Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3139302e31332e3132342e302f32332d3233203d3e203237363630.roa
File:                     3139302e31332e3132342e302f32332d3233203d3e203237363630.roa (raw, json)
Hash identifier:          axlXq/wcGsPw5nZ7s06BFs57OJhFHvc5hFVPYB6j9IM=
Subject key identifier:   58:61:09:5C:FB:E4:8F:D6:07:88:5D:02:FE:CC:C6:4F:B5:6E:7B:2A
Certificate issuer:       /CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
Certificate serial:       30C32DAB77FB1F7B226B113380E179A454E7D085
Authority key identifier: 40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3139302e31332e3132342e302f32332d3233203d3e203237363630.roa
Signing time:             Tue 24 Jun 2025 16:23:31 +0000
ROA not before:           Tue 24 Jun 2025 16:18:31 +0000
ROA not after:            Tue 23 Jun 2026 16:23:31 +0000
asID:                     27660
IP address blocks:        190.13.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c3:2d:ab:77:fb:1f:7b:22:6b:11:33:80:e1:79:a4:54:e7:d0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
        Validity
            Not Before: Jun 24 16:18:31 2025 GMT
            Not After : Jun 23 16:23:31 2026 GMT
        Subject: CN=5861095CFBE48FD607885D02FECCC64FB56E7B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:0c:d6:29:16:b0:10:02:03:77:eb:23:2e:
                    af:6b:85:d5:90:b3:80:e1:94:e5:9e:55:88:31:88:
                    d7:d7:d4:58:41:bf:b7:87:fa:28:3b:f1:bd:7a:cb:
                    f1:a7:67:fb:ee:86:ec:af:a6:82:e5:b1:ba:b5:61:
                    98:e1:9f:f8:f8:52:48:b1:5e:c4:35:c5:35:b5:bb:
                    e1:0d:e7:23:32:ee:bf:5c:47:fa:d0:f9:ef:69:d0:
                    9e:1a:ba:54:5a:56:98:6a:07:61:c4:5c:ce:69:ae:
                    de:92:a6:b7:ad:a4:3e:5b:35:00:e6:78:8a:2a:73:
                    5b:74:35:1a:9d:7d:d6:1b:4d:63:a5:0d:b0:01:d3:
                    ac:7a:88:93:65:17:4d:64:5c:78:3e:f5:0f:46:56:
                    6e:b0:33:69:a7:eb:09:a9:76:c1:e0:49:17:e9:44:
                    28:cb:25:a5:66:f3:9b:4e:46:09:ba:bf:ee:cf:26:
                    22:11:e4:d8:fe:c7:37:eb:3d:57:cd:93:d4:0e:5b:
                    76:8a:65:c8:94:1c:cd:bd:5d:09:04:ea:51:a8:25:
                    92:f4:27:28:21:3d:90:88:6d:33:5d:da:29:7a:da:
                    e9:d4:7d:73:79:35:ae:78:a8:fe:25:33:cc:31:16:
                    55:6f:52:45:4f:b1:04:98:82:a0:28:8d:32:67:99:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:09:5C:FB:E4:8F:D6:07:88:5D:02:FE:CC:C6:4F:B5:6E:7B:2A
            X509v3 Authority Key Identifier:
                keyid:40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3139302e31332e3132342e302f32332d3233203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:e9:f5:56:13:b0:29:f0:64:02:bf:0d:3b:c7:4a:37:6d:
         cd:ec:c9:fe:bf:16:05:ee:61:d8:c7:25:f8:ab:5a:75:44:4e:
         aa:db:27:bd:1e:56:4f:e9:ae:01:55:c9:76:3a:10:80:67:d4:
         18:59:08:07:c0:cd:30:b9:fb:7c:e8:41:15:46:f9:9a:38:db:
         dd:6d:ec:cd:34:90:ac:fb:d6:b5:ee:67:87:dc:cd:d9:65:e2:
         56:d1:9f:cd:1f:43:2b:66:7d:ce:96:e6:c4:77:00:4a:3f:9f:
         89:d6:83:ad:02:96:1f:44:7b:a9:45:0d:2e:91:f3:ee:f1:10:
         8a:86:b2:7e:08:78:59:17:6c:c2:11:27:84:a9:c6:76:a5:fb:
         f1:0f:ee:ab:00:c8:04:f9:c0:31:50:ca:af:24:d8:8d:cf:a1:
         d4:da:ce:0b:a1:a8:d0:1d:96:10:07:f2:6a:31:b4:72:bb:57:
         e8:a1:b8:bd:09:d8:9b:af:e7:fb:b4:a9:57:3a:7d:aa:58:0a:
         3c:38:30:2c:71:5b:c2:c6:b1:f1:10:1d:b5:36:5c:3c:ec:0d:
         7a:0a:7f:17:5f:4c:e0:be:c6:54:95:a3:1c:bc:ff:ad:8f:ae:
         ff:04:c1:93:2a:3a:7e:ac:dd:91:45:01:73:6f:09:73:f2:c9:
         de:ed:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:55:20 2025 by rpki-client