Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e36322e302e302f31362d3234203d3e203134373534.roa
File:                     3139302e36322e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          ke/Cgu3bj1vjVyLAU70PfKh8MLMZdjxvrrl9f/9SMek=
Subject key identifier:   A7:91:28:B0:C8:16:74:33:33:0F:5B:31:0B:1D:AF:0F:48:4E:BD:B5
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       649815E14C2128D2F0D560F20F5F600EB5E446A7
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e36322e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:00:59 +0000
ROA not before:           Tue 04 Feb 2025 17:55:59 +0000
ROA not after:            Tue 03 Feb 2026 18:00:59 +0000
asID:                     14754
IP address blocks:        190.62.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:98:15:e1:4c:21:28:d2:f0:d5:60:f2:0f:5f:60:0e:b5:e4:46:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Feb  4 17:55:59 2025 GMT
            Not After : Feb  3 18:00:59 2026 GMT
        Subject: CN=A79128B0C8167433330F5B310B1DAF0F484EBDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:5b:af:a8:71:1d:05:3b:1a:ea:04:f7:f4:
                    e9:90:0b:82:c3:cc:71:86:cf:91:e1:21:c2:55:a0:
                    15:74:02:cd:67:0b:cc:cc:ba:d3:b8:ad:66:2f:d1:
                    de:8b:d9:ed:c0:cf:d2:3a:92:9d:bb:ee:a4:e4:b5:
                    25:87:3f:2e:5a:88:d0:93:d0:e0:34:d5:06:bd:94:
                    4a:d1:d6:01:04:5c:bc:48:77:78:3f:97:34:bf:0f:
                    13:66:ec:77:77:af:34:c8:9d:da:f3:1b:ab:01:2c:
                    92:18:9e:7b:3c:a7:cc:84:4b:9e:27:06:4a:c2:b6:
                    ea:d1:ee:8a:b9:40:c7:3b:91:b4:9b:4a:8e:b4:7c:
                    7f:3c:c9:b8:f3:4b:93:b9:05:3f:a8:76:c6:51:a4:
                    18:34:60:02:ea:fc:fe:65:33:75:c7:9d:77:61:4d:
                    71:7a:04:77:32:97:93:b6:6e:1a:04:4c:1f:8a:da:
                    22:97:76:3c:6c:b4:65:2d:7e:13:66:89:7c:43:84:
                    a0:94:08:e2:dc:29:17:6a:82:a5:57:16:b8:e0:31:
                    22:67:c4:9e:42:94:64:3b:ce:80:8e:b3:51:13:99:
                    b2:34:c2:d6:6c:a3:d9:d8:36:63:68:ad:d5:57:b8:
                    7a:c5:ac:49:cf:08:bc:a6:0a:42:02:f2:ba:7f:5d:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:91:28:B0:C8:16:74:33:33:0F:5B:31:0B:1D:AF:0F:48:4E:BD:B5
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e36322e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:02:cb:d1:f8:70:e3:db:8d:b1:57:99:95:87:65:1d:32:6d:
         45:ec:8b:c1:cf:13:51:6f:9f:20:ad:05:1c:40:9d:00:ef:69:
         ae:88:7b:80:36:2d:cf:ce:a1:77:56:1d:7e:d5:ad:07:6b:ba:
         4b:bb:91:dc:d0:32:c9:d9:b9:44:52:79:73:1f:cd:f1:4b:46:
         2b:80:4a:ac:1e:2a:ba:67:96:b6:b1:9d:3a:49:7b:f8:85:e0:
         bb:f4:3a:fa:3b:dc:ff:ab:25:3c:77:a9:0a:ec:63:21:65:98:
         37:97:39:92:56:ac:09:8b:de:58:5e:b1:85:70:73:bd:5d:14:
         6c:59:ca:dd:c4:4b:cc:1d:2f:41:59:33:01:0f:8b:68:d2:ff:
         5a:12:88:c5:09:7b:d5:82:66:85:13:d7:c3:6c:8e:d1:1b:d1:
         fe:11:e5:31:92:5c:ee:a3:95:99:27:f7:41:19:0b:1d:af:44:
         c9:dd:42:a9:30:ad:a6:76:3b:79:47:6f:85:69:be:57:59:63:
         c9:7c:16:c9:80:b6:0e:b4:3d:27:cd:99:ba:5a:08:fd:9a:c1:
         78:17:c3:40:cd:a8:c4:68:ff:12:cf:6b:d6:a4:b1:19:8a:1c:
         76:e1:14:e5:5c:d9:9f:da:6b:fb:d8:a6:ef:a7:93:44:38:4f:
         0d:d7:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:02:19 2025 by rpki-client