Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/3139302e39392e36342e302f32312d3234203d3e203532323335.roa
File:                     3139302e39392e36342e302f32312d3234203d3e203532323335.roa (raw, json)
Hash identifier:          AF4PWzVTVcDVav2uZi1dfaQQJ1R0UxjVwgKzqWoDxX8=
Subject key identifier:   54:75:1C:A7:E8:2B:F9:F8:C3:B6:54:5F:04:34:69:E4:30:B4:12:BF
Certificate issuer:       /CN=B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE
Certificate serial:       5F7E096C4C8A1D6ED3E270BD4646A6E4A84CB41E
Authority key identifier: B7:D7:A4:0F:B3:E2:DE:95:7B:3C:A0:5B:5B:E4:97:3F:FA:10:6D:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/3139302e39392e36342e302f32312d3234203d3e203532323335.roa
Signing time:             Tue 04 Feb 2025 19:58:46 +0000
ROA not before:           Tue 04 Feb 2025 19:53:46 +0000
ROA not after:            Tue 03 Feb 2026 19:58:46 +0000
asID:                     52235
IP address blocks:        190.99.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7e:09:6c:4c:8a:1d:6e:d3:e2:70:bd:46:46:a6:e4:a8:4c:b4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE
        Validity
            Not Before: Feb  4 19:53:46 2025 GMT
            Not After : Feb  3 19:58:46 2026 GMT
        Subject: CN=54751CA7E82BF9F8C3B6545F043469E430B412BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:40:39:f8:53:78:55:9a:28:5c:87:24:b2:
                    da:bd:88:d1:18:5b:c7:c5:8c:e7:69:b1:98:1b:14:
                    57:d0:bc:f2:7b:c6:df:08:66:a6:2b:d2:c5:19:62:
                    a5:bf:8c:77:7f:28:ee:ef:b9:51:30:70:0b:a5:32:
                    fe:8c:d3:ac:29:8e:9e:43:d0:c3:7f:aa:39:ba:df:
                    41:e9:52:cf:32:f7:43:83:56:d6:e0:30:c0:0e:9e:
                    02:42:59:91:69:ba:5f:46:b0:8a:bf:de:5d:d2:f1:
                    ab:60:63:b3:10:07:8d:76:84:74:e5:bc:df:7c:4b:
                    d7:80:60:f5:9f:bd:d7:3d:1c:06:61:dd:82:a0:50:
                    26:c1:fd:9f:90:ae:60:63:39:b3:17:9f:92:b4:c5:
                    85:89:73:11:f3:46:cf:00:23:b0:3e:c1:9c:74:f7:
                    1a:12:71:fc:86:cc:a7:06:57:f2:a3:14:b2:0f:8d:
                    5d:09:76:65:cd:16:65:52:92:b1:3f:7c:db:54:50:
                    aa:55:c0:3b:d3:de:c1:01:85:5a:46:14:12:96:c5:
                    0d:51:d4:13:65:ee:44:42:82:c5:9b:2c:9a:a4:b5:
                    fe:8c:67:89:27:a9:c9:ff:10:62:8d:ac:17:16:d1:
                    aa:66:b6:62:2c:33:11:10:67:f0:9a:82:61:53:b0:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:75:1C:A7:E8:2B:F9:F8:C3:B6:54:5F:04:34:69:E4:30:B4:12:BF
            X509v3 Authority Key Identifier:
                keyid:B7:D7:A4:0F:B3:E2:DE:95:7B:3C:A0:5B:5B:E4:97:3F:FA:10:6D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/3139302e39392e36342e302f32312d3234203d3e203532323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:90:3e:00:cf:41:e7:6c:4c:1e:5f:a1:28:b0:42:93:03:
         d3:2f:12:26:c3:db:37:05:1d:56:70:a7:1d:41:cc:99:59:82:
         76:7b:d8:e6:9c:81:69:5b:87:37:89:3b:01:3a:ec:87:df:b7:
         70:97:33:49:76:38:8c:19:66:b2:7c:64:e4:41:a2:33:57:1d:
         6d:28:be:88:64:c5:45:23:95:e1:d5:8e:5c:5e:19:04:d6:8f:
         ac:24:52:55:f0:7d:7b:9f:16:d1:0a:ee:49:c3:69:09:1e:65:
         0b:6c:7f:5a:e2:8f:76:83:6c:a9:fe:cf:cf:d9:a7:7d:11:d7:
         de:ef:a7:b1:1f:5c:b2:f9:91:c1:8f:ec:75:1f:20:d4:50:76:
         76:c5:b9:b4:15:99:54:2c:91:fb:7c:0a:f1:83:16:0a:57:c5:
         3e:15:a4:24:dd:ef:74:61:5f:ad:c8:0b:a2:77:50:c6:6c:e4:
         2e:61:f0:08:2a:68:4e:74:fb:d1:cf:6e:66:c9:12:00:6c:29:
         f1:51:29:88:4b:00:2a:da:b8:8f:77:2b:92:06:9e:4d:6e:f5:
         11:85:2d:02:58:11:e9:82:ff:7a:96:e8:0e:89:f4:88:2a:24:
         6f:a4:33:a3:9b:75:be:2e:49:c8:7c:03:de:b7:1c:4c:8a:b3:
         78:ae:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:18:25 2025 by rpki-client