Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
File:                     3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          7hL8H/QT0H3pNjeDIcC6CHdP9ozfDuFwvBu42dZF9c8=
Subject key identifier:   E6:CC:67:15:99:B3:11:3C:DE:E0:B9:9D:60:D2:F9:63:09:20:27:96
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       4D7DCA44A5912226A6440C52DF768CC95790FDAB
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 17:59:04 +0000
ROA not before:           Tue 04 Feb 2025 17:54:04 +0000
ROA not after:            Tue 03 Feb 2026 17:59:04 +0000
asID:                     262589
IP address blocks:        190.211.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7d:ca:44:a5:91:22:26:a6:44:0c:52:df:76:8c:c9:57:90:fd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Feb  4 17:54:04 2025 GMT
            Not After : Feb  3 17:59:04 2026 GMT
        Subject: CN=E6CC671599B3113CDEE0B99D60D2F96309202796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:07:15:e6:c2:a7:03:5c:3d:97:9b:41:a0:
                    e1:92:26:30:7e:a0:8d:29:41:14:79:79:86:26:a5:
                    89:61:24:99:a2:63:6e:a0:61:78:d9:3b:5c:0b:f1:
                    f3:f8:d7:01:f5:2c:94:fa:47:a6:89:4e:23:bd:3b:
                    0e:5c:7f:12:57:a7:14:2b:a0:eb:df:54:7b:fb:30:
                    8d:ac:a3:31:07:47:68:5b:0f:23:b4:52:2f:9c:a4:
                    6a:7e:e4:1d:01:07:6a:87:9b:ea:b5:b6:d8:36:66:
                    ef:61:e2:d5:50:8a:33:b1:cf:16:ed:65:25:a7:58:
                    ad:83:27:9a:b7:1b:76:e4:c2:5c:b2:f5:22:fa:fa:
                    95:39:db:30:d9:c6:26:2f:cb:c0:5b:00:a3:6e:81:
                    31:d6:28:e4:40:36:fa:71:55:e1:8f:44:df:f8:0f:
                    52:52:ab:ee:cd:0a:82:d3:8f:e9:32:cf:d6:5c:2c:
                    d1:7b:cd:9e:f8:78:af:d6:93:39:6d:30:23:b3:1c:
                    41:44:8a:19:f3:e8:31:97:d6:22:f4:a7:dc:d4:88:
                    60:86:24:d5:ce:c1:af:cb:92:54:06:fb:28:75:f7:
                    17:f3:e6:6f:85:bf:b2:17:f3:aa:79:95:35:60:5a:
                    42:f0:c4:69:17:4e:82:f9:af:1a:4d:81:0b:52:9d:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CC:67:15:99:B3:11:3C:DE:E0:B9:9D:60:D2:F9:63:09:20:27:96
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:8a:7a:45:8f:21:6f:cd:24:4f:7d:8a:ad:8b:22:51:cf:
         bd:4f:f4:b0:51:29:cc:f1:f7:19:d1:9a:e9:e0:a3:82:22:24:
         09:04:fd:ad:85:be:a6:12:a5:e5:63:70:d6:3d:a8:7b:80:da:
         59:36:2b:cb:99:10:9b:af:dc:f8:9f:bb:04:a0:cb:08:eb:c5:
         f2:85:f6:00:76:84:5f:5d:42:dd:b2:7d:d8:f2:06:d2:bf:e4:
         2c:7a:ff:0e:50:61:b6:f1:7d:4e:d7:d9:71:68:81:32:99:4e:
         04:37:ee:85:0d:79:7c:a4:a9:8d:08:34:4f:87:5e:5f:8c:6a:
         33:36:fa:4a:11:3e:e8:e9:12:7c:21:bc:7a:81:a0:19:d7:f5:
         93:f2:35:6b:df:25:26:5b:81:8a:98:1a:25:1f:4b:26:56:6a:
         74:32:15:24:76:ab:4b:7b:25:0e:eb:f1:83:b4:e3:87:d9:14:
         83:ad:f7:9c:44:98:cb:18:ca:b5:52:53:af:2f:dd:8c:3d:2f:
         1e:d0:e6:75:33:f4:94:bb:58:bd:cf:4f:ed:fa:e5:c8:76:5a:
         ff:bc:0e:98:96:e7:c0:0f:7f:3a:74:82:79:d8:92:65:40:ad:
         7d:bd:d4:65:0c:3e:45:03:36:3e:88:85:5d:eb:fe:8b:1a:ca:
         98:fb:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:03 2025 by rpki-client