Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139393035.roa
File:                     3139302e382e3132382e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier:          mrYXTHW9mbGZkiiuucYK50KAbKy6MLpfHfNiql3Tv7g=
Subject key identifier:   61:D3:53:93:9A:A6:55:F5:33:91:01:B1:A9:63:B7:FF:6D:34:1B:85
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       50DB456958E3522107AF7E86555E4059A550A60D
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:42:32 +0000
ROA not before:           Tue 04 Feb 2025 18:37:32 +0000
ROA not after:            Tue 03 Feb 2026 18:42:32 +0000
asID:                     19905
IP address blocks:        190.8.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:db:45:69:58:e3:52:21:07:af:7e:86:55:5e:40:59:a5:50:a6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:32 2025 GMT
            Not After : Feb  3 18:42:32 2026 GMT
        Subject: CN=61D353939AA655F5339101B1A963B7FF6D341B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:23:ff:4d:0e:73:11:7f:8b:e2:9f:2e:6e:
                    4f:74:88:09:7f:60:80:c0:2f:b5:0e:86:f9:3c:0d:
                    90:82:ac:68:5d:83:fd:5d:e0:6d:77:61:0f:b9:15:
                    a5:4d:d5:64:30:aa:40:1d:0c:c9:41:f7:54:b0:7a:
                    c3:ac:1c:e6:04:19:1e:ee:1b:80:d7:9e:98:4e:47:
                    8a:22:4e:ca:ec:7b:87:b5:68:2d:fe:22:52:97:09:
                    0f:e7:d1:4f:c2:7f:f2:01:d6:57:86:f8:4b:aa:bc:
                    93:8b:12:5d:98:78:0c:3f:db:cc:22:c4:91:06:99:
                    95:f3:d3:e9:0b:d0:08:9b:b9:78:7e:b1:51:20:33:
                    aa:2b:9f:4f:56:ac:1b:2f:63:ab:85:9d:18:08:43:
                    27:64:57:b4:48:88:09:6a:f9:00:ec:b1:b2:8f:b5:
                    3a:11:a7:d9:62:a3:2a:89:22:f8:50:56:7b:16:f6:
                    ce:05:39:b8:1e:77:a0:86:dc:75:33:55:11:c4:37:
                    09:22:92:da:06:63:ce:b1:59:f6:74:17:2f:45:20:
                    aa:3c:f9:be:f0:65:f5:fc:bc:ef:81:11:7a:ad:17:
                    cd:14:f3:c7:13:c4:56:cf:ca:36:ff:84:51:45:4a:
                    4e:7b:40:98:ba:df:51:17:cf:b1:ab:34:d3:cb:97:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:53:93:9A:A6:55:F5:33:91:01:B1:A9:63:B7:FF:6D:34:1B:85
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:d2:e3:e6:d6:1d:93:29:18:a3:11:fc:b2:2a:33:8a:93:
         72:02:38:17:38:0c:d0:f6:75:66:4a:ba:40:d5:01:e0:20:90:
         76:b0:7c:37:fe:f1:d5:6f:74:e8:46:66:9a:58:ff:cd:c4:df:
         77:9b:6e:25:32:9b:25:38:84:5a:e4:6c:4c:c7:d0:7a:6e:34:
         6f:2f:3f:3c:d1:6f:5e:12:a2:6e:2a:68:9e:8a:97:e8:e8:cf:
         e4:47:88:12:56:65:ed:5c:99:74:79:0e:4e:36:2a:99:1c:48:
         64:61:97:00:2d:9f:bb:be:4a:52:33:4e:fb:b7:2a:f4:d9:8b:
         2b:89:2a:f6:ae:a8:95:a0:c6:f1:4a:7a:c7:87:0c:a9:3d:bb:
         2e:0d:30:24:a8:44:b5:f1:03:76:cf:41:e5:ec:58:a3:5e:76:
         e6:91:4b:5a:98:d6:5e:90:4e:c9:32:fc:3e:16:16:d8:51:bb:
         43:9b:2a:91:db:1f:b7:5f:8a:ee:2f:cb:cc:e7:b5:6b:7d:8c:
         5e:71:d9:9e:f1:8a:10:86:b1:f5:1b:a5:7e:5c:df:9d:15:b6:
         b5:11:71:5e:12:2a:0f:27:fe:6a:7a:b9:c6:d6:49:01:6c:30:
         d9:fc:0e:38:59:36:d3:5d:51:4c:ea:15:33:72:ac:8b:82:80:
         5c:57:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:06 2025 by rpki-client