Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3136302e302f31392d3234203d3e203532323332.roa
File:                     3139302e3131342e3136302e302f31392d3234203d3e203532323332.roa (raw, json)
Hash identifier:          Erj/soXdsXybojPDVTLQ3Tmv3H583RO+vUaiSJZ8OO4=
Subject key identifier:   1C:29:61:A5:A8:0A:07:85:34:62:6D:05:95:E0:AF:41:2F:CD:B8:98
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       40D018EBE3B7CCBEF933FA299EEA0D1E6CC5C01F
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3136302e302f31392d3234203d3e203532323332.roa
Signing time:             Tue 04 Feb 2025 18:00:11 +0000
ROA not before:           Tue 04 Feb 2025 17:55:11 +0000
ROA not after:            Tue 03 Feb 2026 18:00:11 +0000
asID:                     52232
IP address blocks:        190.114.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 07:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d0:18:eb:e3:b7:cc:be:f9:33:fa:29:9e:ea:0d:1e:6c:c5:c0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Feb  4 17:55:11 2025 GMT
            Not After : Feb  3 18:00:11 2026 GMT
        Subject: CN=1C2961A5A80A078534626D0595E0AF412FCDB898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:44:97:25:f9:21:14:ba:9d:d4:56:f6:59:
                    78:d8:c6:32:b6:ee:de:f8:ed:7a:71:9f:0b:26:a2:
                    02:d9:b2:e0:35:18:f6:34:30:70:e0:c7:c7:69:fb:
                    5f:86:02:72:7d:6c:92:43:04:f2:ca:12:d7:a4:2d:
                    76:8a:28:17:38:df:f5:07:17:31:78:c2:c5:8c:1f:
                    b4:09:61:1f:bd:3d:12:6d:f2:09:73:af:1e:d1:a6:
                    e0:7f:f7:17:10:23:a6:bf:35:d1:0d:ba:91:fd:ab:
                    f6:ef:e4:54:6b:43:0e:c6:04:ff:9f:17:93:1f:70:
                    5e:ff:94:41:7b:2a:3d:ea:1d:77:55:9b:84:61:8b:
                    e8:22:f4:7e:be:f0:88:fa:75:a3:5d:1c:22:46:8b:
                    13:8e:4c:76:f3:ab:9e:33:92:d7:6f:ed:45:fc:65:
                    fd:71:97:00:c6:c6:f4:6d:8d:df:40:6f:e7:fe:e9:
                    8c:87:ed:52:26:c8:23:71:b9:e5:6b:59:58:ae:3e:
                    b6:d1:aa:e5:45:7c:ce:5e:79:bd:1e:d6:c3:17:0b:
                    f7:c1:2d:6d:9c:04:23:7b:b2:6b:9c:60:8d:e2:9f:
                    96:0a:23:4c:3e:66:2d:ac:b6:50:26:7c:8d:88:66:
                    f8:68:ee:78:f0:c2:48:f4:60:53:8a:ad:e9:04:f0:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:61:A5:A8:0A:07:85:34:62:6D:05:95:E0:AF:41:2F:CD:B8:98
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3136302e302f31392d3234203d3e203532323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:f8:a8:1d:b4:40:81:51:24:f8:c9:e1:bc:6e:74:39:97:5c:
         7f:1a:b1:f2:5e:ea:8e:e7:6d:7c:19:45:cf:fc:78:f3:79:1b:
         36:cf:85:6e:9a:4a:24:c8:d4:92:56:7c:eb:7e:58:9b:5f:1b:
         b9:3e:db:ca:ce:1e:07:a7:49:b0:2a:d1:cd:24:cf:ea:2c:b2:
         1b:3a:9d:77:c7:93:a2:8b:ab:b0:64:1b:eb:ae:2b:a5:82:5a:
         f2:9f:bc:bb:f7:cd:3b:51:e9:9d:d8:8c:42:f3:59:ab:8b:b0:
         9d:af:da:54:47:c6:d3:99:b9:4e:79:54:33:d8:e0:4c:87:56:
         1e:41:10:5b:ae:27:c7:1c:c9:ac:c4:a6:0a:49:0f:0b:07:9a:
         fa:14:5e:3f:09:ca:ad:11:53:8c:0c:b4:cd:f8:5d:85:75:cb:
         5c:7b:51:0a:e3:81:27:4d:2a:14:e1:b6:1c:55:1e:1d:a3:59:
         50:c3:21:96:f7:02:9d:90:5d:8a:4c:06:cd:a6:95:3c:a7:47:
         2e:82:23:18:7b:b4:9e:dd:be:84:73:59:9a:ba:d1:40:9d:ad:
         81:16:df:2c:72:29:64:e1:a8:ea:d9:d4:06:42:18:57:0f:9d:
         41:21:b1:82:67:ac:2a:7e:7c:2e:7d:1a:21:30:e5:f4:db:39:
         95:e4:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:54 2025 by rpki-client