Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3139302e3130322e3136302e302f31392d3234203d3e203237393735.roa
File:                     3139302e3130322e3136302e302f31392d3234203d3e203237393735.roa (raw, json)
Hash identifier:          q1Ty2hpV0y/fASgYybHw7v0/SvorvNhFoPQUnm3g/u0=
Subject key identifier:   95:77:3D:8C:13:36:FE:FE:79:CF:D9:E1:85:76:31:F8:75:90:47:4C
Certificate issuer:       /CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
Certificate serial:       603177A199F284D60502F6D9433A97021BFF690B
Authority key identifier: 5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3139302e3130322e3136302e302f31392d3234203d3e203237393735.roa
Signing time:             Tue 04 Feb 2025 18:48:16 +0000
ROA not before:           Tue 04 Feb 2025 18:43:16 +0000
ROA not after:            Tue 03 Feb 2026 18:48:16 +0000
asID:                     27975
IP address blocks:        190.102.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:31:77:a1:99:f2:84:d6:05:02:f6:d9:43:3a:97:02:1b:ff:69:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
        Validity
            Not Before: Feb  4 18:43:16 2025 GMT
            Not After : Feb  3 18:48:16 2026 GMT
        Subject: CN=95773D8C1336FEFE79CFD9E1857631F87590474C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:77:b0:81:51:83:0d:03:58:46:0d:6c:2b:8b:
                    d7:2e:ad:d6:1f:a8:b2:a7:c9:87:76:7a:e2:e0:7e:
                    ea:cb:c4:37:2b:63:6d:b5:b3:6a:3c:8e:7b:4a:d4:
                    eb:1a:d4:05:0f:47:bc:a6:ee:eb:59:f7:33:5c:2d:
                    ee:35:69:22:24:55:50:bb:58:45:31:d2:a3:73:e9:
                    73:e0:f9:82:5a:50:80:17:25:0f:c1:a3:19:94:f3:
                    ad:56:68:f4:69:5f:24:02:b0:8c:9d:53:70:c5:39:
                    d9:a5:44:09:48:ff:7a:57:17:62:55:ad:2e:a2:75:
                    0a:19:71:87:cf:60:31:13:06:d7:03:6b:69:cd:77:
                    aa:c8:1d:81:06:30:db:3d:18:45:d6:33:1c:24:4d:
                    3a:b3:9b:a2:d9:a7:81:70:b9:fd:e2:07:cf:8f:1b:
                    df:2e:e4:30:f8:b0:d7:06:a0:55:a7:da:7e:2e:11:
                    36:cd:40:90:f6:46:97:e7:fe:b3:a2:7c:74:7c:a8:
                    f1:d3:7f:4a:82:80:dc:43:7e:b4:70:5a:6e:71:09:
                    11:13:f4:11:88:f1:86:cd:1d:6b:78:82:7f:d3:e2:
                    d5:08:12:1b:48:ef:8d:50:da:71:21:87:3d:70:a7:
                    68:15:8b:ee:a9:0c:c8:e7:41:b0:b2:ee:84:88:30:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:3D:8C:13:36:FE:FE:79:CF:D9:E1:85:76:31:F8:75:90:47:4C
            X509v3 Authority Key Identifier:
                keyid:5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3139302e3130322e3136302e302f31392d3234203d3e203237393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:5a:cf:85:c9:09:54:85:d5:16:4e:d1:e7:c6:7b:a4:da:
         4b:a3:d4:3e:cd:b5:b0:41:29:92:21:48:d5:1a:0f:7a:f8:45:
         e5:2a:29:6b:22:c1:5e:d6:1b:42:c0:3b:5d:3c:6a:c4:a6:77:
         f1:6d:58:2d:d1:5a:ca:a8:c1:46:c4:bf:51:ba:ad:bb:99:52:
         f1:a3:a8:b2:16:8c:d4:02:1a:48:50:61:86:da:97:6b:a9:9e:
         bd:90:69:74:ed:49:77:be:e0:98:b8:e1:a5:7f:de:5e:7b:b6:
         55:01:8d:77:ff:ad:22:cd:8c:e6:37:fe:d9:5b:09:78:e9:7e:
         d6:ea:2a:d4:bf:2c:f1:1e:a9:f7:73:1a:ca:fa:1c:c0:5c:bb:
         9b:09:c4:3b:4e:c6:87:d8:09:d6:1a:3b:16:83:f2:77:c9:39:
         c6:64:0a:4c:ed:3b:0a:15:76:b0:b5:23:65:9f:28:0b:2f:11:
         bb:33:fa:e0:b2:f9:7f:ba:bb:6e:fe:f6:b3:24:bb:9a:9a:03:
         fe:1f:63:7f:25:fc:38:9b:c8:9a:52:c4:67:38:f5:cf:fd:b3:
         bd:db:07:1e:92:e0:1a:46:66:01:e7:37:e9:c1:4a:02:f6:bc:
         31:d7:75:06:79:71:64:66:d0:06:ab:85:4c:8d:74:38:be:bf:
         d0:88:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:28 2025 by rpki-client