Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa
File:                     3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          TwENXE9MINDzJxezpU6RLWqWFSi6cvkXDAa+XXkISdY=
Subject key identifier:   7E:6B:58:15:63:39:36:88:14:95:A1:D9:33:BE:F0:3A:E7:E0:E6:B4
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       53739D197E23C425C994C35843EE649B1CCD7CAB
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:10:31 +0000
ROA not before:           Tue 04 Feb 2025 18:05:31 +0000
ROA not after:            Tue 03 Feb 2026 18:10:31 +0000
asID:                     61468
IP address blocks:        190.103.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:73:9d:19:7e:23:c4:25:c9:94:c3:58:43:ee:64:9b:1c:cd:7c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Feb  4 18:05:31 2025 GMT
            Not After : Feb  3 18:10:31 2026 GMT
        Subject: CN=7E6B5815633936881495A1D933BEF03AE7E0E6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:41:f9:64:55:ff:2d:20:f4:7e:1c:fa:8b:
                    6b:63:0a:59:71:99:78:09:e5:63:af:c3:2d:db:33:
                    90:79:76:ff:7f:d4:1d:c7:66:1c:2d:e8:bf:ee:c2:
                    57:c2:04:49:dc:bb:44:d3:da:d5:4a:38:70:98:8f:
                    4d:1b:80:4a:50:7d:96:f5:54:6c:d8:0c:85:c8:59:
                    f7:6f:f2:f5:45:08:b0:a7:e1:e2:b0:03:3f:45:12:
                    e1:0c:2c:f4:f7:24:6a:8b:22:f6:96:24:37:fe:54:
                    64:32:4e:e9:f6:2c:a1:5c:3c:c5:20:ff:3c:2f:b1:
                    21:03:ae:2b:c0:32:9d:dc:fc:b8:e8:dc:ba:80:3d:
                    55:13:81:23:86:9a:2f:05:fb:e5:1e:f1:3c:20:7d:
                    4e:be:be:7c:8b:cf:8c:be:49:51:3f:57:a8:e3:2a:
                    89:12:fc:ed:8b:c9:63:c2:72:d4:79:27:8c:3c:fc:
                    1a:e5:ee:16:15:55:26:c6:b7:c5:40:b9:8b:64:3b:
                    c5:c1:2e:77:ca:9b:46:36:04:1c:1f:f6:7a:05:97:
                    58:2d:fa:f8:90:5a:d8:4a:21:bb:8d:7a:bf:ed:df:
                    b6:54:6d:26:11:3e:ba:b3:50:c1:3e:17:33:71:3d:
                    bd:0e:40:d0:03:5b:f3:ac:b2:b8:f2:ff:49:28:f4:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:58:15:63:39:36:88:14:95:A1:D9:33:BE:F0:3A:E7:E0:E6:B4
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:34:14:41:d5:a0:a1:76:16:63:eb:03:43:c8:46:c1:f9:b9:
         7e:b7:c1:f6:28:b5:52:54:c4:37:0a:ae:48:ca:e8:fd:b3:a0:
         58:3a:fb:ff:53:37:97:65:c2:e0:a6:09:00:31:4d:2f:aa:f5:
         6f:08:32:dd:14:03:ac:06:02:b2:6d:cf:a0:43:29:04:a8:63:
         ca:df:01:0e:30:76:45:70:df:7a:8c:cc:c9:47:f8:60:51:bb:
         c1:95:d6:e7:5b:a5:a0:c8:2e:09:e7:10:55:6f:87:f4:a3:70:
         b9:10:af:30:ca:0b:84:8c:a4:d1:d9:4d:a4:cf:5d:8e:f8:dc:
         69:ed:a2:25:e7:a2:9e:6d:87:e5:a7:c7:ce:55:b4:e0:7a:03:
         7b:97:8c:af:33:62:ad:a6:36:91:68:e2:10:e5:e9:3b:bc:bc:
         ad:f7:58:22:2d:50:90:55:06:30:66:cc:98:d9:a2:ba:03:d0:
         de:cf:a6:c3:b0:e6:7f:01:7a:56:65:ea:32:84:fb:ce:e7:1a:
         e5:7e:be:e9:e7:8d:8e:23:65:14:41:d0:ab:8b:a6:65:20:34:
         10:30:17:88:2a:8f:06:fb:e5:88:0c:bd:b5:ac:c9:66:8a:d6:
         a8:84:b6:2c:c8:b4:98:a2:34:a7:ff:f9:7d:9a:33:fa:f0:6d:
         07:98:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:03 2025 by rpki-client