Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e302e3136302e302f31392d3234203d3e203238313131.roa
File:                     3139302e302e3136302e302f31392d3234203d3e203238313131.roa (raw, json)
Hash identifier:          klTy24sTqjKnhaPeDZIDVOOsfEMZdfnm+P4VXOFIbnk=
Subject key identifier:   7A:D4:79:B4:EB:E2:82:10:80:38:AB:1A:0F:08:54:49:A0:DB:80:4B
Certificate issuer:       /CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Certificate serial:       79DD6590AD1B821303B35B7EFD01471B29461D18
Authority key identifier: 3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e302e3136302e302f31392d3234203d3e203238313131.roa
Signing time:             Tue 04 Feb 2025 18:34:26 +0000
ROA not before:           Tue 04 Feb 2025 18:29:26 +0000
ROA not after:            Tue 03 Feb 2026 18:34:26 +0000
asID:                     28111
IP address blocks:        190.0.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:65:90:ad:1b:82:13:03:b3:5b:7e:fd:01:47:1b:29:46:1d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
        Validity
            Not Before: Feb  4 18:29:26 2025 GMT
            Not After : Feb  3 18:34:26 2026 GMT
        Subject: CN=7AD479B4EBE282108038AB1A0F085449A0DB804B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:40:cc:f6:24:50:97:33:35:11:82:69:40:
                    79:b4:14:b2:05:f7:98:0a:1a:8d:c8:d0:0b:ef:be:
                    87:63:76:17:a4:85:d7:30:c0:24:8d:63:bc:f6:1b:
                    77:9e:88:5b:0e:8b:d5:30:f4:0a:13:5f:19:70:75:
                    d0:94:63:cc:34:d0:41:ba:e5:36:34:20:4f:14:97:
                    c3:f7:9c:37:31:03:be:87:3b:85:42:db:2e:aa:79:
                    e7:db:23:fe:d4:e0:b3:7a:a6:5b:c4:ab:5b:d2:92:
                    47:9b:cb:6c:ca:d1:f1:3e:d2:51:81:7d:7d:3e:ff:
                    96:8c:ea:ba:22:06:97:5a:20:a1:3d:a6:76:87:81:
                    89:74:e2:0f:a9:69:be:e4:89:f5:ab:98:db:84:cb:
                    e0:5c:23:82:3e:18:1c:31:f5:86:13:b2:c7:56:21:
                    ba:1d:16:76:5a:91:8f:40:eb:f1:18:1e:87:48:b2:
                    c0:bb:6c:18:d9:20:f5:57:66:a4:dc:ac:63:24:e4:
                    a7:9e:47:b6:37:a5:58:03:8c:91:65:0b:21:a2:8c:
                    8a:4b:98:6b:ab:6b:ff:f9:cb:f5:1f:3f:01:9c:12:
                    46:50:02:7d:0b:ab:8d:66:5f:9e:c9:5e:41:8a:60:
                    31:ef:16:79:17:1f:2c:7d:94:6d:0a:61:e9:e1:ea:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D4:79:B4:EB:E2:82:10:80:38:AB:1A:0F:08:54:49:A0:DB:80:4B
            X509v3 Authority Key Identifier:
                keyid:3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e302e3136302e302f31392d3234203d3e203238313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:16:d1:97:38:ae:51:6c:50:0b:00:37:c4:1e:39:d2:b6:
         19:1b:17:8b:9b:d9:c3:7f:1d:85:2e:f0:a8:d9:7e:69:2a:c0:
         de:05:c0:c8:c6:97:d9:57:d0:1c:65:5f:de:89:cb:68:6d:4d:
         e5:b7:03:5d:00:79:1f:66:ec:5c:88:ad:5e:fc:a3:f8:b5:0f:
         59:ca:84:62:84:66:f3:37:75:1f:dc:62:93:36:95:45:67:0b:
         78:ab:f4:86:1b:78:51:96:1c:1d:7d:74:11:a8:66:dc:0d:5a:
         7f:58:82:ed:63:8a:26:a4:3b:cc:ce:42:0e:40:8c:a2:74:c1:
         eb:0c:54:16:11:38:23:1f:c3:ab:65:d2:55:1f:31:90:8b:c2:
         87:25:e4:97:ea:5c:a0:74:2a:51:c4:b1:e0:ab:36:37:21:b8:
         e2:91:d0:5d:ab:e5:60:d5:a3:ec:c0:1c:82:7d:c1:00:c2:be:
         ad:f0:b2:f8:aa:27:39:f2:9d:d7:16:f2:da:52:03:ea:d8:f9:
         9d:55:bd:17:56:6d:fd:ca:96:10:54:c0:87:87:a8:9e:d9:a0:
         18:0d:4c:c3:d0:ee:cb:c1:7d:05:4e:f6:68:cb:3a:1f:3c:70:
         57:f8:75:3d:15:bd:3f:cc:2d:13:c3:eb:d2:68:8b:f4:45:c0:
         ac:42:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:48:02 2025 by rpki-client