Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa
File:                     3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          PFp5yaMUCTbU6aaMSlCcfa4yAJFYv68j8mN5OPXmNVM=
Subject key identifier:   71:AC:0B:81:3B:97:75:52:67:85:FD:A1:59:B1:14:83:1A:AA:12:9E
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       64A1CE76D6CDE48FB5109A518C50C3EA57AC4989
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:57:03 +0000
ROA not before:           Tue 04 Feb 2025 19:52:03 +0000
ROA not after:            Tue 03 Feb 2026 19:57:03 +0000
asID:                     262589
IP address blocks:        190.14.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:ce:76:d6:cd:e4:8f:b5:10:9a:51:8c:50:c3:ea:57:ac:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:03 2025 GMT
            Not After : Feb  3 19:57:03 2026 GMT
        Subject: CN=71AC0B813B9775526785FDA159B114831AAA129E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:07:91:cb:1c:a8:3a:ec:64:c2:10:b0:00:
                    fc:58:33:a5:85:ba:49:de:f9:22:42:ee:42:55:13:
                    98:65:16:5a:e6:56:4b:18:b6:e2:06:0a:e8:b7:17:
                    e7:34:16:e6:65:bf:50:78:6e:43:ea:99:90:7c:d1:
                    cf:d8:91:58:da:b5:9f:0f:b9:20:cf:19:9b:fb:69:
                    97:75:16:34:00:6e:d5:1c:c9:0b:4c:33:cf:86:c2:
                    e2:a8:5d:f1:f7:4c:60:a7:f8:ef:1d:de:55:9e:8a:
                    ab:19:59:24:51:4e:aa:79:f4:6a:42:ae:d1:81:46:
                    66:e1:72:a0:2a:a6:80:4e:22:a5:ad:a2:e8:8a:1b:
                    9c:6f:a2:67:12:4d:80:3c:5c:c9:8b:04:1e:a3:be:
                    13:0b:90:1f:3c:50:3e:5e:c8:46:30:61:57:ea:b1:
                    61:9f:86:34:5a:7c:4b:54:39:a3:b7:b4:ab:a6:fb:
                    6c:89:5b:a4:6f:d0:2f:09:c1:21:26:cb:0a:c8:c5:
                    1c:b3:40:f0:72:54:a9:94:5c:7d:5c:bd:8e:1a:01:
                    5a:1a:4f:7d:47:f6:b3:3e:37:48:55:75:ee:1c:4b:
                    a8:44:42:1e:2f:05:04:bf:1a:25:06:da:a4:81:95:
                    d0:65:77:44:d6:e3:52:b9:22:bc:35:28:95:ea:9f:
                    e2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AC:0B:81:3B:97:75:52:67:85:FD:A1:59:B1:14:83:1A:AA:12:9E
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:1d:39:92:16:cb:7a:ba:6d:02:cb:bc:62:d7:a4:55:44:
         d0:b4:70:82:c3:83:96:4d:b3:a1:81:07:fd:00:99:41:7a:db:
         58:9c:52:61:c3:2f:13:d5:25:bc:64:36:0a:52:f4:82:63:0c:
         2a:9e:b7:26:b9:5b:23:5d:24:e5:15:fd:08:5a:cd:f3:fd:09:
         89:c2:40:f5:6c:38:66:b7:a4:c9:8b:20:bc:a1:d2:97:2a:97:
         bb:b5:22:82:5b:0d:ae:0f:90:fe:04:a4:8c:44:3c:cd:0f:ef:
         e6:67:ae:13:8c:9a:47:0c:49:ea:2b:bf:05:b8:fa:58:48:01:
         c6:54:6e:28:f6:c0:77:33:7c:b0:c4:ab:c8:a9:b7:06:ac:cf:
         8a:58:f5:4b:d0:db:5d:7b:9b:f2:cd:99:78:b6:f8:49:2f:5c:
         45:a0:61:df:fb:1d:27:40:53:d3:91:63:92:42:fc:9b:64:f9:
         8d:7f:2b:3f:04:30:23:5e:75:ec:59:2b:33:88:39:b8:f9:c1:
         34:4c:26:80:54:2d:1a:21:85:c2:bb:67:b3:16:33:ed:c4:cd:
         b3:23:45:09:c0:23:a6:d5:1a:71:22:c9:76:05:93:02:e5:9b:
         fe:be:ee:ed:4e:96:a2:49:bc:aa:99:bc:5f:b7:be:64:7c:2e:
         6b:49:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:38 2025 by rpki-client