Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa
File:                     3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa (raw, json)
Hash identifier:          Ib8eOIO2LBs1Pv2vVOfwE7rP0f15JfIBDZIzE559WGQ=
Subject key identifier:   AD:0D:BB:C8:FA:8B:DD:C0:C7:F0:4C:FA:5E:EF:3E:EE:F8:AD:D6:79
Certificate issuer:       /CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
Certificate serial:       2E68C95D2CAB25369898B8E39EC5E71F9D8E39D2
Authority key identifier: 55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa
Signing time:             Tue 04 Feb 2025 18:40:48 +0000
ROA not before:           Tue 04 Feb 2025 18:35:48 +0000
ROA not after:            Tue 03 Feb 2026 18:40:48 +0000
asID:                     262192
IP address blocks:        190.13.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:68:c9:5d:2c:ab:25:36:98:98:b8:e3:9e:c5:e7:1f:9d:8e:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
        Validity
            Not Before: Feb  4 18:35:48 2025 GMT
            Not After : Feb  3 18:40:48 2026 GMT
        Subject: CN=AD0DBBC8FA8BDDC0C7F04CFA5EEF3EEEF8ADD679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:7e:72:b3:b1:61:cc:ab:e1:6c:95:de:25:
                    65:23:9f:c3:9f:65:52:5f:60:1d:7c:60:e7:0b:44:
                    78:3b:03:f2:a4:e5:95:d3:41:2b:51:09:3e:d0:b0:
                    5f:b2:fd:ca:0d:4b:6b:37:e4:a3:82:19:95:af:e4:
                    6d:39:b8:b9:20:29:3c:43:bd:0b:40:bb:6f:67:18:
                    40:0c:73:66:e5:75:98:2e:48:51:f1:e2:ae:0e:b1:
                    93:54:dc:44:b3:f7:cf:5e:3a:2e:d4:1c:19:27:d8:
                    6f:8b:bc:af:70:5c:42:36:af:6f:c2:97:cb:bc:58:
                    c0:80:34:4f:31:6b:4e:45:62:9b:66:24:f9:4d:62:
                    4b:6e:99:8f:76:ba:73:d5:e2:d3:19:03:34:1b:54:
                    3a:ff:8a:52:00:86:41:8c:22:0b:e3:bb:48:67:89:
                    21:22:b1:9e:e4:d6:a0:ea:fc:31:b1:60:db:4f:3c:
                    23:9e:95:76:8c:d0:29:7a:a2:37:8a:f6:11:49:56:
                    2c:6c:e4:e3:2f:2c:1c:8f:1c:09:6e:c3:a2:58:6a:
                    a0:ba:87:80:fe:67:ab:9b:fb:2a:f5:d2:80:a9:6e:
                    e9:87:1a:d1:38:41:2b:d3:10:30:ca:b0:1b:f4:3d:
                    65:71:c1:47:7f:30:9c:b2:46:71:a8:35:94:33:66:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0D:BB:C8:FA:8B:DD:C0:C7:F0:4C:FA:5E:EF:3E:EE:F8:AD:D6:79
            X509v3 Authority Key Identifier:
                keyid:55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:e1:e3:7d:82:05:f8:f5:4c:1c:94:3a:22:9f:96:fa:03:
         c3:2e:fc:38:05:ea:11:bc:30:20:53:3f:ae:eb:d5:1f:40:f5:
         b4:8e:b6:14:3f:50:7a:ea:a4:a3:5e:a7:94:4d:b6:fe:a9:04:
         37:bc:45:13:d9:f5:63:12:dd:39:af:3f:57:1d:9d:c5:aa:ce:
         42:d4:85:44:fa:e2:a2:f7:8e:8a:59:82:ec:c7:53:b9:47:d4:
         13:1b:0d:d8:c3:16:22:ea:ae:9c:3d:17:82:b9:e1:a6:6d:fb:
         6c:75:bb:62:ac:af:00:2a:28:f4:24:d2:59:fe:20:1c:8d:91:
         0b:c2:d8:6f:1f:1f:60:b4:90:67:5a:f6:47:ce:25:52:77:d0:
         e8:ec:04:d3:c5:7c:65:81:99:19:7f:cb:f6:b9:a2:f2:de:3e:
         8a:0e:d2:73:61:68:33:c9:99:fd:0b:87:4a:ab:ca:fb:bf:83:
         c3:0f:10:03:6f:18:35:d1:4b:e1:15:de:f3:78:2f:37:59:bc:
         bd:b7:27:6d:d0:f3:70:d5:38:49:86:24:ea:ed:77:30:82:7a:
         c4:83:e9:6c:50:a9:8a:74:13:2a:30:9d:44:cd:b8:29:4a:a7:
         2a:f0:c0:6f:30:c8:4c:0c:aa:27:3d:45:62:dc:09:dc:d8:4e:
         71:69:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:12 2025 by rpki-client