Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139322e302f32332d3234203d3e203237363530.roa
File:                     3139302e352e3139322e302f32332d3234203d3e203237363530.roa (raw, json)
Hash identifier:          CyaSzZTyvZcvwYBH2ZfMlkKH9+JhuvcXzICkFaaW47c=
Subject key identifier:   7F:E5:1F:02:E7:18:0E:10:69:A5:88:25:99:F0:5B:EB:11:64:A4:1C
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       42B1648044586C0970F0001D969516DBBB9D82CE
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139322e302f32332d3234203d3e203237363530.roa
Signing time:             Tue 04 Feb 2025 18:50:36 +0000
ROA not before:           Tue 04 Feb 2025 18:45:36 +0000
ROA not after:            Tue 03 Feb 2026 18:50:36 +0000
asID:                     27650
IP address blocks:        190.5.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:64:80:44:58:6c:09:70:f0:00:1d:96:95:16:db:bb:9d:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Feb  4 18:45:36 2025 GMT
            Not After : Feb  3 18:50:36 2026 GMT
        Subject: CN=7FE51F02E7180E1069A5882599F05BEB1164A41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:ca:37:e6:b7:92:36:ab:8e:60:fe:c5:77:
                    78:49:77:df:18:2a:76:d3:34:ea:32:4e:03:2c:3a:
                    25:b6:45:5d:b7:62:85:53:1d:cf:7c:b5:29:71:f9:
                    0e:3f:1f:b8:1e:72:ee:96:90:07:b9:41:28:f2:b5:
                    17:fc:76:00:73:94:12:7a:2a:eb:aa:3d:70:cd:bd:
                    46:d0:65:73:3f:66:93:09:08:49:2f:3d:3a:a8:43:
                    15:5e:3f:1f:66:e9:19:ed:fa:8b:25:3e:31:07:f8:
                    11:24:d8:73:11:2a:85:9a:2c:9d:ca:b6:5c:b4:58:
                    95:8c:7f:7e:e0:ea:be:2e:f4:2d:8a:aa:42:b7:d8:
                    9f:d3:66:d8:73:eb:50:3f:36:40:36:70:4f:24:5c:
                    41:1e:dc:c1:fd:e8:38:75:4d:4c:51:66:ea:09:ee:
                    21:c1:45:e6:a8:38:dc:32:e9:9b:25:01:e4:56:40:
                    46:a9:f7:dd:35:6c:c4:44:59:c1:74:0c:56:27:13:
                    47:19:e0:7e:2a:69:32:8e:66:24:05:8f:8d:29:e7:
                    55:ee:db:75:5a:66:73:51:74:7a:60:00:7a:e2:ce:
                    99:1e:59:d3:33:da:a2:e5:1c:6d:1d:59:ed:f8:2e:
                    9a:e5:05:26:23:25:f4:de:f9:a1:25:d3:9a:07:02:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:1F:02:E7:18:0E:10:69:A5:88:25:99:F0:5B:EB:11:64:A4:1C
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139322e302f32332d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:5c:b9:da:c7:c7:1e:67:cf:f2:bb:ef:f0:24:0d:bb:3b:
         d1:7e:12:fb:0b:3e:db:48:88:65:fe:3f:6c:1c:d5:f8:76:d6:
         21:f5:61:91:9a:9f:07:17:01:78:cc:22:eb:08:5f:2c:f3:cf:
         7c:22:17:99:e0:6c:08:da:08:6d:2e:b1:4c:b8:e4:b1:8a:fc:
         c8:0c:20:0a:3c:b7:07:a5:cb:a6:28:36:48:de:d8:50:64:78:
         76:14:aa:1a:95:ed:1a:e8:c5:6a:f5:ef:04:fd:4b:e7:ad:08:
         1a:27:ed:c7:43:84:b7:f4:56:16:5f:32:12:9b:7f:19:9c:82:
         e1:b4:a3:60:31:8d:a8:53:93:56:f2:4d:aa:97:3f:45:bf:73:
         80:8e:39:48:7b:dd:c6:e1:0f:a4:23:6d:48:be:98:2e:5a:fa:
         4a:02:d1:46:31:e7:60:d9:4c:40:b0:51:67:fb:0b:5e:a1:26:
         70:17:1e:cd:33:58:fe:af:d4:91:8c:44:b5:da:3d:ed:50:60:
         6f:ee:88:7e:70:81:15:74:c3:57:23:e7:93:fa:2c:3e:f4:48:
         8d:f5:af:62:2b:c3:5d:fb:b0:b6:f1:cb:ff:64:5f:08:6e:b6:
         11:92:4a:fc:b5:2e:3e:98:f3:2d:d8:ec:2c:7d:1b:85:6f:30:
         93:4f:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:14 2025 by rpki-client