Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa
File:                     3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa (raw, json)
Hash identifier:          DnIYnl1bqezHz7gNIiT0YhGRS5zs1fMblmagtmdPOQA=
Subject key identifier:   75:89:53:F6:C8:52:3A:6F:28:A0:7D:D7:73:E6:BF:EB:22:4C:C0:6A
Certificate issuer:       /CN=13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D
Certificate serial:       1C5F6748DFD030AC4FFED317E79A2F24F41E00D7
Authority key identifier: 13:C8:52:CF:CA:9A:BE:0A:EF:8B:EC:9A:91:49:65:B8:25:0C:CA:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa
Signing time:             Tue 04 Feb 2025 18:23:26 +0000
ROA not before:           Tue 04 Feb 2025 18:18:26 +0000
ROA not after:            Tue 03 Feb 2026 18:23:26 +0000
asID:                     11514
IP address blocks:        190.111.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5f:67:48:df:d0:30:ac:4f:fe:d3:17:e7:9a:2f:24:f4:1e:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D
        Validity
            Not Before: Feb  4 18:18:26 2025 GMT
            Not After : Feb  3 18:23:26 2026 GMT
        Subject: CN=758953F6C8523A6F28A07DD773E6BFEB224CC06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:14:45:5f:be:93:81:6f:30:ff:09:6b:30:
                    6e:bc:a2:97:a1:14:32:ed:09:11:09:be:c1:4d:01:
                    3e:59:5b:8b:7e:2c:fd:2f:89:c2:db:f2:9c:4f:12:
                    1e:d5:fe:ab:4c:c0:7b:74:b7:ed:b7:65:85:31:90:
                    15:cf:7e:7d:ac:dd:cf:57:8f:e4:4a:a7:15:0c:09:
                    8e:89:45:42:1d:f7:e2:a9:ce:24:90:d2:fd:f2:49:
                    48:1b:a5:a1:61:d0:93:4b:11:15:ed:d9:4c:da:d5:
                    98:e4:39:bd:c7:a0:12:6e:9a:41:8a:02:8b:16:94:
                    ce:5b:4f:3a:0a:05:4b:86:67:3f:14:9b:9b:5c:a3:
                    16:34:d1:b2:64:b6:9a:e3:55:4f:e7:3e:5e:a3:86:
                    c4:ad:2a:6e:5b:d3:d3:3a:85:b3:b9:a5:3c:fc:22:
                    e6:39:7b:f4:6e:96:dd:0d:57:1f:ac:19:ab:7f:e3:
                    73:e6:3c:9f:a0:75:3e:32:8c:b0:ad:38:e7:3c:7c:
                    51:72:54:66:cf:32:a5:d4:cb:fa:d6:46:a4:4e:e3:
                    a8:89:5a:38:bd:c9:3e:4b:f3:3c:c2:5a:3e:11:22:
                    66:49:49:e2:85:85:b3:98:e6:5d:f8:0f:91:e2:16:
                    a8:8b:30:be:ad:41:e8:76:73:e8:e0:91:3e:17:d9:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:89:53:F6:C8:52:3A:6F:28:A0:7D:D7:73:E6:BF:EB:22:4C:C0:6A
            X509v3 Authority Key Identifier:
                keyid:13:C8:52:CF:CA:9A:BE:0A:EF:8B:EC:9A:91:49:65:B8:25:0C:CA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:72:df:0c:bf:a3:c5:ef:dd:63:35:0b:95:be:e3:1f:31:
         c3:16:6b:70:d0:35:8d:98:39:ef:f2:6e:ed:47:e9:1b:d7:0a:
         85:b9:fc:c4:d9:bf:84:7e:e0:34:12:c8:9f:39:30:da:02:0b:
         b6:ff:09:a4:b4:6d:e3:7c:16:e4:14:32:04:9d:ee:7e:7f:4c:
         56:21:cf:9e:f4:12:34:c3:61:2f:1c:5f:d0:f8:c1:e4:30:bf:
         07:1a:71:25:1e:90:1a:1e:7c:b8:eb:ea:ea:35:aa:4d:74:5d:
         f2:d1:2b:e9:da:aa:01:6c:e5:28:f0:b4:4e:56:17:9a:d4:4d:
         fc:17:d1:0b:b8:32:75:c1:9d:9d:8d:8d:01:22:e3:99:af:63:
         76:e7:94:e5:9b:5b:77:56:fc:22:0b:88:5c:d2:4b:d9:40:73:
         58:da:88:9b:0a:56:18:95:5b:6e:45:89:d5:3c:e8:41:a0:67:
         0e:3d:65:f5:75:11:84:11:60:9f:b0:8f:7b:2f:8a:27:70:78:
         e1:42:0b:42:6a:23:dc:44:74:b0:17:92:35:23:76:6a:5a:03:
         b1:ce:e9:6e:ba:59:f3:d5:2b:42:4c:6a:c5:de:64:5f:fe:9d:
         e4:d9:b8:bc:cc:ba:5a:7d:c9:b0:7e:46:bf:4b:c7:b1:fa:9f:
         91:a7:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 01:25:23 2025 by rpki-client