Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa
File:                     3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa (raw, json)
Hash identifier:          MTpw5rYV6ZIO4EnA5uDG+9IMFw4UZSxYQVx7NMrgRNU=
Subject key identifier:   67:20:8F:60:9E:EA:1F:9A:62:7D:17:0B:00:F3:29:8C:6A:B7:51:39
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       1476482D2BC8A09E71101EE7548AAFD04E035F3C
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:25:00 +0000
ROA not before:           Tue 04 Feb 2025 18:20:00 +0000
ROA not after:            Tue 03 Feb 2026 18:25:00 +0000
asID:                     11014
IP address blocks:        190.111.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:76:48:2d:2b:c8:a0:9e:71:10:1e:e7:54:8a:af:d0:4e:03:5f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:20:00 2025 GMT
            Not After : Feb  3 18:25:00 2026 GMT
        Subject: CN=67208F609EEA1F9A627D170B00F3298C6AB75139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8c:5c:01:de:b9:9c:17:17:66:84:2c:db:7a:
                    45:af:28:d6:52:e7:e9:34:92:32:e8:e5:6b:05:d2:
                    13:d6:cc:5d:38:db:79:58:63:df:72:5d:fb:da:4f:
                    d2:02:70:13:bc:89:4b:16:11:4a:8e:a0:cc:e1:b5:
                    97:02:dc:25:12:c2:a3:dd:5c:a4:fb:da:68:69:d7:
                    2b:51:32:3a:90:02:6c:b6:4b:05:46:85:69:b6:ea:
                    49:2c:fd:b9:4c:e3:87:05:15:7a:0d:f5:cc:ee:80:
                    16:9c:a4:5f:62:e1:71:c7:31:b5:b7:b6:70:ec:f4:
                    3e:5e:9f:aa:12:8a:e9:c0:72:c3:a9:c6:de:4a:66:
                    02:20:de:44:fc:ae:e9:97:e8:df:04:bf:ce:94:34:
                    0c:7e:c1:26:ee:15:8b:2a:00:c5:3d:f4:47:55:04:
                    e7:c9:62:cb:b7:e8:ec:d7:bc:d9:78:a7:2b:dd:e9:
                    02:f0:bc:7a:6a:66:26:42:ca:72:ab:d1:aa:58:57:
                    ac:8c:26:8e:36:8a:83:59:1f:2e:da:3b:f9:cd:ec:
                    52:cb:f3:67:bb:49:b3:1b:14:b3:eb:50:4c:61:75:
                    4e:d2:cf:ad:8b:cc:a9:fb:fe:13:d3:9d:eb:b1:ab:
                    72:cb:e2:7c:29:d5:af:a0:41:ca:5b:4e:d3:ae:63:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:8F:60:9E:EA:1F:9A:62:7D:17:0B:00:F3:29:8C:6A:B7:51:39
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:0f:92:18:b6:fb:18:34:88:d1:fb:49:87:9e:7d:1d:81:
         73:74:67:e7:d6:c7:a9:ef:32:01:21:08:e8:88:1f:13:5c:e1:
         16:d4:ac:1c:8f:20:77:f1:9e:d4:fd:6d:16:84:1d:f2:1c:b3:
         5f:b7:2f:c6:6b:63:ae:b6:38:9a:48:b8:b6:54:d4:00:54:1e:
         0b:25:84:e8:19:5d:86:8b:b2:1c:73:b6:70:8d:91:2b:05:cc:
         7e:aa:a7:ce:82:21:08:2d:3f:bb:1f:03:07:f1:c3:6a:d0:02:
         d5:90:5a:19:0c:7f:a1:1f:54:49:7f:f3:17:94:d1:11:58:b8:
         d8:e0:b7:ba:a3:1a:74:96:4e:78:36:5d:b4:46:7f:02:48:08:
         2d:a7:02:9a:2b:b8:1c:66:ab:4d:1f:89:d9:02:0f:6b:09:3c:
         d2:03:77:8d:d0:73:99:99:0d:3f:76:43:c1:a3:24:a9:22:d7:
         a8:fa:2a:05:ba:0f:13:91:f5:c1:5d:1a:6f:fc:59:b5:1d:ff:
         37:87:bf:d6:ea:c7:ca:41:e7:cb:39:cf:00:31:6a:f6:6f:ac:
         e8:ef:11:c7:6b:bc:9f:49:0b:b5:03:b4:84:e6:bc:4a:dc:91:
         fd:b9:4b:8d:56:68:46:b5:ea:9d:19:3a:fb:17:dd:08:78:ed:
         fd:fb:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:57 2025 by rpki-client