Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137312e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137312e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          D2AYNit0VPb/d365bV0C7qlg8s5oLJApGfR6kToYfFo=
Subject key identifier:   EE:0C:DB:21:63:3D:E7:A1:EF:6F:32:F4:75:59:31:63:1C:DD:F6:B7
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       5A45027A07F24B44AB80A05A1F7A56EDA9095BD2
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137312e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:48 +0000
ROA not before:           Tue 04 Feb 2025 18:22:48 +0000
ROA not after:            Tue 03 Feb 2026 18:27:48 +0000
asID:                     28099
IP address blocks:        190.3.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:45:02:7a:07:f2:4b:44:ab:80:a0:5a:1f:7a:56:ed:a9:09:5b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:48 2025 GMT
            Not After : Feb  3 18:27:48 2026 GMT
        Subject: CN=EE0CDB21633DE7A1EF6F32F4755931631CDDF6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:c8:8b:f6:f6:3f:fe:6e:54:82:4c:69:0b:
                    3f:a9:48:12:2b:a9:20:05:51:e2:11:b9:51:e5:2f:
                    31:6b:27:41:6b:55:1c:78:90:2b:99:df:b6:13:95:
                    aa:1b:a9:79:21:9f:e5:c5:41:14:4d:74:8c:36:f5:
                    8a:7f:b7:9f:d7:76:1a:4a:d0:e2:ab:58:21:5e:1f:
                    d0:ad:32:ee:9e:e8:6b:3f:cc:ea:3f:83:b3:1b:bc:
                    d9:d6:3e:7a:7b:4b:4e:42:b1:66:f8:01:d3:fc:6c:
                    f2:11:00:78:88:ed:d4:34:59:69:a7:47:9c:4d:9c:
                    b3:07:eb:d3:7e:72:24:01:31:ff:19:35:58:9e:ea:
                    4d:8a:73:2b:ab:b4:c9:79:19:84:07:fa:1d:d0:d5:
                    39:b5:18:ae:2c:e0:93:8e:b0:06:a6:84:e5:56:29:
                    c7:6d:b5:ac:68:47:f3:3d:b7:fb:ff:01:8f:74:1b:
                    86:4d:43:4f:c6:32:06:a7:2d:76:1e:e7:c8:82:62:
                    fc:46:50:54:b6:63:14:71:d3:97:43:0b:aa:10:5b:
                    3d:78:77:d2:3a:d8:70:fe:0f:51:22:03:f5:1c:71:
                    d8:48:95:3c:14:11:87:23:e4:75:0f:01:66:58:75:
                    ae:10:fa:a9:38:ab:48:16:2b:3d:81:1f:df:e7:2e:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:DB:21:63:3D:E7:A1:EF:6F:32:F4:75:59:31:63:1C:DD:F6:B7
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137312e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:88:a1:b7:c6:32:f1:93:3f:aa:36:db:9f:91:fe:65:4e:
         9c:92:5c:a5:b3:45:0b:ad:4d:33:b9:31:4b:1d:74:8e:16:16:
         a2:0c:4a:ee:2b:8f:a7:7a:c7:f7:ff:cc:7f:bd:cc:54:55:3b:
         55:41:b7:aa:a1:6f:ac:5c:bb:0c:26:66:33:45:4b:ca:1f:06:
         45:c0:29:bc:74:68:0b:ad:ea:ae:42:5c:b3:09:11:29:d4:fe:
         0e:67:11:19:c2:52:c2:2b:4c:fd:cf:44:fb:50:13:31:76:ad:
         7c:4d:de:21:6f:0a:86:3e:16:e9:84:29:fe:a5:2d:63:78:5e:
         52:21:ed:9e:95:01:74:ee:4d:ec:c9:0a:cc:d9:05:2e:fe:1e:
         83:43:e7:1a:7e:16:c0:9f:56:05:0c:10:8b:3a:01:8d:14:fe:
         f6:e8:fb:f6:ec:ee:27:19:47:cd:d6:30:ee:07:ef:7e:ed:16:
         fb:81:6d:dc:99:22:9b:f2:c7:2b:bb:21:84:fc:a8:f9:8e:a8:
         84:93:b6:74:32:a0:fd:93:80:4a:cd:1b:53:53:88:62:c8:10:
         ed:fc:2d:78:ee:80:69:55:c3:db:aa:dc:03:6f:3e:e2:fd:56:
         f7:65:f9:1d:a5:dc:f2:a1:d2:0f:30:07:03:31:52:08:ba:93:
         7b:5f:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:20 2025 by rpki-client