Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34352e302f32342d3234203d3e20323639383332.roa
File:                     3139302e39332e34352e302f32342d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          TSCtV4IcJBqBIfHTuS2FHbfieVzMJ0//tdpsvEVO3VQ=
Subject key identifier:   87:1E:24:01:20:01:04:63:E4:35:CE:9F:83:3D:77:3A:3E:8F:F8:97
Certificate issuer:       /CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
Certificate serial:       1199893F42C9A6A9693F813BF10CEF504A2B7639
Authority key identifier: F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34352e302f32342d3234203d3e20323639383332.roa
Signing time:             Tue 04 Feb 2025 18:38:17 +0000
ROA not before:           Tue 04 Feb 2025 18:33:17 +0000
ROA not after:            Tue 03 Feb 2026 18:38:17 +0000
asID:                     269832
IP address blocks:        190.93.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:99:89:3f:42:c9:a6:a9:69:3f:81:3b:f1:0c:ef:50:4a:2b:76:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
        Validity
            Not Before: Feb  4 18:33:17 2025 GMT
            Not After : Feb  3 18:38:17 2026 GMT
        Subject: CN=871E240120010463E435CE9F833D773A3E8FF897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:95:91:be:f5:da:87:8c:9f:a8:2f:e5:9a:
                    b5:92:42:ca:8a:75:80:d4:58:66:7a:23:30:37:0c:
                    b3:dd:4c:89:c5:fa:c8:09:33:c1:01:f1:c0:79:37:
                    14:74:6d:f3:10:dd:c3:03:27:03:ff:da:98:e7:97:
                    12:8e:b0:30:03:3e:45:98:c1:87:75:4c:59:17:37:
                    da:2d:79:76:60:36:c3:bc:12:54:26:67:97:d9:6a:
                    21:1a:3f:e1:b7:4f:2c:d9:c6:c2:84:e6:81:ea:36:
                    72:34:f8:1d:06:86:57:7a:f1:98:ff:9c:84:ac:0d:
                    84:65:99:21:c1:ec:8a:7a:2a:44:37:3f:f4:2b:46:
                    e9:b8:e1:6b:96:c2:a7:1f:8a:62:e8:79:eb:3e:e8:
                    ef:5e:59:33:a6:ca:5f:e0:a1:ed:77:da:22:70:f5:
                    5c:b1:d2:4a:28:52:c7:97:fa:2c:84:92:aa:f7:b5:
                    48:c8:09:e4:cf:02:b2:35:a8:60:be:c0:b4:cf:bc:
                    9b:1e:5a:de:6d:bf:cf:bf:20:c1:0f:74:52:99:74:
                    e5:5d:b7:75:12:2f:6c:17:57:bb:81:5f:dc:5c:4d:
                    37:e5:21:63:3f:46:ed:f3:23:aa:df:e0:91:b5:78:
                    c4:f6:a0:cd:c7:8a:08:bc:7a:6f:7d:88:b5:5e:c3:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:24:01:20:01:04:63:E4:35:CE:9F:83:3D:77:3A:3E:8F:F8:97
            X509v3 Authority Key Identifier:
                keyid:F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34352e302f32342d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:ab:e3:24:2b:f0:de:bd:03:08:eb:10:e1:93:13:55:39:
         de:7b:72:0a:57:50:9e:43:35:5d:46:ff:ff:46:27:2a:d2:40:
         78:d6:64:21:a0:32:bc:98:f0:f4:8c:3d:d5:e8:51:d7:e9:0d:
         14:c0:dd:08:d1:84:1e:b0:2b:6c:57:5f:84:cb:9a:ab:d7:d4:
         78:54:4c:fb:f7:fc:ac:2b:ff:82:82:d0:9e:e5:93:12:00:2e:
         ee:d5:3b:16:42:61:13:48:b2:9c:19:d8:16:f0:6a:d0:84:a2:
         83:a2:2b:50:a0:1e:41:e7:d5:47:19:6b:18:7c:49:ea:a6:93:
         d6:68:e6:2f:5b:24:39:de:da:d8:d6:2b:f5:b5:29:9c:07:42:
         3e:ce:21:44:e2:9c:1c:7c:c5:bf:42:49:b8:78:e3:57:d7:30:
         e0:34:9f:d3:ea:94:97:cd:92:c3:b3:70:7b:61:92:9c:c0:78:
         ad:bf:39:79:e2:3f:e0:8b:34:f5:ae:0d:c7:34:fe:b2:9e:3e:
         10:1d:8d:09:6a:03:07:39:9a:80:e7:3a:08:ea:2f:7a:d7:31:
         b0:c5:40:e0:bf:28:8b:a0:ae:f4:78:8a:40:b6:b8:70:00:3b:
         f6:37:3a:86:65:7f:65:0c:ed:66:12:56:4a:e1:2d:49:ad:90:
         03:89:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:56 2025 by rpki-client