Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e39332e34382e302f32302d3234203d3e203238303338.roa
File:                     3139302e39332e34382e302f32302d3234203d3e203238303338.roa (raw, json)
Hash identifier:          ub/Z7nEPe9zhbFHDuKsaqoyYZyIqZlUHNW4SuhfeNnw=
Subject key identifier:   F6:CA:FC:BE:95:29:AD:18:49:CA:F3:65:4B:ED:4B:8B:C9:91:F9:62
Certificate issuer:       /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial:       676BA6297EC5A0B5E387AD956AABA6D60CDEE469
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e39332e34382e302f32302d3234203d3e203238303338.roa
Signing time:             Tue 04 Feb 2025 19:59:49 +0000
ROA not before:           Tue 04 Feb 2025 19:54:49 +0000
ROA not after:            Tue 03 Feb 2026 19:59:49 +0000
asID:                     28038
IP address blocks:        190.93.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6b:a6:29:7e:c5:a0:b5:e3:87:ad:95:6a:ab:a6:d6:0c:de:e4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
        Validity
            Not Before: Feb  4 19:54:49 2025 GMT
            Not After : Feb  3 19:59:49 2026 GMT
        Subject: CN=F6CAFCBE9529AD1849CAF3654BED4B8BC991F962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:dd:a7:3f:2f:71:55:01:81:ce:c4:3a:69:
                    9f:a0:ec:7c:9b:35:e5:31:9b:5f:c6:97:f7:bf:52:
                    df:33:02:f9:50:e5:5b:b9:ac:3d:5e:50:55:ce:7a:
                    dc:07:a8:dd:88:f8:ac:20:44:ff:55:06:1e:ca:91:
                    3b:c7:60:0b:2c:4e:a2:95:13:f8:cb:ba:a0:84:fe:
                    c5:49:98:eb:21:a8:36:98:3b:fc:46:b6:dc:91:c5:
                    25:85:c3:8a:e9:07:34:17:5e:57:b4:db:a1:a2:06:
                    fa:b4:35:49:0f:c9:c3:40:e1:8b:84:9c:d8:d2:95:
                    f9:89:6f:04:23:4f:7d:60:86:dd:c1:d9:52:42:c2:
                    ee:b7:7f:58:b7:98:f7:65:27:21:5f:c9:5a:f9:62:
                    cf:6c:66:14:ea:d8:f8:c3:18:b6:c7:09:46:a0:eb:
                    af:43:d1:bd:76:10:34:03:da:ab:9c:32:7b:11:26:
                    0c:c3:f7:51:63:03:51:22:60:21:45:d5:38:ec:87:
                    89:0b:e7:3a:17:27:9c:e5:63:38:ba:33:60:e7:4b:
                    6d:c4:20:0a:cd:ec:c3:ab:4c:68:06:9b:fa:53:5b:
                    6f:2d:35:d3:a2:4b:b3:d2:d5:ff:cb:69:88:ee:e8:
                    4d:4a:52:7b:7d:a3:bc:77:8b:67:23:c4:02:f1:c9:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:FC:BE:95:29:AD:18:49:CA:F3:65:4B:ED:4B:8B:C9:91:F9:62
            X509v3 Authority Key Identifier:
                keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e39332e34382e302f32302d3234203d3e203238303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:41:5c:8a:36:e5:be:7e:de:ff:48:14:58:eb:44:1e:a0:bf:
         a5:fb:db:28:6b:42:77:06:9d:3b:92:20:a1:db:20:b7:84:97:
         e0:7a:de:8d:b9:03:f5:c9:f3:8a:78:4c:5e:97:fc:a4:67:f9:
         e3:62:56:94:74:d7:73:70:f4:19:9d:fe:a6:85:1d:a0:99:47:
         ab:1d:44:74:6e:6c:93:9e:cb:a3:dd:dd:6f:9f:3a:31:e1:3e:
         7e:90:0e:ee:87:da:f8:ec:5f:a2:cf:f1:9b:6a:29:d3:a2:9b:
         83:6b:6f:f5:23:80:74:51:23:cd:f8:47:04:36:d9:bd:c4:a6:
         20:5b:0c:ec:a1:c9:39:d5:32:62:ce:f1:c4:73:ff:e9:1f:68:
         bb:ac:0d:b4:f9:ba:a1:78:49:75:53:10:71:6c:81:c5:97:1f:
         c5:07:9d:df:09:83:06:e7:87:0f:cd:65:dc:7a:b7:93:a1:bd:
         33:5a:a3:7c:2d:6d:8b:71:59:29:14:50:28:da:d7:40:53:34:
         20:63:b9:c9:b9:b5:92:20:0d:a5:86:ec:c1:a0:42:8c:d0:35:
         74:a9:1e:72:2f:40:98:8c:f0:8b:b9:d6:c9:52:ad:99:6f:d0:
         f4:92:f0:65:f4:d8:be:9c:38:c5:fd:5e:bb:90:6c:ee:7a:50:
         3a:61:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:03:30 2025 by rpki-client