Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3132382e302f31392d3234203d3e203532323332.roa
File:                     3139302e3131342e3132382e302f31392d3234203d3e203532323332.roa (raw, json)
Hash identifier:          aDFMQBbwnmv7Rw0z5ixO0So14Iu4GQB/N/qq5S2n15U=
Subject key identifier:   57:E3:BE:15:8B:56:F6:4C:89:04:12:C6:52:34:59:C1:E9:F7:77:57
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       55D7D830343D25EAA271D366713388C3298F4422
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3132382e302f31392d3234203d3e203532323332.roa
Signing time:             Tue 04 Feb 2025 18:00:12 +0000
ROA not before:           Tue 04 Feb 2025 17:55:12 +0000
ROA not after:            Tue 03 Feb 2026 18:00:12 +0000
asID:                     52232
IP address blocks:        190.114.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:d8:30:34:3d:25:ea:a2:71:d3:66:71:33:88:c3:29:8f:44:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Feb  4 17:55:12 2025 GMT
            Not After : Feb  3 18:00:12 2026 GMT
        Subject: CN=57E3BE158B56F64C890412C6523459C1E9F77757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:c0:80:fa:f1:bf:d2:e2:97:48:dc:55:46:
                    83:02:62:20:97:69:8c:e7:5e:c2:36:b7:4c:71:e1:
                    57:79:ee:7e:ab:80:b0:cf:4e:b7:e1:8f:71:22:70:
                    32:43:b4:36:a6:71:bb:07:16:23:60:1e:73:39:9d:
                    0b:01:b2:cb:36:bd:90:6d:42:bf:51:03:7b:5d:0d:
                    37:96:fe:08:7a:7e:92:6e:2b:68:21:c8:2f:f7:89:
                    bf:be:63:57:8c:e9:fb:5d:e6:dc:33:88:ec:aa:75:
                    d3:12:19:16:89:2a:c5:db:c2:93:03:59:fc:83:ae:
                    34:3b:f4:1a:8b:9b:01:6d:c0:43:01:cf:dc:75:da:
                    8a:92:24:0e:35:e5:12:f1:e7:68:cf:2a:d9:17:32:
                    6d:d7:12:fc:11:72:1a:da:80:f5:45:f2:f8:e2:b5:
                    9e:6b:07:71:aa:5f:4b:54:21:cd:da:92:bb:b3:ba:
                    dc:56:47:e6:7c:74:e1:42:88:e8:1a:8c:d4:ab:e1:
                    d5:57:c1:5b:57:df:91:7c:8e:f4:7b:59:af:2a:52:
                    34:aa:91:c4:59:c6:3a:11:41:10:7d:df:60:28:bf:
                    f8:ba:79:4a:c0:c2:86:ae:6c:b3:93:e1:c7:fe:e4:
                    81:1d:d7:65:d9:d9:76:d8:cc:b5:d1:63:dd:63:13:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E3:BE:15:8B:56:F6:4C:89:04:12:C6:52:34:59:C1:E9:F7:77:57
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3132382e302f31392d3234203d3e203532323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:18:c6:8c:fa:a4:21:a4:35:de:0c:b0:6a:c2:73:a0:97:48:
         a8:f6:a2:6e:31:41:90:24:98:b1:62:9f:34:aa:87:1c:af:e8:
         59:62:e2:2e:dd:d5:9e:b4:ac:fa:65:0f:a5:9c:5b:f9:c0:1d:
         5c:3d:e6:ea:54:3a:9e:e6:c3:65:5b:97:d7:8b:58:7f:7e:bf:
         49:f6:18:b7:99:96:8a:49:c5:9f:46:66:9e:d9:96:43:fd:be:
         5e:2f:a6:68:44:43:ac:bc:f2:65:ce:21:79:a1:5b:5b:7c:0c:
         73:bf:00:64:96:12:03:2d:d9:17:d5:bd:94:2a:93:22:1f:23:
         83:29:40:d5:f0:12:a3:30:a0:6d:cc:5a:cd:af:43:7f:03:61:
         4f:ed:5a:bd:ea:a9:64:98:99:97:aa:6e:18:14:22:df:45:5a:
         a6:c0:e4:b3:84:1a:ef:7b:68:01:48:e7:8e:0d:19:ce:f7:80:
         3b:7c:c9:35:33:a9:17:eb:4b:62:23:64:57:e9:6f:78:7f:a7:
         00:90:18:be:92:f9:97:fc:83:40:5c:67:1c:b1:6a:b9:88:ad:
         0c:65:1f:73:94:b8:8d:07:3d:83:91:07:8b:4d:b0:80:2c:f4:
         f8:62:c2:17:dd:87:29:6d:12:27:6c:c4:be:56:7b:cb:1d:74:
         c4:4a:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:40:10 2025 by rpki-client