:c0:35:a5:d7:86:
                    82:d7:2a:43:5a:39:55:eb:67:5e:a6:1d:9e:2c:d0:
                    c3:dd:18:3f:3a:31:ae:39:8f:d3:07:d1:e9:32:d0:
                    cd:e1:d8:50:b3:24:c2:db:df:f6:14:fb:77:84:6c:
                    00:bd:72:e4:cd:60:8d:74:26:ef:df:46:c4:98:1a:
                    e4:9b:79:3c:65:dd:60:87:46:05:e8:50:8f:c5:e8:
                    69:24:4d:9c:12:95:85:1c:76:c5:1d:4a:b8:3e:3a:
                    f5:48:df:b6:dc:a9:29:b8:ee:9e:75:63:4a:9c:fd:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:35:E8:A1:98:05:00:08:CD:A4:0E:4D:86:31:A9:2F:3A:AA:13:72
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e34382e302f32312d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:c6:04:a3:d0:87:18:cf:bc:f8:19:b3:9c:ff:72:36:50:2c:
         ad:71:b6:fc:c4:d4:2c:38:43:2e:7b:04:29:53:08:f5:fa:c0:
         a6:15:9e:2a:8a:58:8d:00:7b:b4:2a:55:f3:a0:8e:93:a0:e9:
         b6:46:59:28:95:36:bc:fa:59:50:14:e8:6b:4e:f5:4e:f4:e3:
         42:b7:a7:c7:2b:52:77:f2:be:87:25:09:7e:8b:2e:de:a0:8e:
         4c:24:95:86:47:30:e9:c7:93:15:d4:c2:d2:31:26:5a:f1:5f:
         0a:ee:ee:6b:7e:e4:fa:a1:e1:c8:52:97:a8:01:eb:e3:20:11:
         17:17:23:5a:c1:87:65:c9:2c:70:65:23:cd:fd:90:ff:00:a4:
         10:f6:83:69:10:14:26:6a:0e:fc:97:27:0d:74:e7:23:17:1b:
         fd:66:de:59:01:05:83:82:82:8d:98:62:54:88:6a:ba:99:0f:
         24:57:d0:dd:f8:b5:9f:96:3d:22:40:40:dd:da:1a:ca:60:86:
         fc:d4:2e:28:cf:9c:bc:ca:2f:db:7d:7d:0d:6d:0c:8c:56:d4:
         47:41:b2:ce:8f:a3:9b:af:37:22:f7:97:d1:39:0b:7b:9a:c3:
         15:23:85:e1:21:f9:6f:71:e5:77:17:70:31:1f:54:2c:47:bb:
         7c:92:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:49 2025 by rpki-client