Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa
File:                     3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa (raw, json)
Hash identifier:          Fc2VPsSmAVhPgrYX6kgUlrwHnPeOBxGdh5r2jZrAFho=
Subject key identifier:   44:15:2C:3B:69:78:B6:CB:BB:99:5C:65:F3:8C:28:52:93:A0:A6:71
Certificate issuer:       /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Certificate serial:       02F60C3CA317CD9B3AFE96F5D303B65D4BCE578F
Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa
Signing time:             Tue 04 Feb 2025 18:06:28 +0000
ROA not before:           Tue 04 Feb 2025 18:01:28 +0000
ROA not after:            Tue 03 Feb 2026 18:06:28 +0000
asID:                     262259
IP address blocks:        191.102.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f6:0c:3c:a3:17:cd:9b:3a:fe:96:f5:d3:03:b6:5d:4b:ce:57:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
        Validity
            Not Before: Feb  4 18:01:28 2025 GMT
            Not After : Feb  3 18:06:28 2026 GMT
        Subject: CN=44152C3B6978B6CBBB995C65F38C285293A0A671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:7a:54:27:b2:23:d5:ee:2a:90:1a:9b:0d:
                    70:96:93:78:30:94:98:87:b9:f2:29:24:72:7e:f5:
                    bc:15:4f:7a:4d:8e:12:ea:7e:00:e3:51:35:8b:18:
                    43:96:e7:78:36:f7:a4:65:39:a7:74:1f:fd:54:af:
                    e4:c1:79:03:e3:29:bf:88:88:c5:52:0a:19:68:24:
                    2c:e2:e4:fd:24:ac:da:53:a9:e9:77:d4:46:ee:1e:
                    9d:31:17:50:c7:d2:d1:7a:b3:61:39:3c:32:aa:05:
                    e4:1f:40:fc:66:7b:0e:58:c7:cd:db:17:20:b6:0e:
                    88:09:e2:f7:67:29:50:dd:ca:50:58:99:7e:65:c2:
                    7d:38:ee:bd:ad:ba:52:63:94:66:50:c5:64:ab:b0:
                    45:02:fe:bd:1a:27:b4:b2:ec:78:65:47:e9:8e:1d:
                    0f:90:53:17:17:55:e9:91:32:da:2b:f3:38:6c:12:
                    dc:e8:1a:c1:62:55:b3:99:ac:5d:c6:ce:60:2e:56:
                    9f:9b:9c:94:4d:3d:3c:03:e4:d5:a9:72:04:e5:99:
                    88:7e:d2:14:6b:51:77:18:94:0b:af:08:14:ba:6b:
                    09:e9:85:fa:fd:6c:39:21:33:77:7f:58:14:af:2b:
                    13:04:6b:4d:5b:55:d9:da:a1:b0:0d:08:11:1d:25:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:15:2C:3B:69:78:B6:CB:BB:99:5C:65:F3:8C:28:52:93:A0:A6:71
            X509v3 Authority Key Identifier:
                keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:11:b0:3a:ee:65:f9:52:a0:f0:21:96:87:f5:9c:86:3e:e9:
         fa:52:6c:9d:e9:5e:0e:2d:00:a6:66:ed:a8:19:83:84:3b:e4:
         0d:7c:19:69:aa:3b:fc:b7:ed:ae:b6:b6:fb:ef:77:86:95:0a:
         5b:ed:4b:92:48:eb:4b:ba:c3:26:ad:00:5e:34:6e:58:68:c4:
         c2:a0:47:40:33:1d:5a:4d:d3:cc:ab:66:68:a4:ee:d9:36:7d:
         9a:63:cb:7f:fd:87:2f:ed:fc:7f:c5:45:2d:c5:d5:d9:cf:bd:
         af:67:90:67:37:13:b6:57:9d:4a:5f:bb:9e:67:e3:c1:f5:91:
         73:74:6b:31:c1:9a:34:ac:0b:f9:f3:1a:a2:f4:95:01:ca:f2:
         ce:c1:0c:4e:c6:e1:2f:01:2e:fe:2c:fe:1e:d5:4c:66:ed:0d:
         df:78:56:9c:96:29:2a:46:68:65:57:af:fc:4b:ae:fc:07:49:
         41:44:b0:01:c2:d1:58:03:59:42:e2:bf:00:2e:63:2d:da:2a:
         c8:39:a9:22:55:0c:f2:9a:ce:99:96:1c:9d:9e:89:1c:69:71:
         ab:47:1b:41:26:31:ef:ae:ce:59:b3:a9:55:e6:84:41:da:cf:
         05:eb:93:3a:b7:e2:c9:39:ea:bb:14:06:7a:45:24:bc:1b:ac:
         96:e0:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:42:51 2025 by rpki-client