Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136392e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3136392e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          i9JL53SHTwvgzUVjlW4S3S5YHSDUYvCXkJGCyv5wJ6Q=
Subject key identifier:   06:5B:AA:96:C0:85:4A:D1:40:0F:FD:49:61:28:46:27:7A:52:6A:37
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       2B5E2227DA292AE311FDDB871C0166F31F7833C2
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136392e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:50 +0000
ROA not before:           Tue 04 Feb 2025 18:22:50 +0000
ROA not after:            Tue 03 Feb 2026 18:27:50 +0000
asID:                     28099
IP address blocks:        190.3.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5e:22:27:da:29:2a:e3:11:fd:db:87:1c:01:66:f3:1f:78:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:50 2025 GMT
            Not After : Feb  3 18:27:50 2026 GMT
        Subject: CN=065BAA96C0854AD1400FFD49612846277A526A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:8d:6a:dd:c8:dc:27:ce:e3:23:e6:37:95:
                    21:89:d6:90:0f:66:7d:10:19:dd:64:b1:92:e1:54:
                    0f:df:81:8f:a7:15:cc:d3:1c:65:e7:13:f6:1e:75:
                    b5:a3:e7:7c:fd:fe:9a:dc:1e:6f:c3:b7:4e:60:55:
                    e4:13:8d:29:31:17:a9:78:e0:65:5e:ae:71:44:9d:
                    28:b6:a6:32:36:1e:09:b6:0b:46:ce:17:e6:71:0b:
                    89:e8:b9:71:34:dc:a9:22:28:31:62:a9:82:87:90:
                    ec:06:6e:da:ec:f3:a2:42:ec:a6:4a:5c:e9:0c:00:
                    7a:66:e6:fc:38:4d:fb:ca:1a:74:ab:4e:85:30:ad:
                    96:49:d2:3b:3a:35:9c:8e:d9:09:f4:1b:8c:e9:22:
                    12:f2:53:c9:12:4c:51:ba:5c:aa:97:3a:bd:ed:2d:
                    71:3f:5b:d5:db:60:5c:ff:f6:86:d9:75:e6:8d:c6:
                    7f:80:49:1e:2d:a1:0d:d3:27:cb:e4:e7:e9:72:b5:
                    63:b8:e8:bc:4d:10:2b:61:fa:4d:c4:7f:b5:fc:28:
                    0c:86:61:51:27:c5:32:f9:ae:54:38:20:a8:a4:61:
                    28:c0:36:68:64:49:85:c1:4d:b5:74:10:82:e6:9c:
                    bd:3e:35:b7:a4:38:9d:73:26:b8:b7:8b:ad:ac:a0:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5B:AA:96:C0:85:4A:D1:40:0F:FD:49:61:28:46:27:7A:52:6A:37
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136392e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:45:d3:99:15:59:20:2b:6e:e6:e6:85:53:7b:4a:99:9f:
         8a:43:1d:7b:12:be:98:5b:68:ce:d7:80:dd:5f:cb:b7:9d:62:
         68:02:a9:7b:0a:61:46:55:24:d8:ea:d9:aa:41:21:3f:b2:55:
         03:93:c4:9f:33:d8:fd:1a:f2:f2:27:41:d9:a3:26:0f:45:72:
         dd:f5:5d:39:4a:c5:b2:b0:12:34:58:80:e5:0f:f9:91:cd:fb:
         d5:c2:41:cc:ca:92:8f:02:20:02:06:2f:39:ec:03:20:fc:ef:
         d0:58:f8:67:30:a4:71:19:53:3f:54:6d:72:6a:e2:5d:4a:9b:
         89:92:80:c3:18:94:21:00:67:4d:1d:4d:f0:10:99:89:e2:87:
         7d:a0:b5:02:89:a2:2c:af:17:78:85:57:51:80:67:c6:4b:f2:
         a3:db:27:2e:7a:d8:0c:fb:92:43:13:51:bb:21:07:79:86:2f:
         cd:c7:9e:80:3d:f1:cb:0e:f8:fa:71:86:3f:22:43:c8:e8:9a:
         4d:23:fa:07:f5:e4:1a:7b:21:d2:d9:bb:6f:98:0e:54:93:af:
         94:dd:8f:62:39:3c:11:d4:82:34:e8:be:bf:8a:0c:1d:1a:34:
         97:da:c2:f3:d2:8d:f1:b8:df:24:10:bb:9e:ee:eb:59:50:af:
         0a:a1:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:32 2025 by rpki-client