Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa
File:                     3139302e31342e36342e302f31382d3234203d3e203232353431.roa (raw, json)
Hash identifier:          DAG4YuWPkPM/tyjyeEkM3qYQx8hA7qv5k3hzePl0pRU=
Subject key identifier:   18:49:4C:51:5F:3A:2E:CE:A1:41:8D:57:23:74:E0:FE:68:4A:0C:40
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       70D89EA60D77F77C1A0697E082678842F0F10F92
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa
Signing time:             Tue 04 Feb 2025 19:59:16 +0000
ROA not before:           Tue 04 Feb 2025 19:54:16 +0000
ROA not after:            Tue 03 Feb 2026 19:59:16 +0000
asID:                     22541
IP address blocks:        190.14.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d8:9e:a6:0d:77:f7:7c:1a:06:97:e0:82:67:88:42:f0:f1:0f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Feb  4 19:54:16 2025 GMT
            Not After : Feb  3 19:59:16 2026 GMT
        Subject: CN=18494C515F3A2ECEA1418D572374E0FE684A0C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:33:a7:69:cc:a2:e4:b7:d7:3d:b6:31:ab:
                    8f:a2:04:bd:8a:a4:69:6a:c7:87:23:17:3b:2e:7c:
                    eb:2e:4c:9a:a5:5f:dc:40:fd:a9:e4:4d:e4:f5:1e:
                    9f:f4:50:24:0f:14:32:c0:fb:15:45:05:90:0b:f9:
                    d5:63:86:9f:d8:6f:d4:ec:84:1a:80:0a:f6:0a:7c:
                    18:0d:86:9b:31:94:42:72:1f:9f:b6:24:2e:59:61:
                    70:15:0f:60:9a:0b:63:12:84:77:ba:92:b9:20:41:
                    c7:6f:26:44:d9:7c:29:a7:eb:15:bf:34:2d:6f:c8:
                    23:8c:aa:8e:0e:0d:7a:1c:29:96:aa:4b:58:da:47:
                    d7:07:aa:9c:aa:b2:cc:03:ae:bd:9c:56:46:05:9f:
                    a3:86:e3:5f:61:10:a1:7b:f2:e6:3a:fe:be:b8:ef:
                    b5:9a:34:6f:ff:65:2e:fa:cf:75:39:08:ab:d8:c4:
                    07:8d:38:1a:9a:dd:4c:fa:cc:bb:24:76:ba:92:aa:
                    e7:7b:25:94:c3:a7:6e:17:fe:90:fc:9f:df:59:91:
                    36:cd:65:46:1e:b1:61:a8:1e:7d:27:56:54:4d:fb:
                    98:7e:34:11:cd:43:bd:39:ab:0c:da:db:38:c5:83:
                    d9:f2:53:ab:89:de:f6:aa:ab:64:b7:78:2c:44:93:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:4C:51:5F:3A:2E:CE:A1:41:8D:57:23:74:E0:FE:68:4A:0C:40
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:71:7a:c2:6a:dd:e0:a7:52:e6:0b:f2:88:54:52:0b:1d:6b:
         e6:55:25:4f:ff:19:01:bd:74:c3:6a:da:b7:84:c4:a8:8f:1c:
         a0:6d:5e:d1:ce:95:14:14:12:f0:3d:ba:87:7f:ae:7e:9f:f2:
         4b:0b:91:5a:39:be:21:3b:3c:f9:60:a5:0e:f9:cd:8d:ae:f2:
         49:90:28:28:89:d2:62:ff:73:a8:7c:4d:8b:03:d8:09:1f:73:
         d6:fa:81:2e:88:0a:be:0a:48:0d:cf:95:b7:27:85:d9:3f:4a:
         6a:3e:a7:16:f5:22:64:8b:78:92:58:81:48:2b:6c:45:cd:37:
         38:c7:86:3d:ef:5f:3c:74:fa:d4:61:89:44:53:91:97:43:6c:
         80:c6:e3:e9:17:ab:f3:e6:00:a9:f9:a5:72:fa:82:6e:a1:ce:
         dd:31:95:11:f7:f4:df:6a:a0:7a:fd:b4:9b:e9:db:08:b2:3a:
         9b:7c:49:d1:99:64:3e:9e:d8:1f:c2:57:6f:6d:f9:d7:4d:1a:
         cd:33:a9:fc:e4:72:f8:b1:2c:b7:9e:5b:b5:26:f4:b3:f2:6c:
         d7:88:53:38:b6:76:f5:f1:15:42:2c:24:44:6d:ab:7c:84:56:
         21:53:1b:d2:bc:80:35:fd:80:58:5d:e1:62:86:fb:3c:89:39:
         4f:e2:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:23 2025 by rpki-client