Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e35322e3132382e302f31382d3138203d3e203237383636.roa
File:                     3139302e35322e3132382e302f31382d3138203d3e203237383636.roa (raw, json)
Hash identifier:          iXFRkibdBB2qSp71E4ojBwfzYg3WFJsXncJ3OX5J250=
Subject key identifier:   FA:52:F3:DD:A2:3E:F8:F6:64:72:FD:E7:F7:1C:2C:FC:B8:E9:75:DA
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       5DE6178F25C8D7A0A84483FF0ED39BD6BD89AD7D
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e35322e3132382e302f31382d3138203d3e203237383636.roa
Signing time:             Tue 04 Feb 2025 18:31:20 +0000
ROA not before:           Tue 04 Feb 2025 18:26:20 +0000
ROA not after:            Tue 03 Feb 2026 18:31:20 +0000
asID:                     27866
IP address blocks:        190.52.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 15:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e6:17:8f:25:c8:d7:a0:a8:44:83:ff:0e:d3:9b:d6:bd:89:ad:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:20 2025 GMT
            Not After : Feb  3 18:31:20 2026 GMT
        Subject: CN=FA52F3DDA23EF8F66472FDE7F71C2CFCB8E975DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:68:96:77:7a:24:89:08:62:c1:62:0c:c1:
                    26:b6:7e:57:64:ef:84:09:fd:87:a0:86:52:57:29:
                    e5:e7:fd:24:24:38:c2:70:a2:98:ce:69:c0:2a:ad:
                    53:cf:8e:63:79:c3:ae:8c:5e:1c:3a:5e:83:e7:77:
                    6e:2c:74:29:1c:b8:7c:d6:ff:e6:f6:c5:43:df:50:
                    b1:61:82:01:39:8c:75:a2:27:4c:86:de:aa:14:c1:
                    0a:91:12:aa:78:5d:78:66:2b:6a:f2:21:4d:ba:09:
                    46:31:ef:52:75:7e:2b:42:ab:87:4e:cc:23:bd:80:
                    a4:ab:44:14:7a:b0:65:83:85:b9:d8:0a:d0:91:d5:
                    fb:18:0c:84:00:37:e5:82:5d:84:13:b7:a1:bc:de:
                    b7:88:ed:ad:30:4b:dd:77:13:0a:ad:a2:d9:b4:d1:
                    42:47:27:db:49:77:0f:78:53:50:7e:c6:94:7c:9f:
                    ba:33:94:af:28:6a:6c:28:05:36:79:4b:d6:f3:02:
                    26:b5:a2:20:71:60:c1:85:8d:8c:f4:21:5a:f4:1b:
                    a5:72:d3:a5:4c:39:b5:7d:44:ad:43:b1:c4:3d:41:
                    89:d6:8c:91:81:d7:1d:a6:04:90:7b:83:a0:9a:dd:
                    5f:8c:97:a5:38:86:db:75:77:ff:10:67:50:28:96:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:52:F3:DD:A2:3E:F8:F6:64:72:FD:E7:F7:1C:2C:FC:B8:E9:75:DA
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e35322e3132382e302f31382d3138203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:9a:63:65:62:c2:46:fb:cc:06:52:c5:3e:9e:a8:86:e3:
         51:86:40:68:23:ad:13:47:5a:06:48:51:d2:a3:79:99:5e:ce:
         36:85:50:12:7f:93:65:06:8c:88:de:f0:4d:a7:1c:44:65:83:
         51:91:8e:0e:18:4e:d0:f1:a7:79:a9:34:48:45:e8:d7:8d:df:
         16:74:e5:2b:7c:ef:cb:17:03:4a:fd:a9:eb:95:62:2c:cf:8a:
         ae:71:54:ad:ab:2b:22:a9:e8:ed:29:05:1d:e8:0d:17:c2:94:
         2d:ae:d0:98:7d:ed:27:a9:97:5c:1b:ba:5f:be:db:9c:19:9a:
         34:59:b7:d1:e2:5c:8c:3c:fc:76:75:6b:bc:b9:b7:41:ba:e7:
         c7:7e:34:7d:ed:20:3f:79:df:a8:43:f4:63:39:d6:82:57:74:
         44:78:82:51:7c:b2:c1:09:d4:8b:53:7d:7b:81:7b:67:e3:f2:
         71:6f:9a:2f:14:7b:9b:89:99:4c:e8:e3:c5:a2:63:6f:21:75:
         d9:5c:66:70:4c:2c:b4:6e:d2:15:e8:ec:56:f8:ee:d0:36:c3:
         e2:1f:3c:7c:78:9d:2f:df:21:6e:d8:28:4f:f7:02:83:ca:d3:
         b0:5e:f1:16:5c:e3:c9:9f:b3:15:32:2a:96:4d:ff:5b:83:a8:
         6a:f7:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:44:35 2025 by rpki-client