Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/3139302e38392e34302e302f32322d3232203d3e20323639393434.roa
File:                     3139302e38392e34302e302f32322d3232203d3e20323639393434.roa (raw, json)
Hash identifier:          uuRZ+GSf9irITm2hnWvIJWiidyhxmGRkcH3kSJh34D4=
Subject key identifier:   4F:7F:AB:D6:E1:38:BE:B3:23:4A:AE:F6:6A:58:01:FA:85:7A:A0:C4
Certificate issuer:       /CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
Certificate serial:       4ED8664575114FBE28DD1B0D30158CDA60AD88FF
Authority key identifier: EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/3139302e38392e34302e302f32322d3232203d3e20323639393434.roa
Signing time:             Tue 04 Feb 2025 18:44:36 +0000
ROA not before:           Tue 04 Feb 2025 18:39:36 +0000
ROA not after:            Tue 03 Feb 2026 18:44:36 +0000
asID:                     269944
IP address blocks:        190.89.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d8:66:45:75:11:4f:be:28:dd:1b:0d:30:15:8c:da:60:ad:88:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
        Validity
            Not Before: Feb  4 18:39:36 2025 GMT
            Not After : Feb  3 18:44:36 2026 GMT
        Subject: CN=4F7FABD6E138BEB3234AAEF66A5801FA857AA0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:14:e6:3d:34:1b:89:d4:f1:6c:05:7b:7f:
                    55:64:15:5f:f2:32:c6:0e:f3:48:8b:9a:e7:0d:d2:
                    0d:e0:5b:f8:86:c7:b7:80:6d:0a:d5:f4:77:5f:42:
                    20:94:30:37:47:3c:91:fb:62:8c:e5:52:3b:55:3e:
                    c3:b4:ae:21:69:e8:c1:e5:f1:89:64:01:07:3c:db:
                    84:fc:b7:d6:d6:79:31:0d:e8:47:7d:07:20:85:89:
                    c6:cc:a7:4f:77:a3:26:cf:e9:72:3d:0c:79:e2:fc:
                    a2:60:dc:a2:5d:dc:a9:9c:70:97:65:3c:6e:42:fd:
                    92:cf:e7:35:7a:39:90:96:e3:23:ae:62:ee:ad:c1:
                    f7:fd:1b:0b:ac:0d:47:e8:83:6f:3f:83:1e:1c:0b:
                    bb:92:de:b3:75:94:93:6f:10:22:22:60:c0:5c:3f:
                    83:70:7c:46:e4:1c:fc:6d:b8:05:5f:79:f2:2d:8d:
                    be:4b:87:72:50:15:21:ed:10:d1:d5:22:35:04:e7:
                    9c:06:6b:d1:48:b5:70:f7:e3:ae:1a:bb:34:58:7c:
                    56:24:ec:b7:d9:f1:b9:bc:4a:62:f6:b1:59:eb:2e:
                    ea:7e:08:0a:76:1f:f7:85:37:8e:43:cc:d0:64:6a:
                    bb:dc:7c:63:01:68:68:00:a8:20:e2:ae:6e:2f:51:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7F:AB:D6:E1:38:BE:B3:23:4A:AE:F6:6A:58:01:FA:85:7A:A0:C4
            X509v3 Authority Key Identifier:
                keyid:EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/3139302e38392e34302e302f32322d3232203d3e20323639393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:d2:54:60:6d:d4:f0:74:cd:9e:b1:dc:7f:02:a7:4f:25:
         cb:70:2d:c1:c7:18:f9:a1:fe:30:db:62:31:ee:28:b0:1e:6d:
         3a:1c:da:45:12:b4:e2:1a:1e:35:36:80:55:8b:bf:6b:77:fe:
         8f:6c:19:db:62:b5:5f:a9:a8:c8:44:5a:6d:06:d5:a4:45:3c:
         0f:72:8c:fe:22:6f:7d:a3:ec:38:0b:14:30:8a:c6:4e:66:3a:
         ae:be:55:e1:a0:0e:dd:b2:75:f7:69:51:31:a8:d1:8f:6c:31:
         9a:61:e2:93:52:0f:36:c1:26:8d:94:3e:5f:0a:67:b6:50:9b:
         af:fb:72:96:bb:da:e4:09:6c:1b:59:55:a1:87:7c:66:24:b5:
         5d:ef:8d:81:ea:d5:c7:4c:77:3a:8c:20:ce:4a:06:7a:01:8d:
         8f:d7:c1:27:9b:a7:97:28:77:d3:6d:a2:96:ea:8c:b7:bc:b3:
         63:f6:37:84:46:1b:2d:0b:6f:20:c1:46:dd:8e:4a:31:c3:b3:
         fb:ec:bc:7d:80:bd:3f:53:c6:ce:ee:6a:c5:4b:66:11:cd:e0:
         af:ef:4b:43:5d:b3:2a:cc:05:d7:18:b1:bc:84:f0:e2:dc:44:
         13:ee:3e:fe:b2:1f:b1:c0:22:d0:d4:63:e2:6a:2c:7c:ce:8e:
         7a:4d:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:19 2025 by rpki-client