Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e302e302f31372d3234203d3e203130323639.roa
File:                     3139302e3139372e302e302f31372d3234203d3e203130323639.roa (raw, json)
Hash identifier:          FzPEnGK9g8+nw0cfv3P85arm5MTjXfdRhooG0mWvUd8=
Subject key identifier:   63:13:9F:0A:35:A9:17:B3:B8:B9:45:80:B7:BD:D3:33:9E:BC:14:11
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       76B0839A804CB6BCD0A2D4EF24E75B38026CE9B7
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e302e302f31372d3234203d3e203130323639.roa
Signing time:             Thu 07 Aug 2025 19:35:09 +0000
ROA not before:           Thu 07 Aug 2025 19:30:09 +0000
ROA not after:            Thu 06 Aug 2026 19:35:09 +0000
asID:                     10269
IP address blocks:        190.197.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:83:9a:80:4c:b6:bc:d0:a2:d4:ef:24:e7:5b:38:02:6c:e9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Aug  7 19:30:09 2025 GMT
            Not After : Aug  6 19:35:09 2026 GMT
        Subject: CN=63139F0A35A917B3B8B94580B7BDD3339EBC1411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:3a:e3:76:31:2b:d7:da:82:41:f9:e5:ba:
                    67:0e:72:7d:25:64:74:a4:96:dc:5c:9f:27:c9:a7:
                    46:70:09:14:0c:56:57:e1:06:11:f5:f9:be:9f:c5:
                    e6:da:89:28:65:ed:92:91:33:39:3a:b9:f6:f5:39:
                    09:f6:36:a5:04:f5:f8:45:9e:96:fc:0e:48:f6:0d:
                    0b:22:bd:72:2f:bb:e2:b0:ad:d5:73:7f:c4:a1:67:
                    97:a3:19:d7:9c:af:e5:5d:cd:f3:1b:4c:c2:c6:c0:
                    d0:49:02:95:f2:e5:77:0a:6c:e1:93:36:c1:21:1a:
                    68:ee:be:88:34:b8:a6:cc:b9:d6:74:08:11:8f:a6:
                    2d:75:4e:8e:68:b9:b9:08:ce:ad:f1:fb:04:69:f7:
                    53:16:c0:d7:2a:f9:ab:07:8d:85:48:07:41:11:d6:
                    55:62:73:aa:bb:ea:44:34:e6:e5:e8:f4:fc:cd:fe:
                    29:ec:09:95:e8:5c:50:76:f1:50:eb:c7:92:f0:61:
                    6c:88:dc:cc:27:a5:43:9d:be:52:0d:99:83:45:b7:
                    a3:54:4f:28:ef:7f:a9:f4:21:cc:6c:1a:4c:77:ec:
                    73:fa:98:b5:94:05:ef:73:42:ae:e3:cd:24:0d:96:
                    c1:c9:ab:3f:42:19:69:a7:00:09:49:05:38:3d:6a:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:13:9F:0A:35:A9:17:B3:B8:B9:45:80:B7:BD:D3:33:9E:BC:14:11
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e302e302f31372d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         77:c7:59:17:b1:75:7c:60:e8:d9:46:7f:1e:a9:d5:7b:f5:73:
         0d:d6:64:d4:f1:2b:92:7e:87:62:b0:e3:f8:04:2c:81:8e:4b:
         0a:65:26:30:2a:b3:02:57:fe:57:fe:28:12:0d:49:88:f0:f4:
         70:b9:3a:2b:a6:20:88:86:56:d6:a0:15:e5:7b:73:36:8f:49:
         c1:4b:77:28:3b:97:9a:18:1a:c5:04:e0:04:ab:76:22:d3:e8:
         47:65:ca:e5:87:08:52:fa:70:01:3f:8f:67:15:5c:cb:42:b7:
         94:db:1e:b4:31:d4:33:ef:89:ef:d3:75:d6:fd:a5:45:50:c1:
         37:2e:2a:15:1b:0d:42:ae:ec:85:d2:0c:c5:e7:3c:8f:86:49:
         8e:98:1b:92:d6:26:f7:93:2d:a0:14:09:7b:23:29:fb:da:d6:
         e8:10:6e:fd:6c:02:1e:20:20:aa:83:c4:f8:35:a9:1e:50:87:
         30:9f:32:2f:ba:31:f0:93:9b:7d:b0:44:41:ba:44:e3:3c:cf:
         ab:7c:a3:47:3c:b0:36:9f:6b:75:47:9d:4b:d0:f7:1f:1f:44:
         ed:96:22:93:0b:24:ea:7c:f7:55:4a:84:e7:1d:f4:81:61:1f:
         cd:0f:ba:82:84:86:c7:ff:29:95:c8:f4:64:a7:e7:61:34:3b:
         bb:55:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:19 2025 by rpki-client