Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
File:                     3139302e3130372e36382e302f32332d3234203d3e203237393437.roa (raw, json)
Hash identifier:          5pJQotWBOnx6Yq6YMhC8cjWcf0SsTE/BdDnO96T9Thc=
Subject key identifier:   97:A3:5F:75:4A:51:36:A1:20:36:2A:21:E5:D9:F1:6D:AC:32:05:9F
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       475AF0DFD5E36903C2C95E13DE6337D6F1D76EDD
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:42:10 +0000
ROA not before:           Tue 04 Feb 2025 18:37:10 +0000
ROA not after:            Tue 03 Feb 2026 18:42:10 +0000
asID:                     27947
IP address blocks:        190.107.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5a:f0:df:d5:e3:69:03:c2:c9:5e:13:de:63:37:d6:f1:d7:6e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Feb  4 18:37:10 2025 GMT
            Not After : Feb  3 18:42:10 2026 GMT
        Subject: CN=97A35F754A5136A120362A21E5D9F16DAC32059F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:7b:99:8d:7f:82:fe:e7:e6:f3:f5:df:c4:
                    7a:e2:64:3d:99:b5:51:c8:2d:6d:2e:72:0a:aa:04:
                    bc:04:ec:4d:c8:9a:c4:54:2c:8f:3e:91:73:72:fa:
                    03:f3:72:de:8f:db:1f:25:78:ad:e6:7c:7c:ad:1b:
                    38:68:69:45:4c:77:ae:43:77:8d:85:64:69:f4:23:
                    0e:35:c8:a3:ba:8d:16:91:f5:1e:e1:9d:02:76:6e:
                    b3:5e:c6:36:f4:2d:a3:cf:86:8a:b5:9c:5a:df:c3:
                    5a:3a:dc:95:05:6d:b4:1d:e8:13:86:60:cf:0f:92:
                    95:e5:07:87:c4:e3:f0:51:29:6e:3b:50:37:fd:bf:
                    e1:df:eb:32:14:a7:50:9b:67:68:8b:06:b9:4f:2f:
                    25:b6:f1:34:7f:0d:73:a2:14:fb:96:b4:dc:c3:cc:
                    60:03:65:85:92:2d:dd:2a:9a:61:b5:dd:91:d4:84:
                    32:7f:09:d4:f9:ca:75:4c:d3:38:90:f8:ba:ef:fe:
                    f6:c4:51:32:75:60:c4:06:71:79:f8:42:17:47:9f:
                    ff:41:32:bd:8a:30:e9:b1:6e:15:12:c4:e5:1a:57:
                    3d:f1:fa:d5:9a:47:58:2a:1c:10:72:a9:68:27:da:
                    9d:d8:d5:e1:c1:db:49:51:01:5b:c5:53:ad:3e:54:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A3:5F:75:4A:51:36:A1:20:36:2A:21:E5:D9:F1:6D:AC:32:05:9F
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:66:4b:68:ac:1f:47:d7:d1:f4:88:cc:be:09:cf:45:1b:
         d1:b4:f5:bd:ed:74:bf:e2:18:6c:30:69:c4:05:8b:5f:1a:bb:
         ee:e4:e0:87:b8:17:3e:c1:a5:43:cd:be:0d:fd:cd:91:c3:4a:
         97:a1:11:de:aa:fe:9f:f1:66:85:79:66:37:50:94:31:9d:36:
         a6:12:15:78:fe:a2:33:b3:54:3b:d3:b0:10:69:d1:f1:f9:26:
         db:41:b3:80:7d:b4:9c:fb:56:ed:4c:f4:33:d7:a0:ec:55:3b:
         fa:92:0e:a9:da:2d:de:12:18:75:b9:3f:e5:b6:52:11:b3:21:
         44:c9:3f:2a:7e:39:5d:0f:b7:14:32:78:3f:76:6c:97:da:5b:
         93:77:fd:00:f6:82:e3:93:e5:a1:4c:7b:2d:5d:02:d1:04:c5:
         e0:6e:1b:7f:cd:bd:91:1f:e3:03:10:56:37:23:c2:50:f9:dc:
         8b:09:94:c8:6a:aa:d6:1e:79:cb:04:d8:ab:f8:dc:8f:22:07:
         62:d0:5d:40:c2:5e:11:73:f4:ae:d4:0d:ba:ef:57:05:f9:e1:
         02:8f:92:0b:2b:e9:7d:44:cf:4f:02:e7:14:f7:69:e3:eb:fc:
         4b:94:e1:b6:f8:92:d1:08:89:98:8f:02:18:ad:2f:1a:11:9c:
         66:f5:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:09 2025 by rpki-client