Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3135322e302f32342d3332203d3e203134373534.roa
File:                     3139302e3134392e3135322e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          YCMIUXcM5XtVTGwRwk3wfcqRZYN24ZNVqw1Dnu6dzYA=
Subject key identifier:   5A:75:16:09:68:2C:BE:C6:76:31:CB:97:43:81:AC:A5:B5:75:6A:A9
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       142A64FB8E8DC030AD1142D7908E74852F8E098B
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3135322e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:57 +0000
ROA not before:           Tue 04 Feb 2025 18:20:57 +0000
ROA not after:            Tue 03 Feb 2026 18:25:57 +0000
asID:                     14754
IP address blocks:        190.149.152.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2a:64:fb:8e:8d:c0:30:ad:11:42:d7:90:8e:74:85:2f:8e:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:57 2025 GMT
            Not After : Feb  3 18:25:57 2026 GMT
        Subject: CN=5A751609682CBEC67631CB974381ACA5B5756AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:f0:44:57:bc:dd:c8:11:3c:ff:ca:83:81:
                    11:6e:2a:78:19:79:04:e9:d1:3d:12:8f:70:c7:62:
                    37:7f:98:47:08:51:5a:d2:5f:35:c8:f5:31:58:a6:
                    10:01:ce:c0:2f:90:63:e4:3f:22:2a:42:82:ca:5e:
                    c6:1c:08:63:46:6a:97:05:74:57:d9:3a:b3:21:60:
                    89:90:a1:32:3f:22:79:64:99:21:29:e9:5a:24:6a:
                    f8:86:7d:36:3c:2a:3d:38:73:70:1a:79:23:2e:6c:
                    bf:9c:ed:da:71:a7:44:cb:bc:b7:49:0c:1f:b0:f5:
                    76:86:7a:60:84:c3:4e:59:a7:0a:89:09:c6:5e:39:
                    e1:2c:73:d5:27:f0:ca:db:7b:db:2f:cc:69:f6:4d:
                    d4:f2:b3:78:f2:9e:f3:50:c7:4b:21:73:15:bf:6e:
                    b5:e4:33:c1:8b:91:ba:ea:ff:cd:40:55:ed:5b:af:
                    e1:dc:62:73:70:d6:61:71:2f:5e:f9:68:ec:16:1b:
                    53:aa:42:04:d9:c9:99:29:50:0e:0c:9e:00:e3:75:
                    43:eb:5c:4e:6d:b2:56:1d:61:5b:99:46:09:0a:a2:
                    1f:08:e5:39:1b:f7:d8:49:64:ee:f3:57:b1:81:b5:
                    c1:b0:dd:f7:b4:f2:ed:78:1d:bc:d8:94:39:37:e4:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:16:09:68:2C:BE:C6:76:31:CB:97:43:81:AC:A5:B5:75:6A:A9
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3135322e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:47:92:30:63:97:15:d8:c0:3c:da:df:ca:27:1f:8c:5a:83:
         81:30:5d:64:e7:f7:1f:78:7b:dc:5e:a1:c4:8c:e6:91:a7:db:
         5c:60:d6:fb:54:cd:17:bc:82:65:c8:6e:3d:21:ab:f5:cc:7c:
         77:05:3e:57:90:a4:ec:8c:22:8e:89:c5:f6:73:af:a1:bb:8b:
         bb:31:5d:fd:86:57:45:60:b4:53:64:37:9c:61:dd:8b:0c:d1:
         d2:e9:18:11:8f:a2:3e:b2:cf:a8:cd:c4:06:42:b1:ea:bf:db:
         a1:cf:4d:9e:39:09:58:06:de:a9:46:1d:6a:3b:18:b5:f3:2b:
         51:ce:17:3b:da:a3:23:0c:67:59:41:0f:97:f4:1f:28:33:2e:
         aa:7f:5e:84:5d:bc:b4:79:f6:ed:16:c4:15:85:9d:0b:56:2d:
         e1:4a:eb:1c:df:1d:dd:79:33:c7:6d:cb:c3:07:83:1c:0a:8d:
         1e:2e:71:ba:2e:79:0c:e8:49:6d:97:d1:c0:6e:c1:e3:a5:79:
         48:3e:6d:0b:85:5b:c2:b8:b8:2d:66:bb:84:26:85:71:b1:85:
         e4:74:8f:95:33:11:6b:5b:29:46:7b:13:57:b8:57:b3:13:90:
         0c:77:94:88:f8:6d:9e:2c:c7:ea:35:5d:ef:7c:14:39:b6:e1:
         3e:64:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:26:55 2025 by rpki-client