Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139362e302f32322d3234203d3e203237363530.roa
File:                     3139302e352e3139362e302f32322d3234203d3e203237363530.roa (raw, json)
Hash identifier:          u/t9wysA171RFRNFn+vBTkkSbcPGRFbrVoExvnhSPp8=
Subject key identifier:   7C:78:99:15:89:AB:D8:0D:22:30:30:E8:39:79:D9:D0:5A:7D:76:61
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       69F845A8E299B63BC64A2381CA78355CEC885014
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139362e302f32322d3234203d3e203237363530.roa
Signing time:             Tue 04 Feb 2025 18:50:37 +0000
ROA not before:           Tue 04 Feb 2025 18:45:37 +0000
ROA not after:            Tue 03 Feb 2026 18:50:37 +0000
asID:                     27650
IP address blocks:        190.5.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 00:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f8:45:a8:e2:99:b6:3b:c6:4a:23:81:ca:78:35:5c:ec:88:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Feb  4 18:45:37 2025 GMT
            Not After : Feb  3 18:50:37 2026 GMT
        Subject: CN=7C78991589ABD80D223030E83979D9D05A7D7661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:e0:62:50:58:e0:a2:86:9c:31:45:f3:13:
                    8b:30:83:62:f2:67:eb:e8:a1:25:f6:e5:68:3d:ce:
                    4f:aa:2c:b4:57:11:e0:9c:3b:31:2d:e2:e0:b7:ed:
                    94:a8:c8:fd:a1:7a:8c:75:f1:1e:e3:63:f2:29:6b:
                    6b:6d:78:37:f5:64:6a:54:ca:dd:9e:5a:61:13:ef:
                    f4:b9:48:2c:b9:c0:ee:3b:b2:d8:6d:22:29:28:a3:
                    2d:69:43:ff:a7:a3:bc:16:d6:c5:a1:d1:69:95:15:
                    c7:71:df:ea:f5:79:33:48:2a:9d:17:0a:ed:71:87:
                    9d:d4:5e:56:65:0d:34:31:93:e5:0c:23:06:51:18:
                    09:0e:2b:7e:98:cd:84:ad:dd:94:e7:40:57:81:0f:
                    5b:3c:e8:7a:6f:31:79:90:e4:b9:94:cb:23:64:18:
                    97:71:5e:34:8d:27:99:e1:1c:be:11:2d:8c:ae:ff:
                    f1:48:c5:b4:f4:b0:28:af:e8:6e:2a:ee:37:d0:ac:
                    3d:75:8d:17:ef:66:e8:71:02:56:26:8b:e0:f0:45:
                    b0:1e:b1:1f:ee:b7:76:0b:80:39:03:e4:38:15:ac:
                    14:15:db:e3:d8:a3:ca:26:c5:13:76:a3:26:3c:b0:
                    c7:08:56:d6:94:48:42:c2:6f:9a:0b:c3:f2:72:d6:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:78:99:15:89:AB:D8:0D:22:30:30:E8:39:79:D9:D0:5A:7D:76:61
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139362e302f32322d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:b0:85:bd:47:ad:b6:3f:1d:72:b9:30:ae:9b:20:44:1b:c4:
         dc:33:4f:fb:81:fe:31:6f:40:3c:f1:7e:94:cc:52:fd:be:4d:
         46:57:31:27:9b:8e:de:82:dc:8b:33:6a:ed:6f:ae:c9:7d:19:
         f1:6e:1d:75:19:27:12:50:72:1a:e1:02:eb:67:43:4a:fd:0f:
         21:eb:3b:fc:79:28:2a:ac:67:e4:1d:5f:09:90:f8:e0:76:09:
         c1:76:df:d8:75:66:21:32:c9:53:eb:ad:dd:cc:d6:16:ec:4f:
         0f:9c:e5:fc:f3:c2:d0:0f:c7:ba:bf:3e:7d:c7:2b:b8:3f:96:
         3b:8c:cb:ee:4c:41:b3:c8:b6:57:0d:dc:b6:f8:dc:ee:f2:fd:
         e9:e7:0f:2e:54:57:a5:fc:0f:93:51:e2:e3:a5:22:c7:39:13:
         48:f5:c9:4b:0e:4d:86:06:82:d5:3e:ca:c5:d9:8a:cc:60:4b:
         66:9e:00:d2:b2:b8:7f:a2:ce:ce:8a:d6:7a:8e:03:ad:5c:93:
         8b:8a:f8:b6:22:53:3a:06:63:a3:63:7c:31:8d:4a:67:16:73:
         56:12:1b:62:19:2f:02:28:e9:e2:55:b5:0f:cd:30:26:6d:9b:
         0c:89:86:f3:7a:41:75:e4:d6:99:1d:76:26:34:95:ac:5d:f3:
         ee:85:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:52:26 2025 by rpki-client