Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e203138363738.roa
File:                     3139302e31342e3234392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          NTZGExq1fEcGwqj6JfjDK+H7HVLv0zoE7B3nfX/Dr7M=
Subject key identifier:   83:6E:0F:57:DA:45:BF:1C:60:2D:5E:9C:0A:51:48:71:EB:CA:52:D5
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       65E4E7AF01F2418A48B7DBB4B372CCC21C0F1BFD
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 19:56:58 +0000
ROA not before:           Tue 04 Feb 2025 19:51:58 +0000
ROA not after:            Tue 03 Feb 2026 19:56:58 +0000
asID:                     18678
IP address blocks:        190.14.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e4:e7:af:01:f2:41:8a:48:b7:db:b4:b3:72:cc:c2:1c:0f:1b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:58 2025 GMT
            Not After : Feb  3 19:56:58 2026 GMT
        Subject: CN=836E0F57DA45BF1C602D5E9C0A514871EBCA52D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:42:d3:f5:04:97:1b:c3:38:5e:ac:c2:77:
                    5c:43:51:7a:7f:89:48:47:dd:c1:4d:9d:5b:c0:5b:
                    e9:71:d8:f4:39:7a:52:f7:3e:e1:d0:16:65:ac:2f:
                    80:9e:19:11:74:9f:9f:e8:54:bb:80:d8:b1:9d:b1:
                    6b:1f:7e:45:3c:51:6c:fa:73:c3:b9:5d:8c:2b:41:
                    33:9b:66:de:cc:3a:4a:59:77:a5:a0:dd:b0:e7:0e:
                    25:93:84:86:5c:ca:b2:39:71:92:d6:63:e4:e5:b0:
                    30:f4:60:94:83:48:5d:eb:b3:9c:29:20:a2:c6:8f:
                    6d:27:45:07:8c:9b:ca:0d:2b:9c:97:95:11:0c:9e:
                    d6:d4:43:45:42:f0:a5:7d:2e:14:07:59:b5:d9:55:
                    ff:46:fb:a3:03:03:34:6a:ae:c8:3a:20:c1:9b:29:
                    f7:22:c8:75:9a:ce:0b:40:35:a0:3d:0b:d1:3d:14:
                    64:95:98:4a:0e:89:c8:e2:34:33:f6:7d:6b:9a:6a:
                    ae:44:6f:ef:b7:d3:b8:56:cc:28:9d:07:b5:70:1c:
                    c6:61:e9:af:9b:50:98:ec:06:c4:c2:54:9f:3f:c2:
                    d8:c7:6e:86:52:8e:9c:bc:79:53:77:21:c9:b1:56:
                    f3:2e:af:e5:e9:1e:b3:6d:75:0a:a3:2d:1e:29:79:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:0F:57:DA:45:BF:1C:60:2D:5E:9C:0A:51:48:71:EB:CA:52:D5
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:7d:9a:cc:49:48:3f:88:13:92:22:c5:ae:ae:69:53:a9:
         9a:b2:81:df:a3:f2:a4:70:4d:08:1c:20:66:5d:7d:08:aa:6d:
         96:5c:05:17:e5:98:3e:26:f2:15:30:ae:e8:f9:a3:3f:16:e5:
         50:25:72:e0:f4:31:d3:48:09:bb:f7:41:4b:db:9e:c5:e1:92:
         a7:2f:f6:32:8e:f4:92:91:8d:8e:d7:a7:d7:19:15:3f:fb:71:
         e6:f8:24:b2:d1:e1:72:4f:22:5c:c1:80:db:4a:92:66:66:78:
         94:ce:91:d6:fe:ba:0d:56:42:ce:f9:10:b6:15:5c:84:b2:e3:
         09:f8:f6:82:e2:93:87:b0:70:04:4f:c7:d1:a8:73:ed:94:df:
         21:67:96:bc:74:61:9e:5e:90:6d:a2:bb:f3:e5:c0:fe:c0:46:
         9b:dc:ec:f1:7f:e8:46:7e:d2:9a:49:42:7f:a8:b9:aa:c5:6a:
         62:aa:20:5a:0c:9a:76:36:43:f3:6b:ca:ee:92:b7:ef:0e:6d:
         e9:01:8f:87:9c:cc:75:e1:13:e7:3e:1d:d2:02:39:2d:a1:88:
         26:59:c0:78:b9:79:88:d9:38:b7:d6:12:6a:35:5f:da:6f:88:
         cc:36:fb:83:82:3e:08:38:03:75:b6:3b:f8:d9:a9:56:f4:fe:
         96:98:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:36:59 2025 by rpki-client