Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa
File:                     3139302e3135312e302e302f31372d3234203d3e2036343731.roa (raw, json)
Hash identifier:          VLosTIRcQ/Wd4YbwQMNWQ9U0hA4YX7kjOK9TUZvJSUM=
Subject key identifier:   91:2D:40:86:CF:D8:64:64:56:1E:82:8F:49:38:9D:D0:A6:1F:99:89
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       56FBFF3900ED0238E55300A504EABBFC225790FC
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa
Signing time:             Tue 04 Feb 2025 19:56:31 +0000
ROA not before:           Tue 04 Feb 2025 19:51:31 +0000
ROA not after:            Tue 03 Feb 2026 19:56:31 +0000
asID:                     6471
IP address blocks:        190.151.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fb:ff:39:00:ed:02:38:e5:53:00:a5:04:ea:bb:fc:22:57:90:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Feb  4 19:51:31 2025 GMT
            Not After : Feb  3 19:56:31 2026 GMT
        Subject: CN=912D4086CFD86464561E828F49389DD0A61F9989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:dc:5b:1b:e1:47:17:45:71:a9:9c:99:c1:
                    72:36:79:96:0c:de:5c:c8:97:34:0a:42:ed:16:d3:
                    56:f5:1c:f0:ee:d2:23:5a:d9:e0:89:07:c4:5e:45:
                    6e:5a:d6:92:ba:88:11:22:1c:2e:62:ce:2b:7a:43:
                    62:57:26:1a:84:d4:72:03:1e:16:4f:0e:ab:ed:d8:
                    2c:e0:a8:fb:31:c0:51:37:be:84:02:e6:8d:18:40:
                    b4:dc:6a:24:26:b7:9c:3b:4e:e5:a1:4c:25:be:b6:
                    14:31:7d:84:12:6a:c3:04:b6:a0:52:60:c8:4b:97:
                    55:3a:62:53:b7:d6:10:da:95:73:c3:b7:ff:80:2c:
                    0b:06:37:55:44:7a:2f:fd:71:2b:f9:de:ea:fb:3b:
                    d6:85:be:c4:e5:83:b5:af:d0:c6:99:b4:29:56:04:
                    8d:a8:67:11:30:67:61:e1:30:77:6e:1a:d9:e2:b4:
                    eb:56:69:b8:7f:cf:94:54:3c:66:35:39:5e:9b:f3:
                    2e:46:e9:4e:fb:f5:0d:25:09:73:46:7c:a1:ca:9e:
                    ff:d1:6c:11:2b:1a:99:41:a9:63:de:4e:d2:03:1f:
                    61:71:fa:f8:0f:7e:42:50:90:a6:d7:58:6d:89:d9:
                    fb:5c:e6:36:95:6b:f7:18:cb:f2:b7:33:bf:8f:0b:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:40:86:CF:D8:64:64:56:1E:82:8F:49:38:9D:D0:A6:1F:99:89
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:32:43:4c:57:fe:d6:f9:69:55:e1:ee:52:e2:a3:20:1e:
         4a:b7:27:a4:d2:9a:54:82:2d:49:d2:cf:b6:8b:ea:f8:1d:a5:
         1c:2b:fb:ee:1f:b0:d6:0f:b0:07:02:5d:ce:f1:dd:0b:6c:25:
         5a:f8:2a:92:19:47:1e:30:db:56:c5:ff:14:9c:36:5e:fc:b5:
         9d:5b:92:aa:ab:6f:47:5a:f7:51:8c:46:ca:26:f6:e9:bc:15:
         5a:ea:4b:f7:3b:47:57:93:b7:7c:21:77:52:52:3e:c8:51:53:
         1c:2c:3b:3c:97:82:99:6f:05:35:0f:44:1d:9e:49:68:12:db:
         b7:2f:96:25:0a:68:df:30:32:c7:c4:2e:b2:e4:d8:cc:1b:2d:
         ae:46:b7:99:c0:d3:44:46:1b:28:fc:f2:84:30:41:28:b9:43:
         e2:b5:58:9e:ff:4a:ed:99:0b:ec:66:50:c7:8a:d6:a5:74:f4:
         ca:ff:b2:22:3c:f2:f8:ab:d1:61:ef:0e:89:ff:68:61:10:18:
         34:37:6d:67:ba:85:e5:ea:8f:ab:5e:f3:6c:79:30:d6:5f:ad:
         2c:64:44:73:77:c8:2a:52:5a:ab:40:69:bc:d6:e3:7c:df:dc:
         2b:76:2c:00:9e:97:9f:1b:96:7c:e3:3d:5d:39:70:63:45:d7:
         a7:74:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:43 2025 by rpki-client