Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3230302e302f32312d3234203d3e203237363530.roa
File:                     3139302e352e3230302e302f32312d3234203d3e203237363530.roa (raw, json)
Hash identifier:          uYTNZlNRiaBx9qBpWu08TLvhrwj6K+JDC4isBYHtiiw=
Subject key identifier:   5A:0E:9A:9D:CD:5A:9F:B1:83:97:6F:C4:AC:05:9B:D0:D1:B5:5C:61
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       12C1416566341E98EDC51E120A2C0E1234A4AF46
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3230302e302f32312d3234203d3e203237363530.roa
Signing time:             Tue 04 Feb 2025 18:50:36 +0000
ROA not before:           Tue 04 Feb 2025 18:45:36 +0000
ROA not after:            Tue 03 Feb 2026 18:50:36 +0000
asID:                     27650
IP address blocks:        190.5.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c1:41:65:66:34:1e:98:ed:c5:1e:12:0a:2c:0e:12:34:a4:af:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Feb  4 18:45:36 2025 GMT
            Not After : Feb  3 18:50:36 2026 GMT
        Subject: CN=5A0E9A9DCD5A9FB183976FC4AC059BD0D1B55C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:a2:82:46:c0:94:7b:25:bf:1a:af:38:79:
                    ff:96:c4:04:ec:af:a5:ae:1d:fd:95:7c:28:8e:6c:
                    20:46:41:63:e2:e4:3d:3c:ed:5b:eb:88:7a:70:24:
                    0d:d5:19:27:c7:97:f7:42:70:4a:fb:ae:f4:d9:cd:
                    ab:90:47:59:21:4a:58:55:81:ba:00:35:68:02:c7:
                    be:97:79:a3:90:c1:f7:69:bc:91:65:80:80:a4:f9:
                    4b:9a:9c:6f:f0:c4:a0:b1:60:0c:19:2f:a2:aa:f9:
                    79:eb:b5:c7:09:80:1e:48:70:c2:05:75:41:4d:21:
                    78:18:ac:cb:85:37:21:b2:d1:1a:e4:4d:68:0f:19:
                    31:ea:a3:c3:95:41:50:9e:f6:8c:9d:5b:01:55:23:
                    c4:f1:a5:e4:7c:65:c3:14:44:4f:6d:fa:f0:70:94:
                    39:85:87:31:ac:15:88:09:1a:2d:2e:73:1d:47:89:
                    c8:7a:f2:e9:0c:6d:e9:6a:2f:75:d3:6f:b5:35:ce:
                    8b:fc:36:c0:aa:4d:46:fe:23:a8:7e:29:5a:71:cb:
                    c6:91:74:b1:73:4f:fa:39:a0:6c:23:df:ea:6e:d8:
                    01:d0:e8:a2:67:e1:2e:5d:fd:47:a8:13:59:ba:39:
                    38:58:b3:be:eb:61:9d:c9:b3:c6:7e:a8:6a:a8:fd:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:9A:9D:CD:5A:9F:B1:83:97:6F:C4:AC:05:9B:D0:D1:B5:5C:61
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3230302e302f32312d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:bd:51:06:dc:38:c3:32:a7:b4:b2:2c:08:f6:24:43:ac:
         76:56:dc:fe:45:89:0c:bf:3c:99:98:e7:ca:f6:c3:79:e2:fd:
         4e:cf:a6:d6:fb:93:e2:51:cf:99:c5:06:35:3d:08:6f:40:93:
         10:c0:62:23:b7:81:33:eb:c8:ff:1e:0b:bb:0a:6f:72:67:9a:
         df:47:98:8f:2e:1e:6b:e8:e9:ad:cf:70:a6:22:b6:20:89:91:
         23:e3:0b:a3:0b:40:91:d2:4a:03:8d:6b:7f:9c:f2:72:ee:85:
         05:9a:d0:f9:7c:05:f5:81:03:f6:6b:77:43:90:58:31:95:2d:
         d0:f3:63:e6:0b:d1:ab:81:28:e5:07:bf:79:70:4f:b0:90:9d:
         9e:6f:04:5d:48:05:37:e0:0b:ee:db:0c:3f:b2:a1:96:02:d8:
         3a:15:44:cb:df:28:2c:fb:29:11:c9:f5:89:02:f8:a5:45:0f:
         92:e5:c4:58:59:d0:c5:f2:9e:e2:a6:01:bd:28:31:93:5d:cc:
         9a:15:5e:a0:72:0e:9f:41:ea:f0:59:ed:d0:7d:07:5b:69:8f:
         81:73:b7:37:1f:5e:5c:a1:5b:7a:ed:0d:3e:73:b4:63:9d:48:
         47:75:e8:a9:54:84:10:c6:c1:32:50:1c:32:d3:03:61:dc:0f:
         e9:5e:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:41 2025 by rpki-client