Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e302e302f31392d3234203d3e203138373437.roa
File:                     3139302e36312e302e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          ZAHzV2Zf+gm2WPrtfjx70trfVneF/rrF0nVaQwXodJU=
Subject key identifier:   2E:57:69:D3:70:C8:A3:24:87:29:A0:EE:35:5F:58:43:BD:5B:96:AC
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       7E784CDB00C6EC9BEA37112B3F6C473FF98A767C
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e302e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:23:55 +0000
ROA not before:           Tue 04 Feb 2025 18:18:55 +0000
ROA not after:            Tue 03 Feb 2026 18:23:55 +0000
asID:                     18747
IP address blocks:        190.61.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:78:4c:db:00:c6:ec:9b:ea:37:11:2b:3f:6c:47:3f:f9:8a:76:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:55 2025 GMT
            Not After : Feb  3 18:23:55 2026 GMT
        Subject: CN=2E5769D370C8A3248729A0EE355F5843BD5B96AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:7d:6c:e3:a4:2e:76:50:ba:16:29:35:49:
                    0d:d8:8b:29:33:ba:27:1a:e6:a9:7d:71:83:3f:43:
                    6e:8b:91:60:23:76:14:50:eb:49:bf:87:bf:68:57:
                    2a:11:49:f0:04:ae:87:cc:1c:0a:bb:e3:3b:e9:76:
                    f8:9f:a0:a4:16:6b:35:61:7c:c3:0d:62:ed:67:a2:
                    cd:c6:68:45:e5:df:da:6f:11:d9:9c:f4:ed:7d:fb:
                    7d:20:47:e8:0a:ac:32:0a:76:38:27:ee:cb:b0:ff:
                    c4:ec:b5:59:a9:ec:d3:d3:1f:c4:16:16:4d:f9:10:
                    5e:c9:e3:00:8e:41:24:d0:aa:47:6c:be:ef:58:74:
                    e8:af:3c:3e:c0:ac:08:2b:5d:47:95:2c:0f:46:cc:
                    39:ef:d2:fb:9e:88:c9:b5:28:17:1b:86:8a:17:5f:
                    95:26:10:93:3b:69:9b:ca:eb:a5:d0:66:13:0d:0b:
                    c1:bc:7d:ef:58:d9:50:4b:53:16:76:7e:96:5e:b6:
                    bb:22:25:33:3f:79:74:83:85:43:a1:6e:a4:00:ff:
                    9e:30:52:df:b6:d1:30:f2:12:cc:d3:8a:50:9d:c7:
                    2d:ed:82:d2:af:29:e2:4e:46:fd:bf:a5:f3:ce:fb:
                    59:76:00:24:0c:3f:99:58:b3:d0:ed:1a:75:b2:b1:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:69:D3:70:C8:A3:24:87:29:A0:EE:35:5F:58:43:BD:5B:96:AC
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e302e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:08:3d:c0:4c:f2:3c:e4:82:f2:96:50:e8:a6:74:2a:c4:cb:
         0e:7b:53:d6:70:3d:42:7e:09:cd:47:16:1c:00:a6:7e:17:56:
         11:d2:4a:6e:6e:18:aa:14:04:34:b5:9e:c3:d5:31:d6:60:ad:
         8c:ed:3e:c6:94:b5:3e:4d:01:fd:bb:13:23:e5:be:9c:59:9e:
         08:63:70:e2:a9:78:2b:18:63:38:06:98:52:ca:da:5a:c2:27:
         d9:b0:b7:b1:06:85:62:6d:ce:14:5f:1a:87:65:a6:a6:4c:28:
         0f:95:66:f1:1f:19:c2:12:63:ca:84:a1:11:a4:9c:78:af:96:
         66:9d:a0:85:0c:2b:ed:88:ac:46:4b:84:68:14:31:82:62:46:
         0d:e2:79:40:96:2f:a4:a6:40:4e:77:f8:67:7e:65:16:ca:ed:
         57:06:1f:90:80:d3:55:e6:f5:7b:dd:a3:0c:54:00:77:64:89:
         a9:db:a2:74:61:ed:ea:f6:02:38:42:f8:d5:12:41:30:d7:ef:
         aa:a7:26:22:ae:74:3b:6c:90:80:0d:0b:fd:b9:70:67:5e:36:
         1b:01:87:4b:04:ce:07:0c:42:5a:2e:92:0f:56:fe:0a:9b:b6:
         13:e2:89:12:e3:99:10:49:31:ec:56:75:64:92:d4:1d:aa:47:
         5c:10:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:03 2025 by rpki-client