Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137332e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137332e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          fnKnJY9L1OpkRLEm3ZEV30XiY355RI6YtqEJAWH+HRE=
Subject key identifier:   21:8A:FC:BE:F7:A9:DC:CE:48:52:FF:A7:12:18:93:A7:DA:19:FA:28
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       1BAA079A5E4E53B7BA7D7450C7A50F34EB8DC859
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137332e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:51 +0000
ROA not before:           Tue 04 Feb 2025 18:22:51 +0000
ROA not after:            Tue 03 Feb 2026 18:27:51 +0000
asID:                     28099
IP address blocks:        190.3.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:aa:07:9a:5e:4e:53:b7:ba:7d:74:50:c7:a5:0f:34:eb:8d:c8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:51 2025 GMT
            Not After : Feb  3 18:27:51 2026 GMT
        Subject: CN=218AFCBEF7A9DCCE4852FFA7121893A7DA19FA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:8e:5d:4b:ca:f5:6e:bc:86:ab:42:ec:c4:
                    76:3b:3d:89:a8:15:5a:87:d5:e3:e1:e0:28:ee:80:
                    7c:a6:d4:5a:c4:65:7e:8c:89:f5:93:51:81:43:b9:
                    3a:94:b8:77:e8:fb:6c:d9:33:e0:8a:82:76:f8:db:
                    1a:92:ae:e7:a3:41:0c:09:4b:c9:84:68:eb:ab:eb:
                    32:2b:94:e4:79:de:e2:c5:b2:85:e7:ba:c7:3f:3b:
                    36:6b:d9:c0:2a:1c:dd:23:b0:1c:26:ac:bb:58:20:
                    e6:c5:56:76:d5:30:57:96:a9:23:61:86:ea:15:c6:
                    e2:b6:39:66:bd:76:59:28:a4:7b:e8:cc:88:11:cf:
                    79:1e:3c:2a:c5:03:de:cf:10:15:f2:9f:8b:0b:01:
                    b8:5f:4e:7c:79:bb:26:e7:07:66:7b:30:ba:9b:b7:
                    80:d3:a3:81:dc:c4:b7:66:93:37:96:1a:7f:06:7e:
                    f6:62:50:a7:ee:86:ac:0b:89:95:7a:0c:62:4f:fc:
                    32:77:51:d5:46:e3:b1:c8:74:27:d0:f0:8b:9a:9b:
                    85:41:00:a5:b5:ab:ac:f8:51:cf:0e:b7:ea:3d:0d:
                    88:c0:8b:91:87:ff:46:a4:51:11:17:47:b3:aa:f0:
                    33:c5:db:8d:13:09:5f:7b:5a:ce:f3:70:24:c9:50:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8A:FC:BE:F7:A9:DC:CE:48:52:FF:A7:12:18:93:A7:DA:19:FA:28
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137332e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:48:25:68:12:ac:f3:27:4d:72:c9:52:da:0f:ba:87:8f:f9:
         09:33:5d:2a:c8:62:ad:f2:f7:af:c5:3e:3b:30:ba:e6:86:97:
         34:a1:7c:bb:cf:3f:8d:1e:09:c5:52:e5:f8:49:e2:20:fd:96:
         66:da:ef:77:7a:f4:c8:1b:96:d3:0d:f7:29:bc:7a:07:99:34:
         be:0e:0a:d5:78:75:18:ee:34:7e:c1:27:59:23:cc:18:87:43:
         4c:03:43:c5:61:83:89:d6:db:b0:90:29:6d:66:a0:30:17:a9:
         67:21:69:4a:3e:ce:e1:27:7a:e3:9c:a4:9a:f4:42:3c:b1:0b:
         90:da:63:60:3b:01:8e:db:92:be:d4:a3:60:aa:54:a1:39:ce:
         de:7f:74:8c:89:79:2d:f3:24:f8:51:3e:d9:f4:be:b8:69:b7:
         f1:50:5a:9c:25:58:b7:29:84:f7:67:c6:b6:cb:54:bc:30:20:
         22:af:32:c5:a9:c9:d2:65:21:d2:e5:cd:5d:ff:07:ba:e4:e3:
         54:70:a5:80:d3:63:1c:5f:40:b2:c8:af:43:b9:3f:a3:10:dd:
         1f:3d:6e:cc:ee:08:f0:5c:58:b3:e5:2c:f1:20:c0:a8:91:6d:
         ba:61:95:d3:8b:4c:23:bf:57:7c:cd:39:89:9c:66:3f:70:ab:
         26:1d:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:44 2025 by rpki-client