Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
File:                     3139302e34302e302e302f31342d3234203d3e2036313437.roa (raw, json)
Hash identifier:          xH1mBsySNUmVUjkQbY6cP5K3rwkDhsMdX9XLUHXAo3U=
Subject key identifier:   BD:A4:D2:1C:18:04:4E:9E:5E:17:6F:8C:6E:48:04:90:08:94:D5:0E
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       569F879489BEA60B13CCC3B7521B5A6022F1CC59
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:11 +0000
ROA not before:           Tue 04 Feb 2025 20:00:11 +0000
ROA not after:            Tue 03 Feb 2026 20:05:11 +0000
asID:                     6147
IP address blocks:        190.40.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9f:87:94:89:be:a6:0b:13:cc:c3:b7:52:1b:5a:60:22:f1:cc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:11 2025 GMT
            Not After : Feb  3 20:05:11 2026 GMT
        Subject: CN=BDA4D21C18044E9E5E176F8C6E4804900894D50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:ac:32:42:23:ef:f8:3d:55:b6:38:43:f5:
                    4b:e5:f5:b1:72:e7:81:46:59:b7:17:1e:83:d9:34:
                    ed:2c:e7:8f:e1:15:41:3b:96:6e:67:1a:67:0d:29:
                    9e:7e:64:cc:e6:5c:22:ca:31:3f:a4:78:2a:81:d9:
                    2b:c1:be:a9:d3:bc:1d:45:b6:42:20:68:50:ba:39:
                    42:5f:d4:e1:a1:69:c1:3c:bc:25:5a:8c:ad:ad:bb:
                    4b:c7:71:c0:d2:8b:24:f0:72:3e:7f:f8:c3:b7:98:
                    a3:46:79:7e:5e:5c:e6:58:2d:da:9c:ec:52:25:4a:
                    19:83:ae:fe:27:20:d3:71:1f:f5:96:e6:0f:94:fe:
                    a9:48:44:3a:03:de:9a:10:86:4c:2f:95:0a:f9:67:
                    e8:34:b6:29:cc:9d:c0:b1:6b:5c:a8:44:b8:2d:18:
                    2d:e1:48:02:fb:9b:c0:03:d1:d9:e1:83:95:82:09:
                    3a:f7:70:b9:73:2c:0a:e7:71:01:bc:a9:55:7e:da:
                    d1:9f:29:c8:05:10:5d:00:ac:37:cb:c9:f5:66:40:
                    02:81:c2:a2:01:59:c3:4b:51:2c:98:fd:af:f1:8a:
                    51:44:cb:95:8a:f8:7b:74:5b:c2:b8:f3:1d:9e:01:
                    36:21:bf:a1:18:cd:70:d5:f2:2b:1e:4d:7b:ee:a0:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A4:D2:1C:18:04:4E:9E:5E:17:6F:8C:6E:48:04:90:08:94:D5:0E
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.40.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:64:c9:bc:d2:29:d2:d7:4e:16:22:44:77:d0:37:f9:e7:
         9b:fb:da:7b:8a:c9:29:73:4b:1c:c1:d2:2c:3f:84:1e:91:4c:
         c1:b1:33:8a:09:12:0f:ba:be:10:d8:f9:b6:d6:7a:58:9a:09:
         52:46:4c:8d:83:87:e5:9c:f3:75:7b:36:eb:74:f5:76:2b:c6:
         88:f0:98:ba:13:6b:3a:0a:cf:82:9c:be:58:d8:91:00:9b:dd:
         64:78:80:ef:89:1c:6d:49:e1:11:ba:ed:2f:e0:b7:fd:c2:8b:
         50:76:09:e9:81:12:1c:6a:9c:fc:52:4e:7a:0d:11:e7:11:08:
         d1:6c:39:82:bd:4a:f3:c4:ae:46:30:34:14:c8:1b:84:cf:ed:
         af:e3:43:1a:e1:c1:ef:a7:7c:a7:92:8d:aa:61:3f:03:04:8e:
         42:7f:ad:c5:30:7d:2a:d1:80:ff:f3:e9:20:79:25:fa:2c:c3:
         6c:65:3c:0a:ee:ba:7d:29:ac:4f:ae:54:94:b9:9b:cf:45:05:
         0a:10:f3:d1:d4:1a:f1:e2:7a:5f:87:41:05:27:ac:2b:0a:ec:
         03:48:80:21:ed:3e:cb:70:bc:a8:b1:ba:18:7d:e0:3a:bb:12:
         c0:6d:be:12:78:da:39:cd:de:12:55:3d:ec:92:2f:8e:21:dd:
         50:b2:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:26:17 2025 by rpki-client