Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa
File:                     3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa (raw, json)
Hash identifier:          JoPDhzfzQRO3qQliXs0RdEYbY1MJJ4u/JUAbFbqocO8=
Subject key identifier:   A3:01:69:34:F8:45:E7:B5:29:65:7B:B8:36:21:50:EC:60:05:D3:5B
Certificate issuer:       /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial:       2D1C530284B5D62C2F0187F4C0B734371B4A1642
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa
Signing time:             Tue 04 Feb 2025 18:02:09 +0000
ROA not before:           Tue 04 Feb 2025 17:57:09 +0000
ROA not after:            Tue 03 Feb 2026 18:02:09 +0000
asID:                     52242
IP address blocks:        190.181.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1c:53:02:84:b5:d6:2c:2f:01:87:f4:c0:b7:34:37:1b:4a:16:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
        Validity
            Not Before: Feb  4 17:57:09 2025 GMT
            Not After : Feb  3 18:02:09 2026 GMT
        Subject: CN=A3016934F845E7B529657BB8362150EC6005D35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:7d:9f:9d:ab:3e:a9:8c:ec:64:15:90:6c:
                    0c:77:4b:6f:16:60:15:90:d1:10:e3:fd:ed:6d:be:
                    11:4e:47:2c:be:87:de:48:14:88:30:6c:24:19:96:
                    94:3e:70:04:36:81:3f:ed:1d:41:6b:02:28:08:a9:
                    50:36:ed:60:74:b8:98:ef:a8:4c:f2:64:33:a0:95:
                    22:2c:d1:9b:ab:65:c4:6f:7b:9f:2b:57:54:d4:7b:
                    fe:4c:3a:62:27:7d:01:49:51:47:3d:cc:d3:1f:e1:
                    20:9f:b9:5e:9b:b8:5c:50:c2:f6:f4:de:d2:9a:02:
                    e8:75:06:8a:3e:18:d4:13:90:42:ae:c2:82:e8:9d:
                    9d:1e:d1:43:b5:43:fe:d1:4d:7b:fe:22:d0:b2:ad:
                    ba:2e:12:85:0c:6c:9d:5a:07:49:82:65:39:dd:1f:
                    65:32:17:78:52:cb:61:8c:a6:61:0a:33:d3:49:97:
                    c8:dc:54:c2:86:5a:07:ac:39:5e:5c:68:6a:14:58:
                    a3:d9:0d:0c:e8:c8:74:6e:6d:ae:f3:cf:4c:72:78:
                    07:35:d9:5b:b7:37:0e:43:81:b3:76:9d:cc:1c:5b:
                    12:f7:99:53:4b:7f:62:c1:9d:49:42:e2:10:e1:54:
                    f5:92:7e:7b:5a:56:54:9f:62:16:54:bf:84:33:5b:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:01:69:34:F8:45:E7:B5:29:65:7B:B8:36:21:50:EC:60:05:D3:5B
            X509v3 Authority Key Identifier:
                keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:97:19:b2:a2:c7:78:69:32:69:69:98:95:f2:36:f1:de:
         98:45:f5:fd:23:5b:ba:b3:79:f1:04:f0:1e:6b:17:c4:e3:c3:
         d4:d0:0c:46:56:0e:4d:dd:7e:21:0d:66:2b:e0:ca:f7:58:f6:
         52:99:f1:25:58:51:88:14:d0:d7:e9:a8:49:10:28:02:af:b4:
         b1:f3:be:ef:35:68:8d:28:63:a0:0a:2e:ed:51:d4:be:f9:aa:
         87:f7:03:91:e1:0e:70:6b:06:f5:8b:4c:d5:cd:77:19:bd:f6:
         bb:fb:73:e7:ad:98:2b:da:70:c2:57:c9:ec:1f:41:05:ac:a9:
         f2:02:5e:07:2f:01:50:cb:c3:60:80:45:ec:53:ed:13:c7:b0:
         82:1a:ff:66:25:9d:7f:21:49:e7:34:b3:a4:d8:99:7f:8b:23:
         01:55:5e:42:47:8b:86:19:27:02:ae:b0:66:55:a2:77:87:40:
         e3:fd:cb:71:fa:18:c2:e1:10:db:fd:d6:fd:40:e8:97:bd:03:
         cd:dc:d7:54:55:ce:39:3b:a4:d9:42:c6:88:b4:96:3a:88:fc:
         e7:1a:af:a1:79:20:ae:5e:9a:5a:3f:fb:89:20:fb:71:90:1b:
         d1:be:73:e4:e2:84:85:53:3c:3a:a4:5e:35:99:bc:03:3b:f4:
         56:e8:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:41:55 2025 by rpki-client