Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e302e302f31382d3234203d3e203237373631.roa
File:                     3139302e3138342e302e302f31382d3234203d3e203237373631.roa (raw, json)
Hash identifier:          2IIOQebExgkNFwrC7BJyE2kwhwR5tAqFEzkPIIBg4Lw=
Subject key identifier:   42:E3:BD:04:CA:1E:DB:DC:03:9E:5F:45:E9:1C:86:16:B9:94:DE:23
Certificate issuer:       /CN=A379859384774565F06B5085B32618E97FC5CFD1
Certificate serial:       332032FF5C466E0C2F1D8B4654292235A1E9B2ED
Authority key identifier: A3:79:85:93:84:77:45:65:F0:6B:50:85:B3:26:18:E9:7F:C5:CF:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e302e302f31382d3234203d3e203237373631.roa
Signing time:             Tue 04 Feb 2025 18:36:55 +0000
ROA not before:           Tue 04 Feb 2025 18:31:55 +0000
ROA not after:            Tue 03 Feb 2026 18:36:55 +0000
asID:                     27761
IP address blocks:        190.184.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:32:ff:5c:46:6e:0c:2f:1d:8b:46:54:29:22:35:a1:e9:b2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A379859384774565F06B5085B32618E97FC5CFD1
        Validity
            Not Before: Feb  4 18:31:55 2025 GMT
            Not After : Feb  3 18:36:55 2026 GMT
        Subject: CN=42E3BD04CA1EDBDC039E5F45E91C8616B994DE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:da:1d:e6:56:e1:74:9d:d4:bf:4b:20:8e:
                    b0:21:45:e8:fb:9b:1a:65:5e:22:64:d4:f1:15:75:
                    18:da:4b:71:13:78:e9:de:68:c2:be:aa:f7:de:c5:
                    ab:86:b8:58:45:29:a3:7f:dd:17:2d:74:fa:8f:76:
                    77:8a:73:62:40:6f:e0:51:dd:90:4b:21:2f:02:c6:
                    b3:8e:f0:5e:a8:da:b9:ad:92:a6:79:f1:d8:17:26:
                    70:8b:b4:c8:df:f7:47:bb:a6:fa:06:4c:cd:92:92:
                    34:5d:21:5a:ea:ca:c3:5b:95:5b:32:19:5a:25:33:
                    db:41:da:61:47:c8:dd:ba:fb:09:e5:a8:ca:18:a4:
                    01:a6:b3:29:c2:06:35:4e:4a:1b:50:ba:e6:db:a4:
                    7b:61:68:04:72:50:94:58:4d:24:18:9b:f0:ef:af:
                    19:d0:45:6c:90:a8:00:a1:24:ac:89:8d:09:4b:7c:
                    2b:45:e0:5e:20:db:66:22:bc:20:d8:9d:66:b6:40:
                    cf:34:63:8b:92:4f:4a:52:3b:a1:cf:3f:40:f0:e1:
                    2d:c0:c0:96:c4:02:a8:85:06:36:37:90:34:9a:e9:
                    74:2b:4f:12:e1:af:b0:2c:d0:e2:89:be:67:2d:f7:
                    43:be:73:29:0a:9e:a8:91:88:ef:c6:da:5c:6c:e2:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:BD:04:CA:1E:DB:DC:03:9E:5F:45:E9:1C:86:16:B9:94:DE:23
            X509v3 Authority Key Identifier:
                keyid:A3:79:85:93:84:77:45:65:F0:6B:50:85:B3:26:18:E9:7F:C5:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e302e302f31382d3234203d3e203237373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:20:a3:7e:dc:04:27:ee:a5:89:ed:3a:3a:4e:29:36:e7:4f:
         a4:5f:ae:98:1e:5f:95:c0:07:f0:fa:ec:24:04:12:e3:e5:7c:
         eb:7d:d0:b8:c5:b0:21:12:77:d5:87:89:a9:9c:81:ba:41:5c:
         a1:2d:e8:44:ad:e0:5a:80:6c:17:23:51:05:48:2a:69:05:0c:
         7b:26:f2:f6:08:80:fe:da:91:f7:d5:f6:1d:cb:02:85:c2:74:
         ac:92:1c:78:fc:bc:1d:9e:dc:11:e1:78:b7:1e:57:2d:6d:f9:
         8a:de:66:d3:be:9d:36:94:e2:64:e7:61:e2:e4:d9:0c:1d:11:
         cd:04:4f:88:28:25:ff:77:6e:a5:cf:aa:45:96:fc:16:9d:7a:
         99:41:59:df:2e:19:e1:fe:80:41:43:68:8c:84:12:a4:ef:27:
         6d:65:84:d5:83:25:23:c1:02:18:41:92:e4:67:32:11:af:71:
         75:35:3d:8f:50:8a:7a:34:6f:6e:82:c5:b9:da:68:16:4b:af:
         9a:88:38:6b:04:b3:b6:6a:51:24:87:f1:68:1f:04:58:5f:55:
         7b:e4:e6:eb:30:4f:3d:61:e1:bf:b6:30:e9:f3:0d:74:8f:06:
         6d:c3:6b:fa:c7:15:11:ca:bf:fb:81:45:fa:df:bd:16:2d:4f:
         ad:bc:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:04:31 2025 by rpki-client