Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3139322e302f31392d3234203d3e20323632393238.roa
File:                     3139312e3130322e3139322e302f31392d3234203d3e20323632393238.roa (raw, json)
Hash identifier:          SOxuI/e1e5f91ag815tIoPZ9PULAz1sCw1GS2TKQIHs=
Subject key identifier:   76:94:F3:18:2C:EE:EC:BD:D3:EA:4D:EC:34:8C:86:02:ED:8A:92:A1
Certificate issuer:       /CN=076991290F5B947E0E07A8223FE219EC05478D0F
Certificate serial:       75081F7311D87C54AC98E0F68D45F92305AC4217
Authority key identifier: 07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3139322e302f31392d3234203d3e20323632393238.roa
Signing time:             Tue 04 Feb 2025 18:46:33 +0000
ROA not before:           Tue 04 Feb 2025 18:41:33 +0000
ROA not after:            Tue 03 Feb 2026 18:46:33 +0000
asID:                     262928
IP address blocks:        191.102.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:08:1f:73:11:d8:7c:54:ac:98:e0:f6:8d:45:f9:23:05:ac:42:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076991290F5B947E0E07A8223FE219EC05478D0F
        Validity
            Not Before: Feb  4 18:41:33 2025 GMT
            Not After : Feb  3 18:46:33 2026 GMT
        Subject: CN=7694F3182CEEECBDD3EA4DEC348C8602ED8A92A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:c7:74:77:83:2c:b7:25:ed:f2:07:d8:40:
                    fc:35:98:67:6f:32:6f:25:1e:a0:68:ae:b7:a7:be:
                    ef:fc:ae:a5:e6:1f:89:e5:6e:5d:d8:f5:0e:a0:d3:
                    a7:83:bc:cd:90:b1:10:d4:f7:b2:f1:08:27:b6:c4:
                    83:72:25:ac:a6:d5:fa:23:96:be:04:31:de:60:17:
                    f0:b5:57:fa:e7:d8:27:d1:4d:19:f9:91:b0:e3:21:
                    04:1a:cb:70:32:2b:4e:97:c7:2e:12:4d:c6:d9:fb:
                    60:be:29:bf:41:33:a0:89:15:bd:e9:39:e1:9f:e7:
                    f9:3e:f0:ac:c8:5f:e7:1e:1b:4d:e1:6d:01:44:6a:
                    87:7e:19:e8:e1:33:b2:08:ec:2a:eb:75:6b:63:2b:
                    de:d6:dc:57:2d:64:d0:cd:68:1e:a7:f4:44:a2:9d:
                    70:f4:b8:43:b6:de:56:c5:f3:1b:92:98:4d:47:c5:
                    68:b0:4c:b5:0e:f9:26:d3:06:0f:b5:ca:d5:6c:50:
                    06:79:7e:47:62:ec:6a:c1:e5:dc:e7:47:da:b6:f2:
                    78:08:45:2a:d0:8e:27:b9:a7:6b:a4:38:3d:de:8f:
                    1a:cd:a0:e3:58:7e:a9:ea:b8:3a:a6:9c:08:57:ba:
                    2c:98:dd:e1:56:a8:8f:df:4d:0e:06:64:03:30:36:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:F3:18:2C:EE:EC:BD:D3:EA:4D:EC:34:8C:86:02:ED:8A:92:A1
            X509v3 Authority Key Identifier:
                keyid:07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3139322e302f31392d3234203d3e20323632393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:a4:1a:ef:61:f2:ac:db:43:48:d1:72:ef:fa:e0:9c:07:
         ee:4c:25:9c:8e:e8:4d:a4:7a:a4:02:82:4f:69:1b:3e:35:f5:
         87:ad:df:00:22:72:b2:b0:50:41:5e:91:a0:e5:aa:34:51:2f:
         4d:0f:77:57:90:ea:19:53:30:8f:f7:c2:8d:2d:08:01:56:9b:
         16:23:ff:43:72:22:2d:1a:33:e8:23:a3:9d:b0:c4:41:62:dd:
         97:17:82:e4:54:f9:69:1b:b0:1b:70:93:29:64:2b:22:43:16:
         ae:1e:3b:99:63:5e:cf:00:8c:cc:f1:bb:8b:52:7c:46:5a:5c:
         f7:c8:c3:2e:af:c8:17:e4:82:ec:2b:7c:10:3b:d4:f6:7e:6d:
         5b:f0:41:51:1d:58:01:3f:62:2a:f6:5d:4e:5a:1a:62:65:68:
         85:2f:89:76:3b:1f:87:0c:9d:45:54:f7:58:6b:5b:be:a1:99:
         31:eb:ae:7a:36:4d:7d:e1:33:4f:c3:9b:2f:8f:fc:16:de:f5:
         37:9c:99:36:97:9b:6c:14:d7:68:6d:f5:68:a1:8e:d3:03:f1:
         d9:75:4d:84:62:05:cd:ff:36:da:62:2b:1a:d8:07:7c:20:9d:
         48:8d:d6:3a:ef:ec:b1:b4:bc:59:fc:ad:36:fd:26:da:05:73:
         ca:dd:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:54:13 2025 by rpki-client