Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32342d3234203d3e20323731383839.roa
File:                     3139302e392e3132342e302f32342d3234203d3e20323731383839.roa (raw, json)
Hash identifier:          osNFTI3vVfA3k37m46Lp72KcIQGCJEwgKoAzfC0BKUQ=
Subject key identifier:   E7:76:96:F5:45:E3:8B:00:B9:47:33:DB:B0:BD:B3:F2:BC:35:1E:9F
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       75F2F79EE6C721E3612D1D2C3446FCF8D527F53C
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32342d3234203d3e20323731383839.roa
Signing time:             Wed 23 Jul 2025 03:50:00 +0000
ROA not before:           Wed 23 Jul 2025 03:45:00 +0000
ROA not after:            Wed 22 Jul 2026 03:50:00 +0000
asID:                     271889
IP address blocks:        190.9.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f2:f7:9e:e6:c7:21:e3:61:2d:1d:2c:34:46:fc:f8:d5:27:f5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Jul 23 03:45:00 2025 GMT
            Not After : Jul 22 03:50:00 2026 GMT
        Subject: CN=E77696F545E38B00B94733DBB0BDB3F2BC351E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:79:11:de:0d:65:93:c0:13:12:bc:1f:75:
                    6a:50:14:c6:a1:ed:19:f9:ec:18:47:85:15:bd:99:
                    72:5b:f4:6e:79:62:40:bd:3d:83:77:5d:34:07:2d:
                    8c:ba:8d:5c:df:ff:f7:87:21:5a:fe:a9:90:28:a7:
                    cb:0f:90:2f:ae:70:af:b5:1f:f6:cf:a9:3e:87:d6:
                    2f:05:57:08:f6:9d:0b:de:00:57:1c:ea:2c:df:04:
                    4a:61:02:ee:6d:46:dc:3d:e6:7e:13:50:ad:68:e1:
                    8d:33:13:45:f0:8e:b4:a5:bb:9a:a5:68:a5:51:23:
                    03:0a:d7:cb:e7:d2:82:17:25:54:7d:4c:6e:51:32:
                    a9:0e:3e:62:b8:69:e0:ba:d8:92:1c:d5:81:24:52:
                    d6:2f:e1:92:59:74:b4:1e:85:5e:20:5d:1d:98:51:
                    d4:45:28:a0:3c:3a:b0:7b:8c:1f:97:b1:cb:33:59:
                    e3:06:39:24:88:88:ea:cc:05:d1:53:bb:91:78:9e:
                    07:06:d9:93:79:96:f9:d5:9e:66:0d:d2:b0:15:19:
                    a1:8b:7f:e3:de:6b:86:84:e2:94:24:35:f2:5f:4e:
                    9f:d3:f3:d6:88:98:1c:05:16:51:2f:2e:a8:7c:51:
                    f0:cf:97:59:a6:38:f6:fe:be:65:5a:34:dd:fb:c6:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:76:96:F5:45:E3:8B:00:B9:47:33:DB:B0:BD:B3:F2:BC:35:1E:9F
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32342d3234203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:51:e6:98:14:91:78:9f:02:35:69:e4:e5:0d:c6:ea:68:
         c2:5d:ac:e0:6b:2f:02:d9:57:fc:74:30:6a:5c:cf:88:24:a2:
         46:43:ff:d9:6d:92:3e:78:30:bb:7f:fb:ef:f4:80:a1:18:33:
         2c:b4:02:5d:1f:13:bb:48:e4:de:59:d3:6d:a4:3e:0b:1e:03:
         72:be:64:99:af:fe:d8:39:ee:1f:1b:8b:ae:71:9a:44:68:3b:
         68:1f:ac:fb:58:7d:4b:a8:88:cb:e0:40:ee:49:55:bf:15:10:
         3a:62:3d:be:21:68:33:47:61:22:89:f5:1c:76:49:a9:a7:c1:
         2e:65:5e:57:c9:61:dd:3c:7c:f7:f8:df:ad:4e:26:9e:25:9b:
         c2:f3:35:83:2a:26:72:84:b3:cc:9e:6e:78:ae:14:be:21:cd:
         29:29:ae:c2:55:a0:e6:1e:16:5c:61:96:26:e2:16:5a:55:8a:
         73:85:ea:86:62:80:73:ff:0f:c8:f7:31:71:5f:1d:b3:8b:dd:
         ab:84:30:42:33:b7:de:f0:37:f2:c0:de:84:53:e6:c2:a6:e5:
         43:10:a5:ae:5b:9e:83:7f:d2:f1:e1:85:4d:7d:e2:2e:82:b4:
         73:99:16:aa:69:a1:d5:30:24:8d:74:f3:5a:81:d9:f6:fd:98:
         82:13:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:36:01 2025 by rpki-client