Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32332d3234203d3e203532323633.roa
File:                     3139302e36312e3130382e302f32332d3234203d3e203532323633.roa (raw, json)
Hash identifier:          QhqozK4BYSqx0dyAkDaDE0dK0aYp4epI2ExzQnng4HU=
Subject key identifier:   3F:17:38:E9:C1:F3:D6:14:E6:A2:F5:2C:29:8B:49:C6:50:4E:AE:B8
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4DF27BEE5EF5618CD6CAEEDA08EA0D66923E994D
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32332d3234203d3e203532323633.roa
Signing time:             Wed 07 May 2025 17:17:57 +0000
ROA not before:           Wed 07 May 2025 17:12:57 +0000
ROA not after:            Wed 06 May 2026 17:17:57 +0000
asID:                     52263
IP address blocks:        190.61.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:7b:ee:5e:f5:61:8c:d6:ca:ee:da:08:ea:0d:66:92:3e:99:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: May  7 17:12:57 2025 GMT
            Not After : May  6 17:17:57 2026 GMT
        Subject: CN=3F1738E9C1F3D614E6A2F52C298B49C6504EAEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:59:f6:71:4a:3c:88:93:6b:71:b7:fa:2e:
                    f9:53:ea:ac:c6:be:88:b9:7e:5c:03:f2:26:c4:61:
                    5d:40:9b:58:37:83:a5:e2:65:e0:8d:bc:d7:ba:4f:
                    5d:fe:7e:b0:f4:d3:03:54:4b:03:e6:14:ed:7d:99:
                    cc:3a:9f:64:4d:f4:27:fc:04:fc:c0:23:6e:7f:17:
                    1b:2d:e6:69:ad:06:3e:46:c8:cb:23:21:76:bc:bc:
                    2d:59:ae:10:fb:58:04:13:b2:40:5e:a1:66:fa:f6:
                    5d:d7:29:b6:85:50:d4:2a:13:fc:c9:2d:9c:11:9e:
                    f2:15:90:45:88:44:b6:f9:f3:24:a8:42:b9:f4:27:
                    5d:95:5b:bc:56:17:27:66:f5:ce:e6:40:0b:8c:75:
                    cc:9a:5e:c4:ab:49:61:36:2e:d6:46:d7:f1:c2:f2:
                    19:65:7a:cb:c5:10:ec:77:59:c4:d8:d0:56:0a:bd:
                    c1:d6:a1:45:82:7d:8b:4a:18:b3:18:f7:24:89:4a:
                    c5:8a:0d:51:43:bc:32:58:37:3c:39:6d:96:be:46:
                    fc:58:97:ec:60:66:6b:65:38:2d:58:75:3c:e9:4b:
                    cf:76:08:3a:73:16:10:b9:f1:bb:1d:3a:84:0b:3d:
                    4d:5c:c8:43:22:de:66:19:8f:68:16:6d:77:b3:33:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:38:E9:C1:F3:D6:14:E6:A2:F5:2C:29:8B:49:C6:50:4E:AE:B8
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32332d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:73:9c:84:1b:80:69:03:c6:d4:45:f1:c9:6d:8e:3e:4c:a5:
         14:a4:36:3d:58:90:72:51:8a:56:bb:8e:6e:4c:1c:9b:c2:86:
         dd:0f:e4:a3:0e:d6:bb:b1:1e:39:c1:b0:ba:70:87:09:34:e3:
         af:b0:96:9a:df:a4:a8:c5:3c:74:90:71:89:b3:f7:67:0b:91:
         ce:5f:de:96:ff:ab:58:67:f7:88:41:c9:ec:4a:0d:38:a6:54:
         7f:ca:b4:24:b2:b7:77:e3:3a:c4:e1:9b:a4:47:9a:43:e2:70:
         f0:84:81:5a:31:55:c3:d5:26:c5:16:24:82:22:3d:a6:7a:5a:
         9d:e0:8b:fa:28:c7:21:36:d4:69:2e:a1:03:8b:4b:64:ce:0c:
         23:58:56:84:ce:03:5c:cf:fe:04:0d:3a:62:4f:ec:8c:e7:32:
         83:7a:bc:de:bc:f7:7d:f6:c2:08:8f:80:06:de:66:55:a4:0f:
         81:c2:e4:dd:31:de:6d:b2:9c:75:31:4a:05:b0:c8:d9:cc:0c:
         5e:78:15:6d:3f:7a:0f:1b:ff:88:eb:15:fc:12:bc:04:c8:5a:
         0d:b6:a8:9d:7f:1a:2f:ec:b5:ba:09:0a:74:57:12:93:14:29:
         72:8c:e9:40:9e:77:5f:b2:75:3c:bb:75:aa:50:f0:e2:5e:b2:
         8b:a3:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:18:09 2025 by rpki-client