Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3132382e302f32342d3234203d3e203532323638.roa
File:                     3139302e3131342e3132382e302f32342d3234203d3e203532323638.roa (raw, json)
Hash identifier:          4BxQJ3D7QbHzX9WJ16GV8J9yBvbuyCp97fQEGYa9iJs=
Subject key identifier:   A6:FF:22:47:57:F3:B4:46:CD:2A:F7:E8:AE:1D:12:E4:80:AB:54:B9
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       4F26D61E69C9D9E330B827ABC1152A7D93FBF92D
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3132382e302f32342d3234203d3e203532323638.roa
Signing time:             Fri 10 Jan 2025 13:25:00 +0000
ROA not before:           Fri 10 Jan 2025 13:20:00 +0000
ROA not after:            Fri 09 Jan 2026 13:25:00 +0000
asID:                     52268
IP address blocks:        190.114.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:26:d6:1e:69:c9:d9:e3:30:b8:27:ab:c1:15:2a:7d:93:fb:f9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Jan 10 13:20:00 2025 GMT
            Not After : Jan  9 13:25:00 2026 GMT
        Subject: CN=A6FF224757F3B446CD2AF7E8AE1D12E480AB54B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:7c:e7:32:76:35:d8:b9:ea:4b:c4:15:b8:
                    a1:27:0a:45:33:1b:07:60:06:12:ca:14:fd:e6:b3:
                    fc:9c:5d:35:01:e0:17:9c:7c:0b:27:03:c1:95:fb:
                    91:02:8d:4a:c2:b2:3f:5c:2e:97:ac:d0:d6:69:ca:
                    c4:61:3e:62:19:5b:10:68:3f:b5:8f:e7:a9:06:63:
                    eb:89:1d:c2:e1:4d:3b:09:5d:c4:68:77:4c:26:d7:
                    43:1d:ae:dd:48:bc:c7:e9:6a:df:65:a7:7f:4f:81:
                    e8:68:2c:be:02:0c:0d:05:e9:c4:20:90:2b:6a:b2:
                    24:5b:7e:03:2a:39:bf:6c:e0:ab:1a:c6:55:84:eb:
                    9a:94:55:b2:91:08:0e:47:4e:14:40:1f:e8:82:6d:
                    34:4f:fd:fd:81:01:86:d9:6f:75:9e:e2:6c:3b:e3:
                    2c:5a:6a:00:4b:57:e6:29:c9:42:09:0a:b4:17:de:
                    d8:13:b4:e3:eb:3d:df:f6:e0:15:26:90:a8:2f:6c:
                    c3:d7:2f:b1:99:62:73:9f:fc:53:72:bc:9c:9f:c8:
                    14:81:8b:c3:7a:9f:04:34:9c:26:4d:8d:26:a6:90:
                    61:6d:0d:bd:8d:a9:13:26:0a:e2:8b:d5:98:94:db:
                    9a:1c:ed:64:8c:9d:93:71:f9:b7:01:b9:47:38:f7:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FF:22:47:57:F3:B4:46:CD:2A:F7:E8:AE:1D:12:E4:80:AB:54:B9
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3132382e302f32342d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:f0:67:07:e3:f7:20:43:c9:b8:27:10:9d:44:30:96:04:
         be:72:75:96:02:01:d8:a9:dc:b9:44:be:be:f8:2b:96:7d:2d:
         31:e9:dc:80:a2:43:26:4d:60:27:1e:cc:3e:38:4b:3c:50:98:
         18:50:9d:b5:d4:d7:3e:20:09:4d:83:7d:35:b7:80:47:53:0a:
         32:92:14:18:83:3d:24:9d:55:09:f7:9b:3e:a9:ce:6a:11:26:
         35:2e:a6:a0:7c:76:41:d6:8a:27:fe:bc:bb:1c:4a:2d:f1:ac:
         6f:30:67:53:3c:6e:e2:da:96:8c:48:14:79:88:eb:74:99:1c:
         2f:e0:d4:a7:7b:47:26:22:c6:6f:47:22:de:a1:dd:42:99:e8:
         a5:5e:e9:50:34:d9:a5:68:fa:f1:02:a8:4a:b9:86:ac:a4:50:
         cd:db:30:90:f4:6d:7e:73:b2:cb:e1:77:65:73:1f:f6:ab:9e:
         a2:0f:79:e1:14:39:46:77:a8:4c:71:52:56:bf:be:7a:40:d5:
         8a:83:64:fb:f0:b7:52:5f:45:a1:1e:f4:eb:b5:f5:03:dd:4b:
         c9:8e:e1:e4:ab:9d:c1:a1:2e:e8:94:f6:2d:e5:b2:a4:cc:90:
         b9:75:e3:ff:65:e1:b7:05:2f:c5:ee:33:35:30:99:02:c9:4e:
         ea:e9:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:42:11 2025 by rpki-client