Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203237383936.roa
File:                     3139302e302e36342e302f31392d3234203d3e203237383936.roa (raw, json)
Hash identifier:          FQf8uRPoA6axgIAQVXDCrB7UWYTmtL1WDaDGbd9/mUM=
Subject key identifier:   93:34:7B:CD:1E:ED:96:03:4C:72:4E:53:25:B9:9D:AA:AC:DF:B6:AF
Certificate issuer:       /CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
Certificate serial:       0FEE5031A6BB0C23175C98916B2C4BE22AE63788
Authority key identifier: 66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203237383936.roa
Signing time:             Tue 04 Feb 2025 18:40:18 +0000
ROA not before:           Tue 04 Feb 2025 18:35:18 +0000
ROA not after:            Tue 03 Feb 2026 18:40:18 +0000
asID:                     27896
IP address blocks:        190.0.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 19:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ee:50:31:a6:bb:0c:23:17:5c:98:91:6b:2c:4b:e2:2a:e6:37:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
        Validity
            Not Before: Feb  4 18:35:18 2025 GMT
            Not After : Feb  3 18:40:18 2026 GMT
        Subject: CN=93347BCD1EED96034C724E5325B99DAAACDFB6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:66:7e:c6:7a:2a:34:f5:02:8a:a5:4b:1e:
                    98:73:59:bb:29:5f:6c:f9:3f:88:e1:f6:b9:1b:ef:
                    17:7e:54:c0:47:ae:f1:e4:17:79:dc:36:78:e4:5e:
                    22:0b:44:04:0d:58:45:ae:7f:0a:39:65:a7:dc:8b:
                    2a:c9:fb:34:7e:72:c7:7d:d7:be:a7:0f:63:43:e9:
                    47:b4:e9:28:5f:64:4f:87:44:59:a7:e4:6d:6e:cb:
                    63:42:a4:9b:82:ae:f5:ea:c0:70:f5:4b:75:a5:e8:
                    2a:72:95:a5:aa:2a:db:cb:15:24:4e:be:42:8c:78:
                    c2:f3:4e:4b:93:18:82:8c:a8:ef:25:12:71:a7:c3:
                    3f:1f:9d:fb:30:2d:47:ea:b6:02:be:20:77:9c:71:
                    e3:59:9b:48:83:d1:af:41:c9:31:30:49:31:ec:5a:
                    82:cf:49:cd:b9:51:8a:14:99:fb:4a:41:c0:3c:6e:
                    5e:29:d6:f2:aa:96:48:04:06:e3:e9:65:02:20:b6:
                    0a:14:24:8d:44:b5:40:dd:b0:4b:36:96:a4:b7:77:
                    93:30:0e:25:11:3a:36:82:a1:bf:46:f5:67:9e:4a:
                    a0:a7:87:84:95:29:58:0f:f9:05:9a:de:19:cc:4f:
                    2f:55:2c:f8:00:85:88:df:83:f6:98:1c:1d:48:83:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:34:7B:CD:1E:ED:96:03:4C:72:4E:53:25:B9:9D:AA:AC:DF:B6:AF
            X509v3 Authority Key Identifier:
                keyid:66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203237383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:e3:5a:a8:00:5b:3d:ed:aa:ed:a2:99:bf:c4:52:80:5a:6b:
         77:bc:e7:64:dd:36:60:4b:66:38:37:e9:cb:47:33:cb:1e:f3:
         f4:c7:e1:42:c7:94:35:e3:c9:ee:61:7c:c9:3c:00:6b:e6:a3:
         d7:ed:68:55:c3:e2:a4:9f:9a:f0:74:83:6f:2f:ed:32:89:63:
         dd:b2:92:ca:5d:ee:0c:bc:2a:bc:99:44:d2:a3:f0:4e:70:3b:
         ea:ac:9a:13:c8:b1:8e:50:4b:a4:0f:3c:bc:58:e2:89:47:7f:
         79:65:c6:af:06:a3:25:18:5d:cb:b8:10:72:0e:1f:39:8c:80:
         f2:15:5e:b5:a5:36:3a:2f:a4:e4:90:2c:62:5e:6e:7a:df:87:
         65:bc:60:03:22:38:dd:21:6a:4e:f5:dd:fc:00:23:a6:80:b2:
         42:d3:6a:45:f0:82:a9:dd:4c:fa:ec:13:c3:fb:a9:a3:06:2b:
         66:a1:32:ab:f2:db:57:1c:01:63:f1:3b:ff:75:7c:18:d0:fe:
         d1:91:85:2c:4f:6c:df:80:4f:1e:dd:19:27:ec:a9:dd:f4:fe:
         e9:ec:d0:73:b4:36:12:ee:c0:6a:f5:cb:bd:0c:21:67:cb:97:
         94:8c:be:d2:67:89:40:44:21:60:27:15:fd:7e:15:c0:3b:77:
         14:9a:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:59:32 2025 by rpki-client