Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa
File:                     3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa (raw, json)
Hash identifier:          hI6BuuEOygsRNwokpkqSg1Fi4zWVBYsZ/dAqqX8+kZ0=
Subject key identifier:   62:39:A4:6F:D4:18:4F:F2:4B:1C:23:87:62:B9:FC:78:9C:02:87:96
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       45DEAA2DD7ED93749294DC42FEF0A4E5696A08ED
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:24:56 +0000
ROA not before:           Tue 04 Feb 2025 18:19:56 +0000
ROA not after:            Tue 03 Feb 2026 18:24:56 +0000
asID:                     11014
IP address blocks:        190.104.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:de:aa:2d:d7:ed:93:74:92:94:dc:42:fe:f0:a4:e5:69:6a:08:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:19:56 2025 GMT
            Not After : Feb  3 18:24:56 2026 GMT
        Subject: CN=6239A46FD4184FF24B1C238762B9FC789C028796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:ce:cd:00:1f:6c:b5:23:d9:9d:d8:49:8b:
                    b7:fb:6f:9f:aa:f1:44:29:0f:ba:43:a6:08:e3:8a:
                    37:5e:e2:47:df:ba:1a:f3:36:07:7e:21:31:ef:b4:
                    c5:67:12:d5:1f:53:2b:40:5e:e1:d7:b0:f1:93:48:
                    e1:12:46:cf:1a:13:c3:12:47:0a:22:79:0f:74:be:
                    7e:1f:dd:07:d6:a3:30:08:b2:7a:b6:a3:b9:75:47:
                    87:63:9b:c8:32:dc:c4:01:d9:c6:c8:90:70:39:07:
                    d5:bc:29:5f:2a:65:ec:18:31:00:ee:4e:df:a5:5f:
                    33:fa:52:36:cd:f6:78:fa:53:c2:2e:61:b6:f3:28:
                    68:ef:05:d7:f5:3b:9a:0e:03:9c:7f:f1:ee:36:f9:
                    b3:67:7f:29:30:b9:9c:c2:02:61:f9:75:3d:b5:09:
                    1c:ab:29:ee:57:f3:57:46:02:cb:25:c1:94:a0:d4:
                    fa:07:65:ef:27:ee:0c:4b:e4:0d:ee:7b:78:22:07:
                    3f:98:9c:8d:c4:36:ef:d8:41:cc:9d:01:8f:42:62:
                    bb:79:bd:69:07:e9:d2:b2:47:c3:b2:39:ec:38:0b:
                    cd:a7:12:c9:e4:28:30:7a:b6:8b:03:bf:65:7d:4b:
                    38:0d:4b:3e:97:4d:94:da:99:96:2f:a3:f3:3d:e7:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:39:A4:6F:D4:18:4F:F2:4B:1C:23:87:62:B9:FC:78:9C:02:87:96
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:15:2b:20:d8:46:50:57:07:55:38:b8:f2:20:d9:03:6f:
         88:35:8d:5c:fd:0c:d7:b5:50:c8:67:cf:65:78:f0:0e:ff:6e:
         c9:ec:66:2e:1a:6f:7a:11:b9:8f:1d:8d:b1:b1:b5:23:26:82:
         80:bd:0f:5d:17:82:6d:13:7b:86:fb:79:9e:46:4b:dd:25:b3:
         6d:46:f2:22:e1:17:6a:44:f4:64:5f:5a:10:7c:a9:95:e8:73:
         d1:80:72:09:43:32:16:59:7d:fc:92:f5:c7:36:48:9a:9c:c9:
         9b:e8:b2:1e:c6:68:ac:05:71:d0:38:bd:b0:e0:50:8f:fa:c8:
         ce:5e:4c:00:15:d7:71:f5:5d:5d:da:f6:4d:d1:70:ff:af:48:
         41:f6:67:95:4b:70:be:cf:45:f9:9c:d5:d2:52:26:ec:aa:b6:
         37:9d:1c:b7:7f:09:a0:54:4b:d1:3f:fa:86:83:7b:6d:87:ac:
         53:b8:94:c4:71:b1:27:3a:9d:12:4d:48:5e:86:53:e5:82:da:
         2e:dc:d2:81:3a:6e:b5:6d:e9:b5:27:38:7a:4c:3e:60:6d:ac:
         19:83:5b:3e:5a:3d:fb:d4:61:56:52:31:d6:e8:e9:68:45:01:
         9e:d2:ca:2d:90:3e:79:06:91:6d:17:48:fa:3a:c7:dc:a9:b1:
         df:71:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:45 2025 by rpki-client