Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa
File:                     3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa (raw, json)
Hash identifier:          2HNfS91c9NoHaSFVYVAkPLHwaq3h6jnddzde7sXR1hI=
Subject key identifier:   11:E5:4A:80:16:B0:9E:2E:30:24:E1:E9:9E:CD:8E:4E:D8:11:A6:B7
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       3318F247D41416B72FC7468E6BC92392F7D05125
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa
Signing time:             Tue 04 Feb 2025 20:06:22 +0000
ROA not before:           Tue 04 Feb 2025 20:01:22 +0000
ROA not after:            Tue 03 Feb 2026 20:06:22 +0000
asID:                     28049
IP address blocks:        190.121.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 21:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:18:f2:47:d4:14:16:b7:2f:c7:46:8e:6b:c9:23:92:f7:d0:51:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Feb  4 20:01:22 2025 GMT
            Not After : Feb  3 20:06:22 2026 GMT
        Subject: CN=11E54A8016B09E2E3024E1E99ECD8E4ED811A6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:59:21:9e:16:2e:d8:83:90:b4:d0:f5:93:
                    e6:10:1a:dc:8c:d0:5c:cb:4a:08:5c:30:8d:21:68:
                    29:96:8f:66:af:71:5f:5a:f6:62:00:ce:ef:48:70:
                    ec:90:30:f9:dc:ee:0b:a8:75:7a:45:08:8d:d7:f5:
                    40:cc:2d:f4:a0:5f:1b:12:c9:cc:f6:06:84:f5:f9:
                    d7:91:89:97:af:49:ae:9e:3b:14:be:65:ef:ae:48:
                    49:5e:16:29:53:5b:55:d9:96:47:09:14:23:92:1b:
                    31:61:53:06:78:00:d6:47:ee:00:88:c4:50:d4:aa:
                    96:98:be:06:eb:4f:5a:42:7a:4f:a4:8a:45:b3:14:
                    4a:7c:1d:34:35:40:05:09:43:52:3f:fa:94:20:91:
                    45:f9:54:34:95:fa:7a:a2:92:ef:8f:4d:ba:46:5a:
                    8d:fe:fc:ca:d1:cf:42:93:6f:db:17:3a:c4:68:7e:
                    7a:84:b9:0a:b2:c9:05:92:29:fb:62:68:e2:0e:73:
                    52:36:7e:f7:2f:bc:07:b6:9b:76:b6:60:66:d1:b0:
                    60:d7:99:03:ac:a7:85:10:6f:cf:b2:0e:25:1a:e6:
                    b5:a5:45:78:09:82:7c:de:54:b2:52:d7:c2:fb:89:
                    0b:f1:b0:10:77:46:3d:0b:47:a7:3a:24:ab:f3:2c:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E5:4A:80:16:B0:9E:2E:30:24:E1:E9:9E:CD:8E:4E:D8:11:A6:B7
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f3:77:85:71:4d:e7:81:d0:75:a5:af:f1:46:9d:0a:64:1f:
         20:e4:b9:34:f7:8c:9e:82:f6:99:df:cf:cb:ff:02:b6:95:29:
         1c:b4:f2:99:07:80:e1:2d:db:f9:5a:23:76:6a:fa:27:28:e5:
         08:b9:d5:8d:a6:1c:45:03:38:d1:06:1a:cf:0d:59:21:20:47:
         e0:70:7e:b1:0f:9f:4d:8b:3d:2d:49:8a:e8:ff:62:2e:03:a3:
         13:67:77:4a:07:14:b6:d8:87:85:c1:3f:cf:fe:1d:cb:e9:73:
         aa:96:67:be:d1:c9:2f:7a:00:52:4f:58:83:24:ad:4e:ad:b1:
         f5:b5:4c:18:f3:a4:92:fe:87:c2:1a:58:7f:e5:29:f2:08:a1:
         77:70:fa:4f:3c:4c:98:9e:d0:38:5b:ee:31:09:0e:31:18:f1:
         f2:c2:53:d8:9b:78:03:38:77:43:f0:1f:84:7e:a1:b7:74:04:
         20:ca:7b:ff:64:a0:9a:15:0a:98:50:91:8c:56:45:e4:30:5a:
         ee:f7:7c:16:cf:34:84:c3:51:f2:88:76:9a:b3:cd:40:bc:2c:
         8e:ba:61:c6:6d:e2:c7:2d:ff:2e:ee:7a:54:76:24:0b:8c:73:
         a1:5e:9a:1e:df:99:00:52:21:ef:ad:1c:21:05:99:50:bb:fd:
         67:fd:af:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 01:52:28 2025 by rpki-client