Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3139302e36342e302f31382d3138203d3e203133343839.roa
File:                     3230312e3139302e36342e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          SJwEq7df5avZMYqt5Cfmh297RkOdRb267esuy01MXoU=
Subject key identifier:   32:A6:21:F9:BC:50:89:B2:58:7F:7F:1A:68:C3:54:3B:FB:6D:47:E3
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       50FB0D6A01EB0CF366392BB8FFF5B59ED698F8F1
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3139302e36342e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:33:31 +0000
ROA not before:           Tue 04 Feb 2025 18:28:31 +0000
ROA not after:            Tue 03 Feb 2026 18:33:31 +0000
asID:                     13489
IP address blocks:        201.190.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:0d:6a:01:eb:0c:f3:66:39:2b:b8:ff:f5:b5:9e:d6:98:f8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Feb  4 18:28:31 2025 GMT
            Not After : Feb  3 18:33:31 2026 GMT
        Subject: CN=32A621F9BC5089B2587F7F1A68C3543BFB6D47E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:c6:f5:9d:6c:0c:af:d0:0a:c5:b6:6c:45:
                    36:3b:8c:aa:29:93:fc:c5:ed:39:0b:a9:14:42:9d:
                    4f:bc:5b:e0:40:ba:ca:c6:f7:6a:a6:11:23:3b:a3:
                    46:c1:9f:f5:0e:af:83:37:6d:f4:f6:3a:01:58:61:
                    cf:95:1d:a5:b3:d6:2d:29:eb:24:3a:f2:dc:aa:78:
                    50:dc:d4:ec:40:ee:6d:d7:29:f4:d6:a7:7d:14:a0:
                    88:2f:89:e8:4a:78:d3:b3:74:24:66:3a:cd:2c:1d:
                    2a:51:1f:da:ac:0d:62:ee:6c:eb:56:35:04:39:0f:
                    71:03:36:2d:5a:3f:b6:9a:79:5b:0c:dc:bc:53:b3:
                    42:21:3b:f3:2a:7c:46:5d:3a:0c:cc:d4:21:53:25:
                    85:08:19:ca:56:71:0a:8a:4a:68:c3:95:3b:fe:45:
                    34:40:ff:58:cc:0d:9a:1b:9d:58:c6:ae:33:8e:31:
                    b9:ec:dc:a5:d4:ee:f4:82:61:76:ba:fa:24:18:ba:
                    0e:63:59:d2:01:63:cc:82:06:36:9f:45:8d:fb:5e:
                    76:07:ff:3f:92:92:32:16:7a:98:a6:3d:af:57:82:
                    61:3b:6b:63:70:3b:ff:46:53:b2:9d:08:de:22:60:
                    8f:6a:92:6d:0c:be:b7:3f:50:1e:84:0f:07:27:3e:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A6:21:F9:BC:50:89:B2:58:7F:7F:1A:68:C3:54:3B:FB:6D:47:E3
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3139302e36342e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:0e:1f:7f:9a:e0:2d:21:a8:55:b8:74:0a:3b:a6:48:3d:
         92:fb:a8:2e:6d:b2:97:44:84:3e:33:2d:a9:f8:0a:1e:f9:cd:
         d8:84:c9:f9:14:e6:e6:e5:b6:6a:57:11:55:6a:f1:52:39:96:
         ee:7d:7c:b2:27:9a:41:75:d8:be:42:1b:a4:fa:e4:c1:58:0c:
         1b:7e:a9:e6:65:78:c8:ed:18:81:f9:7e:3e:c7:6a:d9:f0:ae:
         a5:72:21:09:29:fe:1f:98:bc:63:ea:ba:b3:75:8e:3f:2f:a6:
         70:26:7d:eb:47:8d:db:c7:cb:e1:95:97:1a:c5:25:ec:42:94:
         ef:64:27:35:94:26:87:69:4c:73:1f:83:c3:e3:88:8a:28:00:
         77:87:76:3b:5b:41:8c:02:4a:59:df:fb:9d:3c:38:f2:e9:a2:
         42:f6:8c:0a:f5:91:c6:16:36:30:a4:11:a6:b2:83:bb:70:6a:
         c1:f8:e6:c2:0b:d0:7e:3f:39:c2:7d:e6:a8:68:ef:86:8f:a8:
         16:62:92:0f:12:03:72:29:b0:43:63:1e:fc:d3:59:55:20:cd:
         f7:d0:15:fd:e3:16:14:f4:2e:aa:d5:71:47:df:87:5c:00:d0:
         37:93:aa:6c:7e:ef:68:85:fb:e7:5d:6e:cc:ba:d2:f4:b0:7e:
         3e:e6:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:53 2025 by rpki-client