Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e39362e302f32302d3234203d3e203131303134.roa
File:                     3139302e31322e39362e302f32302d3234203d3e203131303134.roa (raw, json)
Hash identifier:          ECIHK3NBxcYbYoZWGspPzJqfDQu77zShHoulEMbNN7Q=
Subject key identifier:   B7:D6:26:A6:4A:58:59:54:9D:D2:0D:8B:17:C7:C0:16:68:A7:AA:81
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       79720F1989CCFD61D9CB33C202933B94220A618C
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e39362e302f32302d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:25:00 +0000
ROA not before:           Tue 04 Feb 2025 18:20:00 +0000
ROA not after:            Tue 03 Feb 2026 18:25:00 +0000
asID:                     11014
IP address blocks:        190.12.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:72:0f:19:89:cc:fd:61:d9:cb:33:c2:02:93:3b:94:22:0a:61:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:20:00 2025 GMT
            Not After : Feb  3 18:25:00 2026 GMT
        Subject: CN=B7D626A64A5859549DD20D8B17C7C01668A7AA81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:aa:1b:92:fc:c5:c8:29:f7:94:e1:08:a0:
                    ec:d8:e5:69:a3:71:b2:f2:1a:bd:f1:c5:99:34:49:
                    9d:3f:ef:e3:78:fb:05:ee:b8:7a:c9:75:b4:c6:aa:
                    49:72:83:91:0b:da:9d:40:8f:8e:25:96:2c:c1:d2:
                    a7:59:84:1f:0a:19:43:3d:98:ab:72:27:8c:4d:c2:
                    15:a7:7b:1f:a7:32:22:3a:b4:ce:95:80:7f:64:38:
                    2f:c0:33:a5:83:c7:e8:86:2b:b7:8f:11:18:db:5a:
                    dd:97:2c:41:0e:2e:d4:43:ca:c0:1f:bd:12:57:e5:
                    e5:a3:06:a3:c5:bc:81:d9:b8:1f:ab:bb:0a:3d:c8:
                    27:6d:0b:c6:8f:a3:ad:4c:44:09:41:7d:0d:cd:0c:
                    14:1c:0f:86:96:b0:0e:0c:81:9f:dc:db:d6:9c:bf:
                    14:ea:0a:22:e5:e0:64:07:a7:70:2b:04:32:a8:b5:
                    a3:29:fa:13:58:c3:84:6b:63:de:fc:38:39:8e:e6:
                    94:7f:ff:d0:63:23:7e:6c:0c:70:7b:93:6f:d9:bb:
                    06:b6:3d:eb:54:16:06:8b:a6:80:b3:87:9c:f9:40:
                    62:8d:4a:61:87:1c:81:e6:53:47:04:ca:c4:da:23:
                    9b:e1:ff:c2:f1:3f:6a:32:c8:9d:a5:b1:d7:7d:88:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:26:A6:4A:58:59:54:9D:D2:0D:8B:17:C7:C0:16:68:A7:AA:81
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e39362e302f32302d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:44:8e:1d:55:60:96:b3:7a:35:b8:c1:fa:b1:15:f9:88:
         84:8c:c6:72:6d:a8:51:45:80:10:7c:d7:3e:b9:68:a4:4e:1b:
         fb:25:d4:ff:9c:a4:4e:b3:f7:39:9b:78:aa:2f:22:0f:b1:94:
         7a:d7:ba:3a:5a:c7:ef:50:c3:3c:c3:d1:cc:85:7a:dc:e5:34:
         3a:a5:44:55:80:01:c1:23:80:c6:db:80:69:37:46:f3:3e:46:
         c7:84:ad:16:97:01:82:7f:10:9f:e4:cc:f7:0c:4e:f2:8f:ac:
         29:c4:ea:b5:dd:28:64:96:a8:08:ca:e8:67:32:f0:56:f7:4a:
         b4:bf:ea:02:f5:db:14:d1:1d:e0:36:b5:ae:ff:96:30:8f:62:
         87:c0:6e:e1:93:ab:e4:2d:46:66:b5:93:a1:3a:5f:23:db:a9:
         ef:3a:7d:27:31:96:9a:43:3e:1f:95:42:5b:30:ee:57:6f:75:
         e4:b0:65:3f:9c:55:06:8b:e4:67:28:07:7a:bf:d8:ac:7b:ff:
         50:dd:1c:17:b8:d5:3e:5e:77:54:a5:fe:c2:d1:d2:79:31:15:
         a2:f5:b3:52:10:f3:fc:0b:9f:17:5a:e6:55:5d:6b:38:75:75:
         fb:c5:cc:a5:5a:32:d9:31:a2:16:df:14:38:b4:89:33:d4:02:
         ff:61:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:45 2025 by rpki-client