Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139352e302f32342d3234203d3e203238303439.roa
File:                     3139302e3132312e3139352e302f32342d3234203d3e203238303439.roa (raw, json)
Hash identifier:          kml9PyI5ieWAiUQyKPjN7hCS4CGwjDVgNQP60h870Xo=
Subject key identifier:   75:7B:DE:F6:51:3C:20:4B:4F:14:9A:6D:65:3E:57:91:79:62:FC:50
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       2BCA57C83D0479151084B2D13A66A1594D50B788
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139352e302f32342d3234203d3e203238303439.roa
Signing time:             Tue 04 Feb 2025 20:06:21 +0000
ROA not before:           Tue 04 Feb 2025 20:01:21 +0000
ROA not after:            Tue 03 Feb 2026 20:06:21 +0000
asID:                     28049
IP address blocks:        190.121.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 21:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ca:57:c8:3d:04:79:15:10:84:b2:d1:3a:66:a1:59:4d:50:b7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Feb  4 20:01:21 2025 GMT
            Not After : Feb  3 20:06:21 2026 GMT
        Subject: CN=757BDEF6513C204B4F149A6D653E57917962FC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:80:3c:b8:b9:f4:0d:15:64:bc:83:ef:01:
                    c7:3a:d1:bc:88:31:59:a0:73:39:29:c9:21:c5:10:
                    33:b5:65:92:d2:9d:41:be:46:04:7b:d5:f7:0f:e3:
                    78:da:a3:cd:74:f7:ae:5d:f2:55:29:a7:1c:d5:5e:
                    ba:e9:1f:c0:db:3a:30:ec:52:9c:f1:d5:21:89:b0:
                    d3:02:a6:37:47:d3:6b:e9:13:d3:88:33:8a:d1:8e:
                    43:17:6d:79:5d:60:98:f4:61:57:39:12:c9:95:fb:
                    09:15:be:20:f4:06:5f:ae:a0:45:5f:55:39:e2:ed:
                    62:21:a8:0b:0e:97:cd:c4:4f:92:70:ec:81:ab:e0:
                    cf:b7:da:76:49:53:2b:34:fa:81:1d:d0:2e:b3:0e:
                    c2:3c:8f:04:47:48:22:4a:72:ae:80:f5:28:f2:0c:
                    70:b5:53:e0:e2:91:12:a4:7f:cb:1d:53:7e:37:d3:
                    47:53:bb:d4:68:db:0a:88:7a:75:cb:ae:9c:1b:52:
                    a4:d9:c4:72:af:c8:ec:05:ee:36:28:00:94:b3:1b:
                    b4:c4:6b:8b:2f:87:aa:99:ad:7f:30:d9:e2:b7:eb:
                    11:af:0a:54:ab:4f:4f:d7:26:6e:b5:cf:69:0d:19:
                    5d:2b:12:81:0b:aa:90:6c:20:6c:8e:e0:51:df:ed:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7B:DE:F6:51:3C:20:4B:4F:14:9A:6D:65:3E:57:91:79:62:FC:50
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139352e302f32342d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:0a:a5:3f:00:79:39:fd:05:4c:9b:f0:7e:0e:41:7a:8e:4a:
         f7:a3:e1:ab:1e:6c:fe:e0:de:3a:ae:0b:ba:22:2e:67:b7:d1:
         04:cb:2b:7e:14:67:fc:6c:cb:17:ab:a7:bf:46:39:7d:15:a7:
         d0:ed:45:11:5b:66:71:3a:1f:84:41:39:91:62:82:79:7e:7a:
         10:32:f3:a4:1f:d2:0f:de:71:81:2d:8c:82:d4:86:27:6a:68:
         3b:fb:4e:a8:82:27:e3:b1:23:cc:a4:a6:41:6a:ec:67:cc:ec:
         c7:bc:ca:da:de:97:e6:02:74:6b:f4:72:59:4c:90:ef:1d:52:
         b9:2a:6f:87:cc:ff:b0:9b:02:1d:31:79:1f:cf:d3:86:f1:a5:
         ab:a6:40:ef:71:d9:7b:e0:e0:82:3a:84:50:17:3d:e6:10:f6:
         44:c8:ee:58:d0:8c:20:5a:ed:f1:7b:f6:5a:1a:0f:07:56:e3:
         c9:1b:1a:81:51:0a:36:bc:b0:de:54:b3:7a:8f:41:0b:0d:72:
         ed:89:8a:e5:72:c3:f2:7c:24:2e:ba:de:96:7d:ad:b0:97:5c:
         d5:4d:95:98:48:ab:d4:d2:61:4f:6c:f3:69:b3:e5:87:ad:9c:
         c6:0f:8b:a2:c5:32:87:3d:f4:f2:fa:a5:4b:2c:21:34:45:2a:
         eb:cf:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 01:30:20 2025 by rpki-client