Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34352e302f32342d3234203d3e20323633373338.roa
File:                     3139302e3131302e34352e302f32342d3234203d3e20323633373338.roa (raw, json)
Hash identifier:          t2b5FRjr1PEUQSe9ucJKww1yy6cV1R5a7ljMgMIpo4M=
Subject key identifier:   A9:E8:14:99:5A:A9:01:59:4B:21:75:05:08:79:62:E5:4D:F2:1D:09
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       7248B5D83BFF43AB9AA6595AE519D290A2B76297
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34352e302f32342d3234203d3e20323633373338.roa
Signing time:             Tue 04 Feb 2025 20:07:32 +0000
ROA not before:           Tue 04 Feb 2025 20:02:32 +0000
ROA not after:            Tue 03 Feb 2026 20:07:32 +0000
asID:                     263738
IP address blocks:        190.110.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:48:b5:d8:3b:ff:43:ab:9a:a6:59:5a:e5:19:d2:90:a2:b7:62:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:32 2025 GMT
            Not After : Feb  3 20:07:32 2026 GMT
        Subject: CN=A9E814995AA901594B217505087962E54DF21D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:f3:a4:0b:97:1b:9a:36:15:2f:53:8c:db:
                    b9:85:6d:54:fb:76:07:38:0a:a6:07:6f:aa:7d:1a:
                    a7:a5:39:b3:dc:42:75:b3:2e:42:bb:8b:d0:46:56:
                    9f:5c:74:19:11:02:55:e0:01:08:df:00:52:37:1e:
                    f6:41:d1:ae:3e:d2:50:43:07:a5:7d:c9:52:74:cb:
                    35:4c:87:be:03:f3:6d:70:b4:e8:4a:46:b4:1b:25:
                    48:c0:17:50:08:e7:e1:4a:6e:71:26:7c:f9:6a:14:
                    32:66:1b:07:85:c4:33:6c:7a:1c:45:e8:e4:23:51:
                    20:22:d3:93:c6:da:e8:b6:ba:71:ae:1e:4a:69:e5:
                    52:ea:cf:04:76:ca:74:61:59:6e:aa:87:0b:70:32:
                    86:24:eb:ce:e1:3c:e9:5b:5c:05:73:ee:76:b2:b9:
                    4e:02:b7:7d:12:5e:f9:24:01:a7:b5:8e:98:4b:55:
                    52:97:a5:14:43:88:0e:0f:14:44:3f:bc:ae:1f:29:
                    19:3a:ac:db:d1:67:23:88:79:23:de:6b:dd:87:87:
                    15:f2:59:d2:1d:63:87:eb:c1:98:6a:60:5c:69:e1:
                    64:a9:05:26:06:3b:cf:08:4c:95:49:7f:19:1a:a2:
                    bf:4e:43:86:0e:50:a5:79:89:47:98:8a:72:83:b7:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:14:99:5A:A9:01:59:4B:21:75:05:08:79:62:E5:4D:F2:1D:09
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34352e302f32342d3234203d3e20323633373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:65:ae:a2:d8:6e:df:7b:42:93:22:48:ed:a2:a8:b0:7e:
         6f:51:2e:61:df:6f:64:58:aa:85:a3:50:19:0c:36:94:c5:b4:
         4b:75:3c:e8:76:38:9e:d6:3c:eb:b8:b4:a7:49:3b:90:4c:5e:
         ab:6f:2d:0a:61:be:92:11:4e:45:0f:19:38:02:5a:ec:d2:34:
         2b:ad:2d:ed:eb:a2:0e:0e:92:25:6d:ac:e6:7b:2a:10:ab:d2:
         0f:45:4d:dd:dc:95:a5:ca:8c:2b:9a:8f:08:e8:b2:4e:f3:c5:
         5e:24:c9:9c:7e:6a:54:40:cc:cc:ae:1f:91:26:e4:0e:dc:fb:
         6f:4a:fc:92:0f:52:0f:06:37:ad:84:0b:09:fe:01:6d:d2:f1:
         cb:c2:76:4c:07:44:b2:a6:ec:12:c6:1a:61:3f:19:ff:56:7c:
         03:46:66:52:32:b1:d8:12:1d:4b:e4:d2:f3:ba:47:a8:26:34:
         5d:db:5a:a4:e1:41:3c:8d:0f:17:c0:02:43:0f:2e:3e:68:02:
         64:02:cd:f6:c1:7c:5b:5b:89:17:f8:fb:91:67:6d:3e:14:c8:
         c4:f5:3f:29:ad:74:dc:fd:e3:b5:a5:b4:af:03:9c:8d:e4:7c:
         f0:38:10:49:a1:99:51:37:20:cd:80:fd:cc:6f:9a:f4:8b:f6:
         c9:02:01:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 00:58:23 2025 by rpki-client