Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3136302e302f31392d3234203d3e203532323638.roa
File:                     3139302e3131342e3136302e302f31392d3234203d3e203532323638.roa (raw, json)
Hash identifier:          ZPrxc9lyoW/hQVmaaXUMcc0uY+dK4AbkR2ciF7WlP04=
Subject key identifier:   2B:BD:63:DB:62:4C:74:AC:78:E4:39:A0:33:E3:54:72:18:0C:6E:A0
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       0474CDCE481988BDEBE052A11A8F9E24D32FEDB6
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3136302e302f31392d3234203d3e203532323638.roa
Signing time:             Fri 10 Jan 2025 12:55:00 +0000
ROA not before:           Fri 10 Jan 2025 12:50:00 +0000
ROA not after:            Fri 09 Jan 2026 12:55:00 +0000
asID:                     52268
IP address blocks:        190.114.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:cd:ce:48:19:88:bd:eb:e0:52:a1:1a:8f:9e:24:d3:2f:ed:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Jan 10 12:50:00 2025 GMT
            Not After : Jan  9 12:55:00 2026 GMT
        Subject: CN=2BBD63DB624C74AC78E439A033E35472180C6EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:b3:a6:4c:49:97:10:50:91:72:a3:d0:a8:
                    6a:ba:35:c6:ea:36:a5:c5:e6:d9:8a:95:4c:48:c6:
                    fc:b1:5f:b6:08:62:67:46:d6:04:4f:ea:1e:c2:c7:
                    69:c4:ff:6b:51:3a:51:86:f6:e3:4c:61:e7:ed:8b:
                    40:ee:c3:27:49:2b:ff:6e:73:27:91:7d:6c:64:aa:
                    c7:65:3c:a6:13:2b:4e:8d:be:da:18:b2:5c:44:2b:
                    3f:b3:01:7c:09:d6:b1:f8:01:85:b3:f0:dd:87:fd:
                    b4:d9:75:1c:66:cb:f6:a8:51:b9:9a:ac:93:ca:33:
                    6a:30:a7:89:ca:7a:26:9f:33:8f:b0:c5:f1:91:59:
                    6b:28:30:96:f7:5a:2c:b4:1b:e0:7c:db:51:a6:df:
                    df:6f:90:dd:74:0a:70:a5:47:4a:00:87:ab:3e:23:
                    d0:d7:5c:b1:de:0c:78:96:bb:3f:94:de:e7:ef:f9:
                    31:a6:81:83:93:46:16:2a:20:4d:5b:33:dc:5a:10:
                    ca:ec:11:1a:a3:66:18:00:a1:da:c5:15:2e:58:b2:
                    2a:04:ec:8f:4c:54:55:80:fe:0c:f0:6f:22:0e:00:
                    11:bf:5a:ba:87:fb:c7:a3:d4:37:f1:ce:c8:54:57:
                    48:d4:1b:15:45:cf:9b:d2:f1:70:79:c7:df:03:07:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BD:63:DB:62:4C:74:AC:78:E4:39:A0:33:E3:54:72:18:0C:6E:A0
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3136302e302f31392d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:81:3f:23:a5:a5:74:1b:94:cc:48:32:41:64:ce:9a:c4:96:
         c4:3c:cb:d2:81:af:0e:b7:77:4c:34:40:74:87:16:cd:e7:fc:
         da:c0:d6:97:fe:b5:bf:85:17:39:75:56:a7:22:f4:ae:8a:a7:
         9e:10:d5:c6:4d:f5:63:00:e0:ba:63:6c:7e:c8:c0:d3:32:f9:
         40:22:cc:82:8d:16:5f:51:af:3b:0e:eb:21:3a:b1:bd:a3:98:
         d1:ae:f3:3e:a0:7a:7e:29:b3:da:7c:e3:a1:e7:62:a9:a1:b1:
         30:77:d0:31:9e:b9:25:af:eb:b0:a4:15:dd:3a:12:67:62:c9:
         fd:d2:14:b1:19:d9:d4:6d:b7:25:1c:4c:63:2f:c4:4b:c7:1c:
         98:65:68:ac:d0:a2:32:ae:d7:ef:7b:62:a2:c6:b6:db:63:f6:
         d1:34:db:97:33:ed:11:0a:f6:d4:c7:f3:e0:1a:e5:c8:72:fc:
         c5:41:97:1e:70:8d:1e:d8:71:f5:8a:31:cb:80:ee:1e:8c:12:
         04:98:4b:aa:d9:e0:07:4a:8b:ed:cc:83:38:9a:d3:7a:24:1b:
         62:d2:99:38:b6:20:04:cd:86:9e:c8:fe:61:63:e5:52:f4:97:
         3b:dd:3d:b5:f7:ba:97:59:78:27:c9:6e:f1:15:fa:70:64:26:
         30:02:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:39:08 2025 by rpki-client