Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32322e302e302f31362d3234203d3e203136363239.roa
File:                     3139302e32322e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          klA0slwfuTkKK3o1rsTT0da3w625RWXyXktaD/t3GNE=
Subject key identifier:   C4:61:4A:DA:37:29:29:34:F8:A2:0C:75:36:60:EC:F7:2C:4F:4B:89
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4B173824CB169355111E5E6AEF32AB381096C944
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32322e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:30:05 +0000
ROA not before:           Tue 04 Feb 2025 18:25:05 +0000
ROA not after:            Tue 03 Feb 2026 18:30:05 +0000
asID:                     16629
IP address blocks:        190.22.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:38:24:cb:16:93:55:11:1e:5e:6a:ef:32:ab:38:10:96:c9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:25:05 2025 GMT
            Not After : Feb  3 18:30:05 2026 GMT
        Subject: CN=C4614ADA37292934F8A20C753660ECF72C4F4B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:01:4f:92:4d:02:75:0c:be:e0:a8:4f:25:
                    5f:35:b7:f4:67:be:be:94:30:55:b6:4c:f1:fd:63:
                    40:91:f7:de:21:32:b3:4d:7c:85:0f:ee:3d:6f:35:
                    f5:3f:9e:bd:cf:12:31:54:cf:8d:74:79:04:d6:fd:
                    41:81:4a:d4:54:f5:b8:79:f4:08:12:14:43:95:1d:
                    af:54:cd:cf:b2:c7:c1:90:3d:02:e6:25:8b:f0:0f:
                    53:17:d6:29:8d:34:26:75:67:62:f6:ab:d3:d1:b5:
                    ac:a7:4d:26:88:e5:a9:1c:9e:7e:a3:cb:33:a9:84:
                    75:4a:f7:fa:98:4b:da:71:05:4e:e8:7a:1b:e5:90:
                    5d:66:c8:6b:39:32:a9:c4:d3:d3:3d:0f:17:b3:d5:
                    fd:d7:37:89:a8:89:e3:ac:21:10:74:1c:87:6a:4c:
                    c5:35:58:a5:7a:54:98:0c:7a:74:81:90:75:6a:67:
                    41:14:ea:7f:89:62:52:d5:af:74:d4:c9:f3:78:93:
                    1f:3a:72:37:c3:bd:11:76:e6:3e:43:12:ce:db:0b:
                    fd:86:9a:7e:e7:a0:ff:67:fa:7b:22:2b:82:5e:5b:
                    9b:ed:dc:a6:f9:d1:88:e5:f8:86:fe:50:4c:8a:ae:
                    10:dc:7f:57:9c:0c:f4:db:11:76:08:49:25:09:dc:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:4A:DA:37:29:29:34:F8:A2:0C:75:36:60:EC:F7:2C:4F:4B:89
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32322e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:5b:22:87:b2:ee:b0:40:74:c3:6c:a2:c7:51:7c:27:60:
         d4:eb:a0:0d:1d:95:07:97:1d:19:b3:95:11:10:48:9b:12:12:
         f3:4b:df:84:f9:11:ab:85:eb:2d:5a:f2:31:d3:1f:12:85:7e:
         ce:90:8d:21:13:b5:5f:8c:a2:b9:cd:bf:62:9b:56:7c:b8:ed:
         ef:f0:57:8a:43:2f:28:0c:11:90:cd:cc:1b:c4:25:96:50:e4:
         21:de:8f:60:28:0f:32:34:c2:ce:53:ea:6d:c7:8b:43:7a:5d:
         44:ef:5a:5b:27:b4:7a:0f:ac:f5:76:a2:db:71:91:22:18:bd:
         9e:30:27:5e:9c:ec:29:6e:31:f3:3c:ed:de:9e:74:6c:77:66:
         e0:41:07:e6:54:ad:f2:17:02:8d:00:77:e3:2d:25:8c:72:1e:
         97:62:c8:30:fb:b8:10:4c:1e:ff:91:d0:65:dd:6f:d1:e6:31:
         92:d2:26:b6:b4:a1:94:05:9b:ac:1e:52:63:34:44:7e:ac:85:
         31:f9:b6:ca:2e:47:5a:79:5d:42:1f:74:3a:91:03:20:91:53:
         22:67:55:b8:e4:7c:2f:8e:c8:ec:60:b8:13:99:f5:0a:ef:0d:
         93:b7:dc:d3:0f:cb:9d:b3:63:6c:1b:b6:64:10:ce:18:fd:a3:
         d9:78:f1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:54:23 2025 by rpki-client