Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32312d3231203d3e203532333238.roa
File:                     3139302e3231312e36342e302f32312d3231203d3e203532333238.roa (raw, json)
Hash identifier:          Df9Bg0OQ8xKusRoGfNI/jKqsRjAFpPaUZeyXt3IM4mg=
Subject key identifier:   98:6C:7B:1A:6F:A3:FE:90:8E:FA:84:76:9A:EE:0B:5D:AF:F0:0E:FE
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       5048B7FF72DA0747B430DF16DA7AEDB854BA613B
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32312d3231203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:31 +0000
ROA not before:           Tue 04 Feb 2025 18:11:31 +0000
ROA not after:            Tue 03 Feb 2026 18:16:31 +0000
asID:                     52328
IP address blocks:        190.211.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:48:b7:ff:72:da:07:47:b4:30:df:16:da:7a:ed:b8:54:ba:61:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:31 2025 GMT
            Not After : Feb  3 18:16:31 2026 GMT
        Subject: CN=986C7B1A6FA3FE908EFA84769AEE0B5DAFF00EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:f0:fb:83:08:9c:b2:b5:43:f3:b1:b7:1a:
                    3b:aa:e5:a4:a0:a4:22:d6:7f:1e:82:f7:73:56:4e:
                    e3:6d:74:a3:20:ca:fc:82:f7:de:4f:c6:ce:e1:3e:
                    09:39:0c:78:aa:cd:71:ad:e4:29:16:7d:00:ab:f3:
                    37:77:b5:37:39:a7:b4:01:62:ea:33:bf:73:56:f5:
                    cc:b9:67:19:e5:47:c5:cd:fd:e4:26:96:4f:ce:1a:
                    5c:e5:ad:e0:fa:ab:bc:55:23:a1:f2:19:3d:0c:52:
                    16:7f:80:68:ee:9b:f0:6f:e3:ab:d8:c8:dd:1a:0c:
                    9f:2b:0a:6c:a3:bb:22:f4:80:12:83:b6:4d:7e:c5:
                    55:a2:1d:a0:b5:3d:7e:aa:6e:a6:41:61:09:4d:64:
                    6d:1e:61:94:06:3b:26:6a:b2:62:a4:84:3b:40:7f:
                    cf:a7:b9:e6:c2:38:84:33:71:d0:9d:94:cd:14:96:
                    89:11:3b:59:82:cd:9c:f5:a8:9a:e3:15:3c:c2:c1:
                    05:92:31:92:ff:d5:6c:3a:fb:53:08:cd:53:35:aa:
                    dc:c3:ff:8b:ee:84:1a:01:2b:74:7e:63:5a:35:e7:
                    4a:3f:fd:6a:0a:24:ce:45:c2:28:99:d1:b5:14:00:
                    71:7b:27:de:e5:46:bd:62:d8:6b:bc:c4:f9:70:16:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:7B:1A:6F:A3:FE:90:8E:FA:84:76:9A:EE:0B:5D:AF:F0:0E:FE
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32312d3231203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:f5:79:6b:cf:74:d1:01:e1:96:82:e7:41:b0:45:dc:f9:
         97:70:89:ed:d7:65:0d:42:16:21:b8:34:cd:65:36:41:c6:bf:
         99:c8:56:5d:50:dd:ca:00:13:48:47:d2:b3:e6:74:0b:a0:e6:
         f0:ef:31:2e:e2:89:03:d3:c9:bc:c1:06:bb:c9:8b:bd:9e:05:
         80:c2:b1:ed:b4:8d:56:4f:28:22:0c:e9:53:a8:59:5d:c9:c1:
         f0:6b:9d:98:c2:a2:ac:8d:23:b3:f5:6f:ef:e5:3a:20:09:3d:
         c7:66:ce:e4:27:f2:a5:f1:62:81:3e:1d:23:e7:5c:40:fd:7d:
         14:bc:f7:5a:06:88:54:42:ed:4c:1b:99:e6:35:89:f2:8a:76:
         9f:88:f9:b9:99:87:4e:4e:75:04:b1:2d:b1:9e:fe:ee:96:bc:
         b2:39:7e:0b:3e:3f:f9:92:0f:d6:cd:4c:6c:51:a5:c8:d5:e4:
         0c:f2:9a:5c:9b:61:52:3f:b3:3a:ea:7d:a7:fb:0c:9b:d0:b0:
         95:e5:e2:8a:57:e2:fe:5d:02:48:1f:86:59:11:5a:fa:84:d6:
         ba:8e:aa:4f:30:d2:68:4f:01:09:95:e3:4f:a2:36:0c:73:3f:
         8f:b9:fe:8b:43:82:cc:fa:37:bf:9d:b3:ad:fd:38:52:63:06:
         5d:62:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:43 2025 by rpki-client