Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234362e302f32342d3234203d3e203138363738.roa
File:                     3139302e31342e3234362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          ApriI7CW1eFOlPTzyMTb2H20ciCkANJxGhtg7gL8PTU=
Subject key identifier:   28:81:F6:A6:86:9A:82:72:EC:A3:8B:B9:FE:F5:06:8B:B3:8D:D1:3C
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       4FA0A6099D50D88028651BCDA1F758FB5050974B
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234362e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 19:57:02 +0000
ROA not before:           Tue 04 Feb 2025 19:52:02 +0000
ROA not after:            Tue 03 Feb 2026 19:57:02 +0000
asID:                     18678
IP address blocks:        190.14.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a0:a6:09:9d:50:d8:80:28:65:1b:cd:a1:f7:58:fb:50:50:97:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:02 2025 GMT
            Not After : Feb  3 19:57:02 2026 GMT
        Subject: CN=2881F6A6869A8272ECA38BB9FEF5068BB38DD13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:43:af:e8:63:b1:f0:10:4f:d4:69:4d:95:
                    b2:18:1f:6a:2a:da:e2:e3:24:2a:7c:5d:b5:ed:e0:
                    bb:65:18:9f:a7:3b:e6:09:22:9d:80:61:d1:42:5f:
                    c0:10:63:aa:ed:8f:ed:28:72:b4:94:e3:6e:1f:2d:
                    84:9b:c2:55:47:86:1d:ed:f2:ee:21:45:5b:d2:e8:
                    e0:3b:e0:ff:7c:85:48:98:46:3a:b9:40:a0:95:ac:
                    77:15:56:9b:0d:4c:5f:84:38:6d:34:b3:2a:2d:ac:
                    ba:4d:1c:d9:a3:02:b8:9f:aa:29:10:d4:bd:96:fd:
                    90:68:08:a7:ba:7e:f9:f9:d7:eb:de:6d:56:f6:a4:
                    c8:10:10:9f:13:83:5c:63:07:ea:77:ea:11:e5:33:
                    bf:52:3f:83:17:23:3c:80:c0:1f:d7:9b:7e:7f:86:
                    30:57:65:f7:e5:80:cd:bc:6c:7e:29:3b:ba:a0:9c:
                    ce:79:87:ef:9c:11:41:35:71:ea:6f:db:94:8a:f4:
                    10:6c:22:95:d1:e4:d5:5c:12:24:28:44:0f:8f:90:
                    5e:f1:0b:86:8c:b5:05:17:4f:e9:dd:6f:21:65:01:
                    4d:5c:96:84:b2:72:83:6a:ac:28:74:16:14:48:e7:
                    ad:2f:d6:cc:df:c3:12:f6:29:87:24:7d:3b:cb:b6:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:81:F6:A6:86:9A:82:72:EC:A3:8B:B9:FE:F5:06:8B:B3:8D:D1:3C
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234362e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:13:8e:7c:d1:02:ed:dc:6d:dd:a6:7d:ac:21:0b:04:9b:
         73:2b:93:39:c4:83:48:67:cc:8c:7c:29:5f:73:9c:04:70:e8:
         09:b3:45:40:ad:85:a4:56:20:85:24:88:0a:71:37:c7:46:79:
         5d:86:ba:c1:86:76:d3:6e:ca:de:16:e2:fe:2d:b5:ff:59:34:
         22:e6:94:ff:f7:80:89:16:e1:17:b8:06:2f:4c:20:04:35:b6:
         f0:3e:79:07:8b:09:3f:8a:2d:1c:6d:d1:41:31:ce:e1:b8:36:
         ab:56:f2:88:79:10:f0:e2:ab:9c:4f:5b:5e:2b:96:98:86:96:
         6f:a1:e6:a8:e2:74:55:22:a8:5f:b6:b3:bb:56:3e:aa:5a:c1:
         4f:2e:ca:2a:2a:d2:50:41:89:7c:9e:dc:c6:8e:5d:64:38:4b:
         5b:5a:f3:36:df:b6:e2:74:39:b7:e0:6e:58:1b:c4:74:fe:cf:
         f5:3a:fb:50:b5:07:61:00:ce:a1:c7:9b:53:84:1a:22:da:00:
         80:76:ce:5c:9f:05:ba:b9:29:ee:57:93:d8:80:14:33:8f:bf:
         5c:cd:ea:14:b5:37:f1:56:61:6b:e4:8c:fb:50:ee:df:fd:0d:
         95:ba:c2:5a:97:bc:c2:8f:44:a0:b4:6a:03:2a:ac:94:72:9e:
         91:ef:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:06:44 2025 by rpki-client