Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa
File:                     3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa (raw, json)
Hash identifier:          GvqpfKovM+M+RO/6ljsinbgZ4c85lmwz2n46re3Fehs=
Subject key identifier:   4B:33:B2:68:19:98:38:1E:91:22:BB:5A:35:26:A9:CE:87:7F:E8:E6
Certificate issuer:       /CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
Certificate serial:       1F4611CCCBFB500D94219630BBB37AA3F220B819
Authority key identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa
Signing time:             Wed 25 Jun 2025 15:23:34 +0000
ROA not before:           Wed 25 Jun 2025 15:18:34 +0000
ROA not after:            Wed 24 Jun 2026 15:23:34 +0000
asID:                     52372
IP address blocks:        190.110.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 02:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:46:11:cc:cb:fb:50:0d:94:21:96:30:bb:b3:7a:a3:f2:20:b8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
        Validity
            Not Before: Jun 25 15:18:34 2025 GMT
            Not After : Jun 24 15:23:34 2026 GMT
        Subject: CN=4B33B2681998381E9122BB5A3526A9CE877FE8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:27:8a:d4:f8:ee:29:a3:b5:5d:45:30:43:
                    ba:fc:22:d4:34:94:83:30:d0:fa:f8:a6:e2:5f:bc:
                    1e:14:25:a5:08:b8:9c:1d:79:7d:09:1a:55:38:49:
                    f2:ff:18:9c:31:58:cd:18:e7:79:ee:40:cd:1e:13:
                    19:23:99:8a:ec:be:26:e1:14:31:32:cc:cf:0e:3d:
                    85:89:1f:e7:b6:81:ab:55:07:d3:79:3d:d0:19:09:
                    02:61:8b:d6:46:93:93:44:7f:92:b1:7a:e1:6a:c1:
                    74:05:53:f3:9a:e5:ec:c1:c5:36:27:2a:f0:b1:1e:
                    5a:12:d4:a0:80:b4:3e:a1:d1:40:88:9a:56:ee:b0:
                    91:44:2a:4c:0f:93:f7:e7:bf:2e:d1:a3:bf:45:30:
                    00:b7:70:bb:0a:39:03:71:34:c5:c2:e4:6f:9e:ae:
                    1e:49:b3:cd:57:1f:1c:6a:a2:a8:36:9a:6d:3f:f5:
                    05:22:3b:b0:1c:e1:97:31:dd:e2:c2:e8:86:ad:ad:
                    0d:d9:83:b7:6c:05:57:78:b0:2e:52:09:9c:1e:84:
                    a0:20:e6:73:f9:51:ac:5b:63:b0:ab:19:62:b6:d4:
                    2b:24:84:33:64:1c:27:c8:a0:16:04:43:44:4a:8b:
                    f7:e5:e0:65:d4:3a:55:bb:1b:b4:b9:ad:0d:fb:a0:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:B2:68:19:98:38:1E:91:22:BB:5A:35:26:A9:CE:87:7F:E8:E6
            X509v3 Authority Key Identifier:
                keyid:66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3139302e3131302e3138342e302f32312d3234203d3e203532333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:b3:0d:96:3e:ad:54:55:76:33:5a:5f:d5:de:d5:cf:e7:
         d5:ef:9d:bd:ea:c0:24:de:cd:74:48:32:5b:da:bc:9f:36:6d:
         ad:bb:70:32:54:4e:95:bc:2b:f4:e9:39:5f:9b:f9:cb:a0:6b:
         8c:f9:ec:ed:51:55:e1:93:11:7f:d1:54:ca:df:23:26:23:e6:
         22:e3:de:05:34:80:19:cf:7c:ca:d1:15:13:ba:13:d4:8d:1c:
         7d:43:14:3d:93:89:de:68:10:5e:84:68:e0:0e:ef:89:60:d5:
         45:d8:32:a1:b9:89:68:88:32:e5:6a:84:3e:6a:4e:bd:42:b5:
         72:b9:06:5d:6a:ac:10:cc:64:cf:71:13:3a:7b:59:29:11:f9:
         91:53:fb:87:f6:38:23:8e:ea:bf:11:58:94:fd:21:b4:31:ba:
         30:50:7d:59:e8:ef:3a:ba:46:af:0b:cb:41:55:96:72:9f:52:
         68:d6:10:be:be:03:f0:2b:ba:5d:f6:2a:83:7b:d9:a8:ae:b6:
         7e:89:ae:13:f0:ae:d1:6c:f4:36:70:94:78:24:7f:20:ab:ab:
         71:5f:34:15:21:89:e1:9c:31:4c:53:02:ea:38:50:35:bf:9b:
         89:b1:14:fc:a0:06:31:d9:5b:e2:42:08:f7:c2:e0:e1:8c:3d:
         a3:76:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:35:03 2025 by rpki-client