Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/3139302e3131332e34302e302f32322d3234203d3e20323731373939.roa
File:                     3139302e3131332e34302e302f32322d3234203d3e20323731373939.roa (raw, json)
Hash identifier:          U15vycorSuLKOQ53bQs39iCTFZyzrui8JpPTACAWhKw=
Subject key identifier:   D4:26:23:06:FB:0C:80:C9:59:51:FF:B8:5F:DD:FF:7A:92:BD:08:DE
Certificate issuer:       /CN=EB14407E522E62A682CCD43856B1CDFBECA4FBF3
Certificate serial:       6EE7471CFCAF09ACF4C9D7D3DFAA31A5244AFE79
Authority key identifier: EB:14:40:7E:52:2E:62:A6:82:CC:D4:38:56:B1:CD:FB:EC:A4:FB:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/3139302e3131332e34302e302f32322d3234203d3e20323731373939.roa
Signing time:             Tue 04 Feb 2025 18:25:59 +0000
ROA not before:           Tue 04 Feb 2025 18:20:59 +0000
ROA not after:            Tue 03 Feb 2026 18:25:59 +0000
asID:                     271799
IP address blocks:        190.113.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e7:47:1c:fc:af:09:ac:f4:c9:d7:d3:df:aa:31:a5:24:4a:fe:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB14407E522E62A682CCD43856B1CDFBECA4FBF3
        Validity
            Not Before: Feb  4 18:20:59 2025 GMT
            Not After : Feb  3 18:25:59 2026 GMT
        Subject: CN=D4262306FB0C80C95951FFB85FDDFF7A92BD08DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:e3:96:46:b7:f3:3f:93:52:08:e7:8e:01:
                    7c:a9:4d:9d:eb:3d:78:2a:a6:8c:91:50:7e:22:e8:
                    4e:5f:1e:8d:de:72:36:87:84:59:ec:03:a1:19:44:
                    f3:ca:e7:60:66:a3:8a:5f:dc:48:95:c9:32:82:ca:
                    67:ad:51:79:a2:fb:c6:7a:00:77:86:8c:79:42:61:
                    eb:15:17:4f:4e:09:67:20:03:a7:6d:c6:7a:dc:a6:
                    68:39:65:ae:83:57:a4:1d:b4:a0:c1:13:af:15:9e:
                    db:19:33:8c:90:3a:52:12:cd:1f:60:76:46:6d:6c:
                    f2:3e:20:4e:5f:e8:c1:98:d3:31:f8:f1:81:43:72:
                    8d:31:f8:67:fd:38:56:d4:eb:2e:31:c9:69:c8:2f:
                    93:b7:2f:42:a0:da:9a:47:92:c5:9c:35:62:1a:21:
                    15:28:0e:d0:5b:64:aa:50:66:a2:c6:c9:78:71:c8:
                    ec:e4:d7:e2:dc:bb:26:06:e2:4c:05:40:66:93:80:
                    98:24:b6:3f:b3:d6:15:e1:5e:e0:42:eb:fb:b5:71:
                    57:e0:e3:3b:f5:90:1f:7b:4d:04:cc:e1:92:94:48:
                    5d:55:29:02:89:a2:70:65:ae:c1:65:60:76:b8:ea:
                    1d:b4:a3:ca:72:c0:e4:2e:a5:a3:62:ab:20:0f:4e:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:23:06:FB:0C:80:C9:59:51:FF:B8:5F:DD:FF:7A:92:BD:08:DE
            X509v3 Authority Key Identifier:
                keyid:EB:14:40:7E:52:2E:62:A6:82:CC:D4:38:56:B1:CD:FB:EC:A4:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/3139302e3131332e34302e302f32322d3234203d3e20323731373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:55:5a:fb:93:3d:47:61:e9:c5:95:c1:ab:da:97:c7:f2:77:
         6b:05:bc:85:e8:79:6a:7b:f5:1d:59:ca:73:1e:a6:e8:1d:32:
         84:2b:51:39:e2:40:03:2d:32:97:7d:03:35:92:f2:cf:c3:85:
         91:64:3a:12:ef:92:b6:f5:cc:8f:71:08:58:57:cf:5d:d5:0f:
         59:be:d8:64:5a:b9:cd:4e:ac:a2:16:38:4d:69:cc:29:c6:bc:
         5a:e2:d9:33:70:fe:37:6d:ae:8e:aa:96:e3:a1:a9:7c:e7:ce:
         ec:80:ad:73:c1:6d:9c:fe:d3:f4:d4:03:fb:b4:11:8f:09:e0:
         ea:16:d8:45:53:a3:85:8a:76:b2:16:2b:9d:08:09:f7:4e:a7:
         65:9e:ab:85:09:a5:e3:a9:7e:a1:d5:41:7f:9d:05:e3:33:15:
         32:5b:c6:2c:17:de:14:74:3b:53:7c:d6:df:bc:af:29:c5:ad:
         39:3b:59:be:89:a1:03:80:71:5f:75:fc:b8:96:9c:31:53:ba:
         6c:33:9f:2d:55:30:38:61:74:83:ae:b5:c0:e5:e7:fa:e3:e5:
         08:0d:4b:01:ac:af:09:55:65:a6:b3:fa:25:b5:46:85:b5:0a:
         4c:d6:5f:d1:34:fd:ee:f1:67:64:bf:08:d2:b5:c2:ba:96:3c:
         ea:76:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:51 2025 by rpki-client