Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38302e302f32302d3234203d3e203238303332.roa
File:                     3139302e3130382e38302e302f32302d3234203d3e203238303332.roa (raw, json)
Hash identifier:          nalJgtuYU/W5I6ePWfMc8JtikU3OStqs81CQR4uBwco=
Subject key identifier:   57:A9:8E:9B:82:18:E0:69:99:B6:40:39:C7:C3:8A:5B:DB:96:54:17
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       15E271050FE8D251680C5CFC73E2A86BBFBD4B6F
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38302e302f32302d3234203d3e203238303332.roa
Signing time:             Tue 04 Feb 2025 18:31:34 +0000
ROA not before:           Tue 04 Feb 2025 18:26:34 +0000
ROA not after:            Tue 03 Feb 2026 18:31:34 +0000
asID:                     28032
IP address blocks:        190.108.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e2:71:05:0f:e8:d2:51:68:0c:5c:fc:73:e2:a8:6b:bf:bd:4b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Feb  4 18:26:34 2025 GMT
            Not After : Feb  3 18:31:34 2026 GMT
        Subject: CN=57A98E9B8218E06999B64039C7C38A5BDB965417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:94:fd:36:4d:9b:4f:98:ea:c8:a0:6e:35:
                    c9:9c:7b:c8:c0:65:75:29:ba:3b:11:81:4b:cb:a3:
                    98:dc:6f:93:f7:94:f2:67:dd:83:bc:87:1c:92:0e:
                    fb:b3:6c:78:c1:54:5e:69:2c:de:95:68:41:58:0c:
                    c1:cd:fb:da:d2:24:9a:30:f0:ab:0a:23:3e:b9:49:
                    73:44:dd:8d:be:01:a4:96:0c:10:28:13:04:e6:e4:
                    c3:85:57:36:c9:52:ef:bc:ed:64:80:8b:46:d9:69:
                    99:fb:23:40:23:69:86:82:b6:35:88:0a:19:a0:cf:
                    4d:e4:ca:7b:3d:81:f5:31:ac:1c:69:4d:37:9d:d8:
                    fc:a9:44:da:f8:87:15:79:4f:97:3c:bf:ae:b0:d1:
                    cf:71:1f:8e:42:b1:d0:c8:fb:3f:d8:23:65:6a:94:
                    d2:db:53:7a:67:17:2f:ba:79:e0:7d:6f:03:77:1c:
                    32:65:18:ef:07:b5:09:1b:50:22:74:c9:32:b3:38:
                    34:3e:b0:04:af:97:f1:f5:64:21:0c:5d:5c:72:de:
                    8e:24:f8:57:bb:60:ef:ca:96:c6:08:39:16:1f:2f:
                    a0:4a:05:50:ff:dc:1d:60:08:a7:e1:1b:d6:53:d0:
                    07:d4:33:c5:8f:65:c8:0f:3d:a1:9d:dd:c8:18:5b:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:8E:9B:82:18:E0:69:99:B6:40:39:C7:C3:8A:5B:DB:96:54:17
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38302e302f32302d3234203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:02:b0:9e:ed:ff:72:2c:24:dd:1c:9d:d9:45:50:7e:63:
         47:af:6a:d9:b0:16:58:27:00:1d:8d:0e:0b:10:6d:6a:b8:33:
         0f:35:7f:18:0b:e0:07:6c:aa:5e:d1:75:d9:66:c1:b8:fb:6a:
         0f:4c:e7:c3:54:e9:f2:51:20:51:3e:fb:bd:83:9f:f6:ec:7d:
         0e:48:2b:23:42:97:fa:af:be:7b:b4:5d:7c:66:61:80:09:56:
         c2:8d:24:78:b6:0a:f2:af:1a:90:53:59:14:b9:d9:07:d4:cf:
         b1:02:6f:ea:5a:77:07:55:99:eb:f3:63:c8:04:88:82:c4:2e:
         05:88:ba:40:7b:6c:f4:ef:f8:32:aa:4d:57:d2:fd:20:2b:fe:
         1f:ce:5d:2b:71:87:f6:f4:6c:30:64:60:f3:08:bf:85:0a:c1:
         5f:75:0a:0f:37:f9:e1:7d:95:92:9b:0d:e6:0a:99:41:c9:58:
         f5:2d:f4:3e:32:1f:ee:a1:16:c0:5f:a5:d1:b0:02:07:f7:e9:
         ac:9d:b0:06:69:a7:55:5d:0f:e3:f9:9d:6f:4f:b7:23:e8:82:
         2e:5a:d0:fe:7f:81:9a:a0:68:ca:2e:d7:50:6c:9d:43:41:4c:
         4c:08:ce:56:b4:94:e2:9d:ea:cf:33:1a:22:cc:34:7d:10:3e:
         a5:50:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:57 2025 by rpki-client