Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3234203d3e203238313131.roa
File:                     3139302e3131322e302e302f31392d3234203d3e203238313131.roa (raw, json)
Hash identifier:          lx0CPDyrkNTaiEk1E8+UrOPBNePe+rRnSGLKV4KwVTs=
Subject key identifier:   F4:33:08:1E:E3:DB:D2:37:52:F3:6C:C5:65:5C:07:93:71:DD:C4:89
Certificate issuer:       /CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Certificate serial:       38C12080848F72F46A773CC1649C8DB9F4F2A5BD
Authority key identifier: 3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3234203d3e203238313131.roa
Signing time:             Tue 04 Feb 2025 18:34:27 +0000
ROA not before:           Tue 04 Feb 2025 18:29:27 +0000
ROA not after:            Tue 03 Feb 2026 18:34:27 +0000
asID:                     28111
IP address blocks:        190.112.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c1:20:80:84:8f:72:f4:6a:77:3c:c1:64:9c:8d:b9:f4:f2:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
        Validity
            Not Before: Feb  4 18:29:27 2025 GMT
            Not After : Feb  3 18:34:27 2026 GMT
        Subject: CN=F433081EE3DBD23752F36CC5655C079371DDC489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:01:f9:41:94:a2:4d:a4:31:d5:5b:73:e0:
                    cb:46:36:b4:41:32:1b:12:d7:45:0d:15:2a:e0:75:
                    a0:41:85:1c:8d:45:98:cf:67:6e:41:5e:eb:52:45:
                    de:8c:e4:bb:13:d3:94:0d:7f:40:65:4b:fe:cb:52:
                    49:a4:60:0b:57:ad:1b:2b:1e:7e:42:6e:65:22:8c:
                    ea:b6:9e:51:d1:9c:20:f9:fc:6e:c9:10:66:4b:58:
                    6a:1a:46:27:22:39:67:a7:73:ce:3d:e7:18:6a:57:
                    b8:59:a8:9e:6f:91:94:46:da:f8:4b:36:81:e4:ae:
                    b1:2a:e8:4a:ac:d2:57:4f:35:6d:f8:85:1d:ac:5b:
                    ec:a8:5e:68:ec:17:09:90:28:69:bd:c1:77:3c:2d:
                    f3:bb:ef:60:fc:fe:88:2d:d8:72:4f:12:32:f3:1c:
                    03:41:09:c0:14:96:13:ce:75:cd:46:73:10:fc:67:
                    81:22:9c:3e:3c:b6:3f:3a:fb:2c:96:34:9b:62:1f:
                    2d:49:64:68:ba:42:7b:e4:20:33:69:23:ab:4e:2c:
                    1b:a1:2f:da:97:e5:d3:46:db:f7:78:21:ad:38:9a:
                    59:fa:ab:72:a1:df:df:1c:d7:32:89:ae:42:39:9a:
                    1d:bf:d3:8d:6f:ab:4b:42:3e:7c:d7:95:fa:b6:9c:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:33:08:1E:E3:DB:D2:37:52:F3:6C:C5:65:5C:07:93:71:DD:C4:89
            X509v3 Authority Key Identifier:
                keyid:3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3234203d3e203238313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:49:c9:18:bd:43:c1:43:df:70:78:80:df:af:1a:9a:c9:e2:
         99:99:b2:9a:40:64:d0:d3:ad:1b:19:2f:5f:9b:51:33:b6:eb:
         84:8a:d1:b3:4a:fe:89:2c:8e:7e:34:05:7d:31:25:87:a6:de:
         23:14:43:57:d5:91:3e:31:a4:a0:79:19:b4:58:8e:6d:6d:a3:
         22:c1:16:68:bf:d1:52:8c:f4:d5:8e:72:d5:4d:63:e8:a9:53:
         55:ee:7a:93:97:e0:25:d4:15:82:94:68:ee:c6:41:01:cb:59:
         7d:1b:23:77:59:db:e0:a3:20:cc:e9:70:ba:8a:52:39:7e:f9:
         b7:7e:4d:5d:68:fe:7b:95:c9:42:2f:fb:bd:86:9c:cc:a0:4c:
         98:37:59:d0:7d:f8:04:46:cb:59:87:39:ff:dd:fd:34:ac:37:
         83:54:a7:38:bc:e2:89:3c:50:54:63:0b:fa:db:84:fc:b8:2b:
         ad:65:d6:81:25:66:84:68:b8:9a:5e:e7:fc:09:ad:9e:f3:e7:
         93:61:48:3c:59:5b:51:a7:cb:00:a7:70:7f:42:cd:da:2f:e4:
         42:15:a8:24:ea:33:99:31:27:cb:9b:ce:9d:94:16:a1:57:39:
         99:3e:cb:6f:8c:6f:84:22:e0:2d:d3:6e:49:26:92:8c:72:2c:
         6c:25:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:29:34 2025 by rpki-client