Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203532343638.roa
File:                     3139302e36302e33322e302f31392d3234203d3e203532343638.roa (raw, json)
Hash identifier:          RWRjnDAEQkxPVIGyLONB2vp6lJ7Lwxi81juRRULqiBU=
Subject key identifier:   91:93:E9:F5:2D:82:0A:40:10:81:7E:61:27:6D:C6:01:36:EF:34:0A
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       635C4A6DEEF37682E07D7EBCF4A23EA300A28218
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:23:54 +0000
ROA not before:           Tue 04 Feb 2025 18:18:54 +0000
ROA not after:            Tue 03 Feb 2026 18:23:54 +0000
asID:                     52468
IP address blocks:        190.60.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5c:4a:6d:ee:f3:76:82:e0:7d:7e:bc:f4:a2:3e:a3:00:a2:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:54 2025 GMT
            Not After : Feb  3 18:23:54 2026 GMT
        Subject: CN=9193E9F52D820A4010817E61276DC60136EF340A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:ad:a7:57:49:48:d8:db:82:98:05:9e:34:
                    dd:f3:0d:6e:80:c0:4c:04:a6:7f:cd:a7:56:88:15:
                    49:46:8b:06:70:34:80:00:4d:a9:21:b7:cc:3c:10:
                    7d:2e:38:42:d8:41:c1:06:0d:3f:73:46:96:b4:b9:
                    81:a2:16:f8:0d:6a:4e:0e:75:7f:5d:db:c3:24:76:
                    3a:2b:f5:83:82:32:0e:bf:26:4c:a0:d9:02:7d:43:
                    16:5c:a3:10:d4:dc:22:14:e9:7d:c9:9b:40:96:4b:
                    f9:20:27:2a:b8:fd:c3:26:6b:af:62:50:ff:fb:fc:
                    05:17:34:b1:e2:b6:ed:64:72:47:ec:c2:4c:8b:cb:
                    9c:7d:4a:d1:15:2d:e5:c8:d9:39:1a:de:9d:cd:6a:
                    6a:e7:8e:7d:26:0c:06:dc:b9:68:ee:37:2c:1b:7b:
                    aa:03:0d:91:e7:82:5a:db:6e:68:86:d6:2b:0d:99:
                    d2:1f:40:d4:37:81:c9:49:e6:cd:80:74:e2:42:e2:
                    19:4e:18:98:f6:f0:51:06:f3:d5:14:e2:f1:fc:f4:
                    ca:ae:72:5f:c1:5a:40:2f:a6:ad:4a:b9:85:67:69:
                    bb:21:bc:df:4e:ea:3e:0f:c8:12:c7:2f:89:5b:9f:
                    1d:a9:4b:fe:8c:fe:a0:34:c7:9e:79:bb:eb:d6:30:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:E9:F5:2D:82:0A:40:10:81:7E:61:27:6D:C6:01:36:EF:34:0A
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:2a:32:9a:84:d1:78:00:46:ec:fe:fa:c1:e6:58:63:14:
         f4:9e:e2:8e:62:43:91:d2:07:e1:bd:12:0e:4f:34:66:6a:e3:
         7f:35:aa:f6:9b:c0:ab:75:91:65:a9:a7:86:c9:32:a0:e6:2a:
         25:2a:88:6c:30:9f:04:a7:4d:f9:50:01:d4:ed:0a:56:30:59:
         3f:92:81:53:29:89:74:ba:a5:a5:c2:69:14:8c:bc:87:f2:fe:
         9c:40:4f:d7:d9:e3:ef:17:84:bb:77:64:ef:4c:ef:6a:cb:4f:
         4f:9d:53:7f:0e:b3:b7:e1:b1:c7:68:2c:17:e4:74:f8:5b:3f:
         0b:4e:28:8d:f4:55:bb:c3:5c:88:d0:56:d5:a9:2f:df:a7:68:
         21:5b:5f:c8:db:5f:66:4d:b3:7f:f7:d3:d7:f7:cd:9d:38:49:
         4d:09:e7:a8:b3:51:b3:42:1d:a7:4b:11:10:46:13:f8:24:7a:
         56:06:13:1d:a8:f6:a0:ad:f7:15:84:92:84:9c:93:6b:84:42:
         e4:53:d7:20:d7:2f:e0:c6:64:ee:94:c4:7b:98:af:0d:11:85:
         a6:c3:d6:7c:f2:a3:8b:59:b3:46:05:04:48:76:80:d2:9e:1d:
         02:8e:49:b2:8e:b5:81:93:78:53:98:a2:32:20:91:c9:ab:be:
         a5:9c:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:08 2025 by rpki-client