Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa
File:                     3139302e37312e38352e302f32342d3234203d3e20323732383239.roa (raw, json)
Hash identifier:          ihOAdJzccTKuyi38oUYLNshT2qRD004PFSqC+x0VYYA=
Subject key identifier:   0E:78:B9:1E:69:B8:38:A0:B9:DC:72:52:57:31:D4:56:88:C2:0F:0F
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4812CE546C13204A1238B78E258B72956CADE521
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa
Signing time:             Tue 04 Feb 2025 18:33:31 +0000
ROA not before:           Tue 04 Feb 2025 18:28:31 +0000
ROA not after:            Tue 03 Feb 2026 18:33:31 +0000
asID:                     272829
IP address blocks:        190.71.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 12:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:12:ce:54:6c:13:20:4a:12:38:b7:8e:25:8b:72:95:6c:ad:e5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Feb  4 18:28:31 2025 GMT
            Not After : Feb  3 18:33:31 2026 GMT
        Subject: CN=0E78B91E69B838A0B9DC72525731D45688C20F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:a5:ab:0f:08:a1:47:84:ce:47:a2:b2:80:
                    17:4b:4e:9c:20:ec:06:aa:df:c6:38:a4:50:de:d7:
                    8c:de:9a:ac:fc:a2:62:6b:5e:bf:46:aa:7a:35:5a:
                    3e:19:12:f1:9d:83:7d:0a:a6:22:24:7f:8f:18:90:
                    80:c6:24:72:33:cc:4f:93:c0:e4:e6:72:16:77:a6:
                    5c:52:50:9b:4c:8f:f3:29:b3:08:62:a3:14:8d:4e:
                    67:e1:87:16:94:f6:4c:bc:54:c6:01:f9:7f:45:b8:
                    5f:dc:ec:f8:ee:fd:3a:e3:cd:96:ac:27:5b:8b:a9:
                    8f:ba:7c:40:26:4f:11:f6:d8:1b:5b:ff:50:75:5e:
                    09:db:ce:b8:fb:b0:04:30:7e:64:7d:28:5c:c2:54:
                    a4:93:0b:26:d0:b7:d7:82:62:d5:96:48:5a:33:24:
                    e7:2b:38:32:eb:5d:4d:79:ba:26:1d:1f:57:30:51:
                    d4:96:f6:a1:63:57:e8:5d:f3:c7:01:49:61:f1:44:
                    40:f4:2a:f6:9f:76:27:ef:81:da:c3:74:e7:2b:5d:
                    b0:52:fe:4c:41:3a:4e:c1:96:48:46:5a:eb:e2:cd:
                    74:2b:5e:6f:3e:95:5a:2b:79:95:a9:9b:23:4f:ef:
                    2c:0f:9a:18:90:2d:75:ef:97:c5:8d:6b:a3:b1:e3:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:B9:1E:69:B8:38:A0:B9:DC:72:52:57:31:D4:56:88:C2:0F:0F
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:68:5b:d9:70:07:99:e8:98:90:6e:d9:4a:da:7c:bb:e1:
         cb:81:f2:cc:31:b3:ae:4b:1a:68:45:6d:d0:0b:d3:56:19:1c:
         af:00:d6:25:10:4d:4f:c7:cf:8f:3f:10:b7:c7:e2:6d:65:ad:
         28:08:9d:65:4d:7b:e8:c4:a2:9e:51:a1:84:76:d5:f9:c3:49:
         f6:98:05:37:75:6b:74:19:25:b6:7f:a0:b5:c5:33:1f:4c:7a:
         2a:00:54:41:20:67:f9:4b:24:f9:96:11:a6:c7:e4:b2:65:da:
         51:f0:2c:28:f1:30:f3:65:25:7b:52:42:94:b5:a9:7f:69:67:
         9e:a3:7f:5e:0b:73:86:c0:b7:7e:10:19:18:af:1c:ff:f2:43:
         44:c2:66:72:2c:ea:ce:fc:f0:e9:a4:87:f7:6d:f2:9a:36:58:
         4f:33:20:b3:a7:05:d5:ce:21:7e:0f:b7:40:ea:d4:36:d4:5e:
         e6:5d:3a:3d:3b:51:82:eb:11:d8:49:e2:0c:42:59:a8:c6:8d:
         be:cd:a5:ad:d5:49:6b:40:7d:e4:0e:28:09:46:e6:30:a4:43:
         98:f1:96:1a:77:d9:83:42:b2:da:af:c4:f3:39:3a:b7:54:44:
         2d:e5:ae:79:9a:2d:1d:f4:f0:99:34:1c:19:bd:a7:97:c1:70:
         3f:76:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:19:50 2025 by rpki-client