Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e203532323733.roa
File:                     3139302e3131322e33322e302f32312d3234203d3e203532323733.roa (raw, json)
Hash identifier:          gIuf/f1HApGdTPFy3Wqvgbuh6KiwH/wko0Fi/VCUujg=
Subject key identifier:   20:BB:B0:B9:FE:72:FD:DB:9D:51:94:C9:66:AA:65:A0:A1:92:0D:5E
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       075C5378C0BA8FE6350371398B0EB73502EA51B3
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e203532323733.roa
Signing time:             Tue 04 Feb 2025 18:47:51 +0000
ROA not before:           Tue 04 Feb 2025 18:42:51 +0000
ROA not after:            Tue 03 Feb 2026 18:47:51 +0000
asID:                     52273
IP address blocks:        190.112.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:53:78:c0:ba:8f:e6:35:03:71:39:8b:0e:b7:35:02:ea:51:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Feb  4 18:42:51 2025 GMT
            Not After : Feb  3 18:47:51 2026 GMT
        Subject: CN=20BBB0B9FE72FDDB9D5194C966AA65A0A1920D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:70:5e:13:d8:f5:c0:0f:f2:74:e5:01:87:
                    f3:51:5c:c2:19:56:d0:ef:d3:4e:71:dd:68:d4:50:
                    78:ab:2a:93:08:0f:ec:d9:97:93:40:46:eb:81:25:
                    17:34:a5:a5:0e:f9:ea:bd:f9:c5:0d:73:61:97:b8:
                    e2:29:97:8f:74:e3:5a:1f:ef:f8:e4:98:c2:a4:e4:
                    6b:cc:60:96:61:6d:a7:64:9b:97:b2:1d:1f:18:a8:
                    fa:5d:42:e2:10:16:69:44:03:d0:3f:c8:7a:0c:d4:
                    38:ac:5c:08:a0:aa:19:7e:a2:fe:0e:3d:b2:6b:17:
                    f5:5c:e0:0e:21:fd:e2:a4:da:34:b2:53:29:d2:51:
                    37:b3:1d:6c:79:e0:19:97:d6:48:b6:ce:26:41:a7:
                    fd:de:74:bd:55:f6:ec:8f:61:81:77:d4:68:e9:e4:
                    47:5e:55:5f:21:c9:70:6c:8f:ac:c2:0c:3c:73:a7:
                    cd:df:35:f9:0e:19:6c:d1:f8:d9:df:2e:64:a4:38:
                    e2:18:fc:e4:3f:55:33:89:41:15:3b:c3:20:f3:fe:
                    18:cb:2e:cf:87:ab:d5:84:19:2c:95:42:de:16:bb:
                    c2:8e:a2:0a:fe:df:01:73:70:1b:b7:d1:e8:0b:b4:
                    07:25:31:31:14:b9:85:d0:60:e9:5b:9d:1e:ec:45:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BB:B0:B9:FE:72:FD:DB:9D:51:94:C9:66:AA:65:A0:A1:92:0D:5E
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e203532323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:f6:12:4c:18:4c:42:00:94:77:85:2d:d1:dc:f0:0a:2d:
         55:cf:41:cb:17:4d:a8:77:7b:fb:48:53:95:6b:a0:9f:9d:98:
         ee:5c:39:34:34:6c:db:5f:52:91:52:e9:4f:3f:d0:c4:d8:1b:
         75:52:26:bf:54:41:bb:c0:90:75:d7:6f:d1:8b:42:69:79:6d:
         3c:55:3c:5e:8c:dc:d8:fd:6b:1b:f4:54:93:40:39:ac:9b:d2:
         0a:17:bf:09:01:27:97:b3:94:cb:85:13:d8:d0:ad:cc:88:bb:
         19:02:97:50:5c:3d:64:38:a2:8a:4f:6b:77:80:c1:1b:db:b4:
         82:f1:ef:fe:a3:52:dc:4b:ec:22:63:64:8b:43:7d:24:91:16:
         3a:6a:b9:a2:6e:14:2f:55:b8:5d:66:1f:2b:a4:8f:68:1e:ff:
         63:43:74:11:c0:db:41:db:82:eb:c2:b4:15:d4:5b:69:fd:7f:
         38:e0:c1:39:a8:c2:d6:8e:0d:9d:18:f0:7f:6b:13:b2:06:57:
         fa:4d:55:31:ad:5e:11:8a:95:06:39:fe:4c:d1:7e:0b:2d:ab:
         37:53:89:4f:ab:23:89:8d:6b:15:69:78:9a:cc:81:ec:48:f6:
         ed:f6:6e:53:00:a8:04:40:e6:9d:6a:d3:59:b9:22:91:eb:df:
         b1:d4:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:19:27 2025 by rpki-client