Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e3132342e36342e302f31392d3234203d3e203238313138.roa
File:                     3139302e3132342e36342e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          ZPx0qy1JYHSU6djcLrZEE2rv1ES3J+lwrfqzbI7X/Uk=
Subject key identifier:   2F:3D:54:5A:5F:FD:57:3A:E9:2D:2C:78:2E:F5:7E:42:52:9D:BA:E4
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       1094634CC46D6B0FED6F308EFC6C110FCD4078D2
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e3132342e36342e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:47:00 +0000
ROA not before:           Tue 04 Feb 2025 18:42:00 +0000
ROA not after:            Tue 03 Feb 2026 18:47:00 +0000
asID:                     28118
IP address blocks:        190.124.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:94:63:4c:c4:6d:6b:0f:ed:6f:30:8e:fc:6c:11:0f:cd:40:78:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:00 2025 GMT
            Not After : Feb  3 18:47:00 2026 GMT
        Subject: CN=2F3D545A5FFD573AE92D2C782EF57E42529DBAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:9f:6d:fb:cb:7d:15:f7:60:d2:74:cd:2a:
                    bf:09:21:fe:15:51:cc:75:11:3a:79:0f:47:2e:52:
                    fd:0e:c0:56:80:b6:2c:c3:ae:c3:cb:e8:1a:cb:1a:
                    7a:b7:82:7f:f0:46:fc:2c:3c:5c:82:d8:17:cc:a4:
                    62:45:25:72:b1:df:9d:4a:7b:25:fc:19:0d:a0:e2:
                    a1:bc:ec:e8:c8:59:d7:c7:f8:60:3e:52:09:2f:20:
                    a4:1b:cf:f1:00:f0:08:21:20:9e:e5:85:27:16:75:
                    a1:f7:d4:cd:89:84:c0:6a:28:0f:02:87:ae:bf:24:
                    0a:aa:5c:b6:29:c3:60:c4:97:95:11:d6:f8:de:3a:
                    62:57:a5:af:9b:24:a2:97:e7:02:e8:e1:69:ce:63:
                    a0:e1:27:45:f4:24:c3:91:cb:e1:1d:c4:d3:65:a9:
                    36:8e:53:76:64:94:63:5d:80:75:66:dd:e2:11:33:
                    6c:57:d0:aa:fd:a7:d1:11:49:75:8d:0f:1c:5c:ad:
                    3e:55:0e:0a:51:e6:95:45:35:6a:6e:b3:22:23:84:
                    51:0c:aa:96:99:4e:b4:7f:45:04:20:f0:69:d3:4f:
                    1e:61:77:69:7a:c0:90:a8:3f:0c:72:5b:2a:6b:80:
                    35:68:64:e1:0a:3b:7d:46:06:f7:29:63:8b:f2:f8:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3D:54:5A:5F:FD:57:3A:E9:2D:2C:78:2E:F5:7E:42:52:9D:BA:E4
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e3132342e36342e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:3e:65:fd:19:66:0e:9d:58:8a:7c:12:50:29:4a:95:10:cb:
         5d:ac:dc:17:29:a4:09:1b:7b:bd:d5:a6:8e:d0:4a:c0:bc:12:
         f3:91:9d:38:97:9d:48:be:fd:17:64:43:b9:63:61:b7:02:ad:
         10:8d:4a:ad:b4:b3:ff:21:0f:5b:50:fe:22:25:c5:6d:7a:6e:
         25:4c:7a:70:b5:c1:99:6b:59:4c:c8:e8:d9:4b:c8:17:74:00:
         96:34:9a:94:1b:3f:a1:6b:49:23:10:a3:1e:b0:dc:ef:2e:54:
         16:32:b5:d2:32:77:ff:4f:e5:6c:64:4a:90:5c:8e:7b:d7:e1:
         15:a2:d4:f7:cd:26:ed:ab:ae:51:b8:2b:77:d3:c5:4e:98:9c:
         79:c5:e0:e6:c2:f1:2c:00:df:77:34:a5:d1:b1:4a:e3:c1:a6:
         0a:c2:35:ee:57:7d:36:a3:a5:5b:a6:1a:49:e8:9c:98:4e:38:
         1b:4f:4d:62:37:cc:79:79:f8:7e:42:6c:9f:40:cc:ee:72:1a:
         a9:cb:03:3c:60:f4:3b:e2:08:f3:b6:f4:2c:e6:b4:4d:6a:49:
         89:42:97:0d:0e:4c:b5:7c:44:3b:e5:90:88:a5:f6:7a:a8:58:
         2c:53:89:16:51:9a:18:1f:20:1c:6b:c6:ed:37:49:e4:06:5b:
         ab:dc:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:11 2025 by rpki-client