Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa
File:                     3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa (raw, json)
Hash identifier:          uNQpygSyk2rZcSqNXmUHQsV36Dw5x/oujuIb6UQkD2Y=
Subject key identifier:   0A:1B:FE:7A:DA:DF:86:B7:FD:09:74:F9:61:94:FF:0C:E9:AF:DB:CC
Certificate issuer:       /CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
Certificate serial:       392C34A9FCB7AF5FD37340ECB302131DB7BDC603
Authority key identifier: F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa
Signing time:             Tue 04 Feb 2025 18:35:25 +0000
ROA not before:           Tue 04 Feb 2025 18:30:25 +0000
ROA not after:            Tue 03 Feb 2026 18:35:25 +0000
asID:                     28068
IP address blocks:        190.122.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:34:a9:fc:b7:af:5f:d3:73:40:ec:b3:02:13:1d:b7:bd:c6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
        Validity
            Not Before: Feb  4 18:30:25 2025 GMT
            Not After : Feb  3 18:35:25 2026 GMT
        Subject: CN=0A1BFE7ADADF86B7FD0974F96194FF0CE9AFDBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5d:83:d1:be:eb:60:ca:ee:0b:de:7c:b8:1a:
                    ea:3c:ca:5e:0b:15:1c:cd:12:b6:b1:35:61:76:6b:
                    e6:ce:53:81:8d:75:b0:19:ea:fa:48:6c:74:0e:4f:
                    fe:1a:81:a0:37:4e:58:73:28:3d:23:df:01:6f:58:
                    7b:95:d3:21:f4:aa:7e:33:10:19:b0:08:29:51:cc:
                    64:db:9b:5d:c5:00:d4:87:7d:68:42:99:45:38:ff:
                    ac:1e:82:78:04:f9:b5:f2:7b:8d:69:fe:12:d2:75:
                    fa:b5:c0:e7:98:de:6e:5b:7a:2a:4b:1c:5f:0a:ed:
                    ea:cc:ab:97:83:75:b8:97:a0:ef:80:5c:0d:d6:8d:
                    e7:79:a8:bf:50:4a:55:fc:3c:4d:a1:14:83:17:2e:
                    28:ab:b6:1f:df:dc:22:bd:75:95:fe:f7:52:e5:50:
                    39:c4:df:69:0c:f4:57:01:7c:a8:a9:fc:42:32:71:
                    b3:af:f8:50:0d:ee:d9:0e:ae:bb:2c:12:5a:55:87:
                    47:1c:47:a6:18:d4:b8:4b:81:dd:5a:89:c6:b6:e5:
                    c7:9f:66:bc:50:48:60:6d:67:f3:a9:b0:ee:c2:c0:
                    5e:71:f8:59:a7:c6:11:09:d1:c6:d1:a1:a2:87:2d:
                    b3:1f:3e:f5:01:69:60:fe:0d:6b:ac:31:16:d2:53:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1B:FE:7A:DA:DF:86:B7:FD:09:74:F9:61:94:FF:0C:E9:AF:DB:CC
            X509v3 Authority Key Identifier:
                keyid:F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:57:49:c8:09:de:94:79:ee:71:fb:56:82:50:44:6a:c6:c8:
         00:2d:c6:2b:cb:b2:de:3f:84:5b:29:43:d2:ab:35:bf:af:8f:
         64:0b:84:28:d1:37:3c:5d:68:00:20:1c:cb:91:b1:b2:17:64:
         26:70:5d:b3:d6:13:ee:96:fb:80:e4:e4:92:ce:84:b7:d8:51:
         17:cf:19:55:85:a6:da:4a:c3:52:7b:64:52:0e:e8:b5:ef:1f:
         35:8e:d9:30:7f:82:9a:04:2c:29:35:c5:1d:9e:dd:e2:b5:bd:
         7d:d9:15:d4:8c:66:a2:3a:31:f6:db:fa:58:c6:f8:8a:76:75:
         ec:53:b4:e4:2b:e8:50:4f:2a:ab:88:65:ae:1a:1f:f8:62:c9:
         9a:b6:2d:84:90:a0:c3:a1:37:a1:8b:d2:58:8b:ba:f1:24:d6:
         09:47:67:4b:b0:01:44:31:45:91:ee:de:88:e0:4b:cc:93:2e:
         27:17:fa:89:c2:81:52:01:bb:8d:1c:e7:df:37:03:0c:03:ca:
         19:36:9a:bc:78:33:20:88:49:5a:48:00:a7:3f:08:ac:3a:b4:
         b2:bf:20:fd:bf:9b:b2:9f:e7:2f:8a:d0:72:6c:50:a8:25:04:
         ea:04:6c:cf:42:7a:1b:d2:2b:c3:65:1b:b6:c8:4a:28:f5:ba:
         5f:af:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:03 2025 by rpki-client