Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137362e302f32302d3234203d3e20323632353839.roa
File:                     3139302e39342e3137362e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          o/fg/Z2hRYqlPUpjGibRkCkvPJoW3RqkdNbOgAtHWxo=
Subject key identifier:   75:C3:37:BA:73:DB:A9:B0:9C:7C:96:65:C9:48:AD:5E:F7:71:7E:8C
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       2B9539F6CD59B77B9D1CB1C1147A5F7A85DF4531
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137362e302f32302d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:35:33 +0000
ROA not before:           Tue 04 Feb 2025 18:30:33 +0000
ROA not after:            Tue 03 Feb 2026 18:35:33 +0000
asID:                     262589
IP address blocks:        190.94.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:95:39:f6:cd:59:b7:7b:9d:1c:b1:c1:14:7a:5f:7a:85:df:45:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Feb  4 18:30:33 2025 GMT
            Not After : Feb  3 18:35:33 2026 GMT
        Subject: CN=75C337BA73DBA9B09C7C9665C948AD5EF7717E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:02:12:30:37:c8:83:ca:3f:5b:79:a0:0a:
                    9f:66:7a:d9:ce:86:dd:ea:57:c3:96:37:60:e4:7a:
                    03:db:30:a2:fb:eb:e8:e8:be:f0:11:0a:2e:c0:c1:
                    80:26:14:ab:9a:16:cb:12:4b:58:a6:bd:ba:cb:a7:
                    be:5c:76:e8:b9:7e:65:06:f5:cd:76:10:b5:5b:41:
                    d1:66:27:07:16:d8:6d:8d:ec:b2:70:f9:94:0f:87:
                    ce:ef:10:38:8a:cb:35:10:05:3c:b9:a0:8f:13:fe:
                    b6:14:09:d0:ac:ef:d4:f5:8d:3d:dc:31:8b:10:88:
                    81:af:23:a0:59:0f:cd:eb:4c:2a:3f:4b:95:ad:cd:
                    3f:ab:92:56:06:21:34:b8:00:85:9e:26:bd:a0:ab:
                    79:99:f0:d0:e1:dd:af:6f:8c:17:b9:38:c2:d3:e5:
                    0e:5e:e5:de:2d:5b:d3:d2:f6:c6:0a:6e:2d:57:f0:
                    22:26:4e:33:65:11:db:61:7a:a1:e6:1d:b1:03:08:
                    54:7a:49:90:fb:45:a5:e2:4b:de:14:73:9b:65:24:
                    ed:07:5c:f9:f6:4e:7a:f6:d3:a8:5b:7a:24:18:ab:
                    00:85:57:b6:95:16:1e:f6:2c:1b:a3:75:b0:43:39:
                    3b:e1:29:dd:3f:54:7b:41:19:4b:9f:4f:1c:21:2a:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C3:37:BA:73:DB:A9:B0:9C:7C:96:65:C9:48:AD:5E:F7:71:7E:8C
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137362e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:94:ed:12:88:ca:fb:8a:4c:49:6e:f1:cd:11:08:71:59:
         11:7f:2f:ee:08:41:11:d5:e2:85:f1:1d:7b:dd:9b:7b:75:45:
         74:7a:25:a4:38:7b:a0:09:22:ce:ed:f7:45:32:c9:8d:f3:e1:
         b6:21:7b:9e:42:26:01:3f:8e:7c:fa:ff:eb:c8:a1:f0:a7:4e:
         55:7e:eb:7b:bc:42:f0:18:96:80:fd:d0:3c:a8:70:bb:b8:51:
         24:d6:16:cf:1e:ba:f8:58:2f:b1:93:2e:20:b5:db:4b:c1:bf:
         cf:27:85:aa:ea:70:a5:31:e3:95:3e:af:cb:d4:83:d7:6a:47:
         18:6a:0a:56:64:fe:20:94:da:53:a5:85:f7:21:d5:a3:f3:37:
         6d:39:77:72:37:cc:c5:28:4d:0a:54:69:23:a6:a6:12:71:60:
         74:bb:81:62:56:18:08:7b:54:71:ee:d5:1a:7f:01:f6:88:76:
         e2:5b:7a:2a:65:28:0e:b3:5b:a9:71:f3:c9:e2:9b:32:e7:ae:
         a1:b3:09:23:d9:e5:c2:77:e7:1e:28:cc:cf:b7:02:ac:76:49:
         39:08:e8:11:76:b3:0b:bd:29:92:85:2a:72:a6:c0:d0:f3:ff:
         25:36:c7:5a:d3:56:51:66:ea:6d:0d:a0:7e:c3:e6:b9:87:6c:
         42:44:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:24 2025 by rpki-client