Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132332e34382e302f32302d3234203d3e203238303235.roa
File:                     3139302e3132332e34382e302f32302d3234203d3e203238303235.roa (raw, json)
Hash identifier:          kDC1+uSuZSaWWPV25+EDVXCZL2jucQ27vrKWV/oOyTk=
Subject key identifier:   67:6A:0C:D4:FB:50:D4:E8:9E:37:52:E9:B2:37:82:6A:8C:A7:4A:20
Certificate issuer:       /CN=F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA
Certificate serial:       138B43C4F303F844564AD7A48E5655962EB7DD9C
Authority key identifier: F6:4B:9C:43:EE:EB:19:A0:ED:10:58:03:DC:8E:99:43:CE:DA:35:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132332e34382e302f32302d3234203d3e203238303235.roa
Signing time:             Tue 04 Feb 2025 18:18:31 +0000
ROA not before:           Tue 04 Feb 2025 18:13:31 +0000
ROA not after:            Tue 03 Feb 2026 18:18:31 +0000
asID:                     28025
IP address blocks:        190.123.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8b:43:c4:f3:03:f8:44:56:4a:d7:a4:8e:56:55:96:2e:b7:dd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA
        Validity
            Not Before: Feb  4 18:13:31 2025 GMT
            Not After : Feb  3 18:18:31 2026 GMT
        Subject: CN=676A0CD4FB50D4E89E3752E9B237826A8CA74A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:29:f2:91:2d:e1:61:ad:68:af:c5:21:1a:
                    c1:00:7b:6e:3a:b7:42:cd:24:29:c8:b2:de:7d:48:
                    ee:2e:88:11:66:ac:9a:20:f6:d8:8e:5f:ba:6d:a9:
                    a8:c6:6e:80:3a:27:3a:96:d2:29:32:5f:da:07:fa:
                    9d:86:2a:ca:14:52:52:eb:12:01:f3:44:22:6d:93:
                    6a:53:4b:6d:8b:3f:ff:ae:38:8a:3c:da:7e:9e:85:
                    93:e3:39:c5:1b:f4:cc:3c:f2:90:14:9b:d7:41:f8:
                    44:5b:76:3e:1d:75:b2:e0:88:de:7c:f8:e3:3f:e4:
                    6c:ad:b6:43:de:cf:f0:89:e6:75:2d:53:ce:4f:6f:
                    5c:59:4e:da:cb:b4:8f:91:c4:0d:2b:48:1f:f1:4f:
                    65:06:61:1f:b7:f0:5d:10:e9:32:ef:ce:e1:46:cb:
                    3b:03:f7:49:b9:a0:37:6e:fd:a6:d9:34:86:e6:b0:
                    6c:46:c5:f0:16:ad:c1:c0:17:28:ec:eb:0a:dd:50:
                    6a:e2:ec:93:e5:6d:eb:62:ac:6f:ca:a4:8d:db:b0:
                    78:10:1b:f8:8a:86:f0:d5:1d:20:70:b6:76:05:f0:
                    4f:22:0d:21:60:fc:8f:11:9c:fe:ad:59:58:ff:98:
                    d4:4b:ac:32:a5:ec:24:b7:f8:79:dc:3c:83:b3:b2:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6A:0C:D4:FB:50:D4:E8:9E:37:52:E9:B2:37:82:6A:8C:A7:4A:20
            X509v3 Authority Key Identifier:
                keyid:F6:4B:9C:43:EE:EB:19:A0:ED:10:58:03:DC:8E:99:43:CE:DA:35:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132332e34382e302f32302d3234203d3e203238303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:5e:d2:ab:31:23:b6:27:f2:1f:d7:98:a1:f6:e7:11:ea:
         56:3c:92:c8:98:80:0a:1f:87:c7:74:fb:45:b3:58:54:cd:ca:
         3f:7a:7c:e6:f9:2b:53:cd:54:8c:9c:7e:38:78:eb:49:0d:49:
         31:7b:55:a7:d9:32:2e:f3:9e:c2:66:ec:6e:03:67:5a:fe:0b:
         32:87:b7:0f:5b:58:4c:c9:40:c8:a7:f9:64:44:f7:8f:88:43:
         33:06:50:f0:82:13:cd:8f:40:3c:c9:99:64:fe:6b:a1:a4:c4:
         1f:ef:53:54:43:36:dd:a6:fc:1d:f7:ee:84:11:31:2a:1c:3e:
         e1:0d:69:3a:0d:94:5c:43:e9:03:33:91:22:cb:c2:9c:2a:77:
         eb:e0:22:38:fa:09:bc:6a:4c:36:a6:78:be:a0:04:f9:08:02:
         0e:cb:ef:89:77:c2:7d:92:1a:c3:b3:38:34:ed:fe:7a:32:14:
         2b:7e:f9:ae:dd:58:50:37:00:16:d3:5a:cf:1d:4f:05:d4:b6:
         3a:b2:69:56:a8:45:d9:d2:92:9b:1a:eb:58:2a:3e:3f:2f:0b:
         da:d3:ac:02:a7:5d:ab:12:35:fe:ac:d9:be:c0:7f:8e:a6:65:
         87:15:43:44:53:68:04:f9:34:2f:a0:b2:cd:cb:1f:25:4f:cd:
         66:c7:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:49 2025 by rpki-client