Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa
File:                     3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          XGnKZaRXFtaXsi7E57mqp/WKKdXyQlioH3Kefj2qEVw=
Subject key identifier:   04:39:80:9A:CB:35:DF:E9:67:F5:8B:54:FD:DC:19:B2:FF:2E:44:5B
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       38347C685B9C06CC5DE37D0C05C2804A07E7DDCE
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:56 +0000
ROA not before:           Tue 04 Feb 2025 18:20:56 +0000
ROA not after:            Tue 03 Feb 2026 18:25:56 +0000
asID:                     14754
IP address blocks:        190.149.134.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:7c:68:5b:9c:06:cc:5d:e3:7d:0c:05:c2:80:4a:07:e7:dd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:56 2025 GMT
            Not After : Feb  3 18:25:56 2026 GMT
        Subject: CN=0439809ACB35DFE967F58B54FDDC19B2FF2E445B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e9:d4:30:32:ad:6d:6b:77:93:95:f5:cc:8d:
                    10:40:7a:66:af:a1:fb:98:15:35:04:a5:3f:2f:c7:
                    db:74:55:29:18:36:3f:9c:40:d6:ee:74:07:54:3d:
                    12:3c:4d:42:dc:bf:65:a2:92:de:13:0a:a8:2b:32:
                    7f:73:ff:f4:6b:81:ff:52:6a:2b:27:1e:74:8b:f8:
                    f4:f5:b2:35:b4:f1:95:8b:81:8d:22:7c:5d:8c:39:
                    74:7d:ad:7d:b5:3e:6d:95:91:4c:c1:a8:f8:3f:3e:
                    9c:19:f6:06:55:bb:f4:93:2b:48:da:d5:ff:a2:45:
                    a9:90:dd:13:49:9c:bc:3d:32:0e:d8:00:bf:09:33:
                    e1:14:58:90:d3:b8:07:bf:1b:97:e0:7c:57:81:74:
                    72:ca:ea:71:7a:44:25:31:7f:ee:ae:fd:fb:48:f5:
                    d2:29:0d:b0:a4:9c:1d:8b:b0:b6:50:46:c0:1e:0c:
                    35:ef:0d:3c:c5:72:a3:4a:04:81:99:d8:09:cf:8e:
                    02:38:f4:82:33:8c:a2:23:01:a8:52:d0:d3:d7:8f:
                    2b:bd:cc:ff:b5:f6:ef:9f:49:bc:e2:00:93:9e:0f:
                    8a:7c:3d:16:53:4f:80:b7:cb:44:5b:ec:38:34:f4:
                    d5:1e:b0:f4:d0:14:b8:32:aa:87:eb:da:50:da:b0:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:80:9A:CB:35:DF:E9:67:F5:8B:54:FD:DC:19:B2:FF:2E:44:5B
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:91:de:08:4f:cd:b3:0f:31:8c:2d:9d:dd:a2:68:71:2f:6e:
         72:34:63:c0:aa:e2:20:87:e0:02:dc:3f:e9:2d:fa:89:be:2a:
         11:35:fa:af:52:2e:03:32:14:5e:23:19:7d:5a:ff:49:ec:37:
         96:7d:d5:9c:02:42:a7:aa:5f:10:c0:59:be:1d:e6:dd:ed:2a:
         93:ae:c1:d5:42:e3:1b:9b:7b:71:ef:cb:06:ee:41:5d:1e:f1:
         b7:16:a2:f8:07:7d:85:dd:cc:c9:56:56:a8:a5:39:9b:dd:cc:
         cf:18:04:a8:d4:f8:77:00:e7:10:b9:9b:2f:8e:f2:38:ef:92:
         8f:61:f4:c5:7a:1e:cd:4b:1e:5c:c5:44:73:53:d1:47:51:51:
         e1:65:d4:49:98:31:17:f6:d5:56:97:eb:f5:9e:84:75:73:cf:
         90:9b:8e:0d:c3:93:84:82:4a:76:6d:50:eb:9f:a8:bb:63:fa:
         32:2b:8d:65:fa:79:a5:e7:b1:a1:3c:61:54:45:48:aa:ed:79:
         b4:88:ab:fe:4c:94:f5:6c:97:ba:33:3e:6d:7c:ec:34:d8:49:
         e3:43:ae:b5:4e:ec:e9:6f:31:ea:b4:dc:38:cd:d9:b6:09:c1:
         b6:fd:b3:21:98:3d:98:86:a6:14:c6:4b:e7:d9:80:8c:14:f9:
         ce:4b:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:03 2025 by rpki-client