Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e31342e3139322e302f32302d3234203d3e203237373936.roa
File:                     3139302e31342e3139322e302f32302d3234203d3e203237373936.roa (raw, json)
Hash identifier:          I41Zf26hRaQH0+o1h9roDui6g6gKbNigFT2inDfu994=
Subject key identifier:   F5:5C:BA:5E:12:5E:74:43:FB:8F:8B:B2:F4:0E:6A:D8:3E:E6:99:E5
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       0E41766E5F6D671A471D31279B89BC3E6483A91A
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e31342e3139322e302f32302d3234203d3e203237373936.roa
Signing time:             Tue 04 Feb 2025 18:04:02 +0000
ROA not before:           Tue 04 Feb 2025 17:59:02 +0000
ROA not after:            Tue 03 Feb 2026 18:04:02 +0000
asID:                     27796
IP address blocks:        190.14.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:41:76:6e:5f:6d:67:1a:47:1d:31:27:9b:89:bc:3e:64:83:a9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Feb  4 17:59:02 2025 GMT
            Not After : Feb  3 18:04:02 2026 GMT
        Subject: CN=F55CBA5E125E7443FB8F8BB2F40E6AD83EE699E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:64:04:b9:a8:4a:b8:67:95:22:6c:ac:80:
                    96:3f:17:78:e8:b4:a1:5d:fb:0c:8c:6c:9f:71:14:
                    24:38:e0:4e:ab:e1:11:0d:cf:4c:80:1c:11:42:b4:
                    9b:eb:54:80:83:a3:70:88:d8:85:f9:dc:13:30:e9:
                    69:c0:b3:f7:a4:8b:31:a6:a4:86:d8:7b:04:3d:0e:
                    5e:4e:62:66:e1:6f:8e:eb:6d:f0:64:af:db:70:dc:
                    28:4c:41:de:01:9d:4f:50:19:82:42:2f:3c:14:cb:
                    b6:f2:c2:01:fd:9f:ed:d5:8f:9e:f6:38:42:d5:31:
                    a0:cd:0e:6d:d9:4e:0c:09:d5:6b:76:e3:fa:b9:0d:
                    70:e6:c9:b9:c0:fc:a6:c2:24:8e:dd:f4:f0:20:fe:
                    2b:ce:9d:a7:a4:9c:46:64:74:60:2e:74:e2:8b:cd:
                    f7:26:9e:15:ef:d2:2d:5b:a1:14:01:28:48:fc:86:
                    bb:c3:bd:cb:50:ce:09:18:b3:52:ff:77:2d:78:50:
                    4f:ce:82:ac:2c:19:ee:17:1e:16:19:1f:0c:41:63:
                    53:56:62:c6:77:f1:28:da:de:9f:75:ac:33:6b:c7:
                    35:c9:22:68:94:5a:ce:ef:40:7b:ac:88:03:3e:bf:
                    85:cd:7c:9f:82:ca:c9:58:e4:c7:60:11:5d:6c:48:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5C:BA:5E:12:5E:74:43:FB:8F:8B:B2:F4:0E:6A:D8:3E:E6:99:E5
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e31342e3139322e302f32302d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:65:17:45:a2:79:97:78:a5:9b:ea:3d:03:e2:c7:a2:42:
         7f:30:f1:5b:05:a3:43:0f:1e:7b:77:04:6a:1c:73:eb:11:e1:
         d7:77:32:f7:f1:8f:98:77:a9:67:0c:d3:68:04:9c:65:89:5c:
         de:15:3e:44:f9:f9:fd:c4:09:8e:e5:04:7b:93:0f:0b:6e:d0:
         30:5f:f7:e6:91:36:ff:3d:04:f0:7a:d8:74:24:22:af:c2:ab:
         b2:98:88:8c:ba:cd:2b:30:c8:de:bd:42:37:6a:89:b9:a3:0d:
         ca:c7:1e:b4:c9:28:3f:58:ee:39:55:f7:8d:fd:e1:17:f8:6a:
         34:2b:10:c8:06:dc:59:1e:c1:a1:e2:50:82:6f:42:46:b2:ba:
         be:74:d4:dc:f1:70:b8:1a:7d:60:14:77:d1:65:38:4f:00:ee:
         4b:98:7d:b4:cf:fa:1b:2d:aa:b6:6d:01:be:09:ac:5f:f2:6d:
         02:95:04:c9:33:98:1d:3f:b4:ed:72:22:4a:bb:16:dd:46:5e:
         86:c9:e8:6a:e7:98:4d:3e:a8:3a:c3:7c:ab:1d:d3:f4:b0:45:
         ac:31:73:64:86:a0:75:c5:14:a2:b6:7a:c6:dd:a6:4e:1f:20:
         5e:30:97:54:b7:a3:a3:59:32:39:88:84:0f:e7:ed:1b:ee:d1:
         df:91:d2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:46:34 2025 by rpki-client