Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa
File:                     3139302e382e3138342e302f32312d3234203d3e203532343733.roa (raw, json)
Hash identifier:          Npf57mkFtm1f1kQzWqudiF1CGYGIVL9QncH5WOIb2Sw=
Subject key identifier:   53:81:0F:41:D9:D8:52:65:63:64:1E:8B:A7:A5:C7:FD:CF:8D:45:CB
Certificate issuer:       /CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
Certificate serial:       109454868AF7B9EAD427384594AE9B32A0C84C8E
Authority key identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa
Signing time:             Tue 04 Feb 2025 18:34:38 +0000
ROA not before:           Tue 04 Feb 2025 18:29:38 +0000
ROA not after:            Tue 03 Feb 2026 18:34:38 +0000
asID:                     52473
IP address blocks:        190.8.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:94:54:86:8a:f7:b9:ea:d4:27:38:45:94:ae:9b:32:a0:c8:4c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
        Validity
            Not Before: Feb  4 18:29:38 2025 GMT
            Not After : Feb  3 18:34:38 2026 GMT
        Subject: CN=53810F41D9D8526563641E8BA7A5C7FDCF8D45CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:3d:95:30:e4:73:29:28:66:d9:5d:5e:70:
                    5d:66:bc:72:4a:57:3d:29:88:8e:22:e6:23:10:b1:
                    97:5b:b8:29:06:75:3c:41:97:01:76:dc:60:f8:60:
                    0a:94:e0:d0:23:a3:a8:93:28:14:8e:d8:5b:4f:6f:
                    0a:06:7f:b6:81:00:de:46:53:9a:45:f6:23:3c:7e:
                    c3:30:72:00:0c:83:2a:1f:a5:09:a2:15:6d:1e:e7:
                    76:af:61:92:b4:3c:80:89:85:73:c1:75:d8:47:2d:
                    3d:90:c1:eb:81:7e:76:34:2b:7a:3e:69:94:ea:f9:
                    31:74:81:6b:7d:06:f7:85:0b:dd:84:82:a3:64:89:
                    0e:c1:08:d6:c0:d3:a7:78:31:bf:56:e7:82:59:6b:
                    7f:8d:24:f3:c8:9d:64:25:e5:67:f6:f1:d8:1a:f2:
                    da:e4:06:48:88:54:b2:e0:7e:20:e7:8d:7d:39:1e:
                    fa:99:68:1d:10:04:aa:82:a2:18:63:d4:e3:e5:40:
                    13:14:71:b5:72:54:67:b1:8d:e2:21:e0:e3:0d:fc:
                    f2:21:0d:b2:d7:d8:8c:27:86:e5:b1:78:4a:85:d7:
                    2d:e6:e6:4e:20:89:1a:29:f7:2c:3b:33:d2:a2:6c:
                    1c:56:7e:3c:37:64:2b:30:24:79:ca:e8:8a:ee:a8:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:0F:41:D9:D8:52:65:63:64:1E:8B:A7:A5:C7:FD:CF:8D:45:CB
            X509v3 Authority Key Identifier:
                keyid:D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:42:e5:05:04:02:d3:ec:85:84:7d:2b:1c:8c:af:e0:c1:
         a7:35:48:fe:75:d2:03:5e:dd:53:5d:0c:0e:cc:01:cf:f0:d8:
         ad:8d:64:c1:50:62:ae:51:00:de:f5:bd:48:15:50:5d:07:e6:
         e5:15:13:85:c7:55:24:ef:50:21:7b:73:1e:7a:14:9d:72:af:
         15:ff:27:cf:5f:ae:1a:c4:c0:4b:12:10:0d:8d:0f:b7:93:59:
         25:64:48:fb:9f:b4:8f:59:bd:d6:b8:85:bd:b0:d5:37:2d:21:
         bf:0d:55:0b:93:dd:83:af:ab:15:7f:c7:2b:98:ec:09:ba:e8:
         28:9a:f0:c0:76:38:24:60:2e:73:64:ff:58:71:80:4d:ea:9f:
         9e:af:a7:1c:66:8f:61:1d:92:88:c6:b3:00:41:4e:24:e5:3e:
         ba:57:e2:22:79:9a:ab:9a:89:6c:e6:4f:36:86:c2:8c:40:53:
         58:7e:3f:6e:3e:e2:51:5d:ce:99:0c:63:7d:a6:74:4b:28:55:
         cc:ea:f0:d4:d0:92:56:1d:41:c4:6b:ae:fe:48:68:ea:5c:2e:
         4d:17:ef:ef:f3:ee:a2:9a:b5:b6:9e:85:f4:d6:be:d0:16:e8:
         4b:62:72:15:2d:90:9f:ab:47:1d:f3:8f:0c:2e:2c:c4:58:f4:
         3b:b1:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:14:50 2025 by rpki-client