Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3139302e3130382e302e302f31392d3234203d3e203230323535.roa
File:                     3139302e3130382e302e302f31392d3234203d3e203230323535.roa (raw, json)
Hash identifier:          2usdWGdsgmcQcRiFJ04bzGWC4vI4kP8Gw/Atig1sxq8=
Subject key identifier:   84:E3:45:96:86:58:1F:09:1A:DA:60:D6:CE:22:AF:B4:D7:C0:4E:53
Certificate issuer:       /CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
Certificate serial:       51258F3778E89A6C2C30AD06FDDA98B575A8F895
Authority key identifier: 63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3139302e3130382e302e302f31392d3234203d3e203230323535.roa
Signing time:             Tue 04 Feb 2025 18:00:20 +0000
ROA not before:           Tue 04 Feb 2025 17:55:20 +0000
ROA not after:            Tue 03 Feb 2026 18:00:20 +0000
asID:                     20255
IP address blocks:        190.108.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:8f:37:78:e8:9a:6c:2c:30:ad:06:fd:da:98:b5:75:a8:f8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
        Validity
            Not Before: Feb  4 17:55:20 2025 GMT
            Not After : Feb  3 18:00:20 2026 GMT
        Subject: CN=84E3459686581F091ADA60D6CE22AFB4D7C04E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:73:00:e8:44:55:33:cf:62:ae:fc:02:4f:
                    b0:a8:8d:99:d9:ef:f5:7e:98:06:65:7f:ae:cf:d1:
                    f6:a0:75:01:ce:fb:d7:cd:6f:60:c2:41:4d:b3:14:
                    6e:b8:21:43:4c:2c:97:0f:94:0b:33:63:6f:38:91:
                    9c:96:bb:8d:7c:fe:5d:32:0e:f3:5c:5d:55:bb:d9:
                    e0:b8:a0:65:b2:23:e4:60:77:c0:85:9b:a7:d6:a1:
                    12:6b:8a:d9:ea:52:ef:4e:49:3b:98:7a:8d:ff:95:
                    c7:61:8f:6c:4c:80:f5:98:10:20:a6:7a:72:f2:47:
                    e7:11:66:7c:c8:d5:cf:d4:b6:aa:11:2f:c1:04:bf:
                    88:70:8c:5d:2b:77:f2:a9:02:02:db:01:12:bf:5e:
                    61:8c:1a:d1:f4:7e:ba:36:bf:cb:fb:b5:c3:4f:5b:
                    df:35:be:9f:91:53:0f:69:83:81:32:ce:17:91:63:
                    1f:3e:0a:49:e2:0b:68:4f:f9:65:d8:78:3d:40:04:
                    7a:5e:32:71:5e:c5:f8:08:29:2a:59:84:6f:e5:96:
                    03:f8:88:6b:45:4d:ad:b2:e8:21:b7:32:e9:8e:6f:
                    d6:eb:65:f1:ea:2f:f5:bc:fe:c4:35:2e:3a:21:2e:
                    44:3e:6c:ad:61:ff:99:b9:94:8c:fb:66:ae:42:d9:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:45:96:86:58:1F:09:1A:DA:60:D6:CE:22:AF:B4:D7:C0:4E:53
            X509v3 Authority Key Identifier:
                keyid:63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3139302e3130382e302e302f31392d3234203d3e203230323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:40:98:a4:b8:62:cd:91:91:03:77:42:55:07:7c:90:98:
         06:ca:c6:28:96:78:58:a1:7c:7f:a1:6f:07:76:22:8b:43:ed:
         7c:a7:51:c8:5a:5c:6b:57:4e:c4:da:47:2a:b1:2a:ff:5a:f7:
         6f:11:9c:2d:85:5f:f5:17:10:dc:48:4d:18:f7:25:2b:3e:35:
         4b:4c:e3:9a:12:67:1e:80:83:b6:4d:80:88:e6:ad:9b:a5:de:
         c6:e5:93:85:16:eb:1c:0c:d7:10:ba:5b:8d:12:3a:a4:53:e9:
         65:32:13:a6:0b:3b:86:5e:89:91:d8:89:b3:94:a6:3f:23:11:
         f5:b5:83:6a:57:b9:db:c2:ca:23:11:4a:a6:bf:a0:0f:33:99:
         bb:8b:e3:53:31:92:31:3c:ce:f8:a4:d2:00:13:82:6f:52:80:
         dd:18:ea:be:bc:b9:35:26:5f:1b:63:6e:d3:05:56:89:1a:6c:
         37:2c:48:0f:24:72:dc:fb:82:63:fa:53:18:64:22:29:47:a5:
         39:14:e8:79:18:81:6c:84:d2:40:4b:9d:f2:cc:d5:49:58:c4:
         f8:ce:67:67:ca:91:ae:c2:bf:c3:68:00:ae:31:e4:45:38:e5:
         21:cd:7a:7c:14:3c:fd:f7:a7:97:63:c1:95:2a:2c:6a:d5:ef:
         d5:80:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:40 2025 by rpki-client