Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32332d3234203d3e203532323730.roa
File:                     3139302e36312e3230342e302f32332d3234203d3e203532323730.roa (raw, json)
Hash identifier:          B23/l4y4+ofGyKj3BMQP7lmulJMYpMHUI7eZ6BMfWkY=
Subject key identifier:   48:EC:EB:10:E9:29:D5:C2:07:AE:57:45:BD:17:49:1D:A4:DF:FB:92
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       401588A6744B3E559112810CA0D2FFEC3761D6D7
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32332d3234203d3e203532323730.roa
Signing time:             Wed 07 May 2025 17:17:56 +0000
ROA not before:           Wed 07 May 2025 17:12:56 +0000
ROA not after:            Wed 06 May 2026 17:17:56 +0000
asID:                     52270
IP address blocks:        190.61.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:15:88:a6:74:4b:3e:55:91:12:81:0c:a0:d2:ff:ec:37:61:d6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: May  7 17:12:56 2025 GMT
            Not After : May  6 17:17:56 2026 GMT
        Subject: CN=48ECEB10E929D5C207AE5745BD17491DA4DFFB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:af:22:e3:a4:84:75:27:d9:7b:b8:ff:be:
                    c2:72:5b:31:ec:b1:d6:20:12:a8:47:56:39:79:2a:
                    47:ba:5d:a5:e8:34:74:30:8e:33:a8:88:00:41:2e:
                    2d:c5:bc:67:59:23:cd:2b:64:da:45:14:13:a6:77:
                    7a:55:e9:c6:63:01:5a:26:fd:19:b9:ba:3b:d2:48:
                    72:ea:4b:0e:47:ff:de:e0:d6:40:76:ab:33:61:66:
                    77:f8:d6:0a:50:a0:99:ae:c7:31:ae:3d:cc:d2:11:
                    52:cf:8a:30:7c:1c:23:ed:55:53:64:e9:fb:45:73:
                    ce:47:ec:88:ce:e0:41:19:fb:0b:6d:0c:0c:c3:75:
                    a0:be:e8:d1:80:1c:74:c0:cf:60:b2:3a:fb:63:5c:
                    94:9d:c2:6e:38:da:15:5d:f7:8a:35:68:a1:7d:9e:
                    4c:b9:32:40:31:36:35:9f:a3:1d:9c:ec:b0:b7:73:
                    31:94:21:4e:5f:58:17:f1:0f:d1:de:55:59:61:ce:
                    8b:04:c2:24:11:1b:d4:13:f2:a9:24:90:97:f2:03:
                    45:6d:6b:2e:3b:1b:b3:e2:ba:f1:6d:16:54:76:7b:
                    9f:3e:58:72:43:12:1f:57:75:01:2e:d2:d4:ec:72:
                    8a:a4:09:95:d8:25:98:62:b5:12:d9:11:33:37:20:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:EB:10:E9:29:D5:C2:07:AE:57:45:BD:17:49:1D:A4:DF:FB:92
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32332d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:f5:b8:8f:42:4e:c8:58:0f:24:87:24:2d:88:ae:08:5a:55:
         7c:e5:19:cf:0e:d8:55:20:45:21:38:8c:e3:9e:4c:84:7c:84:
         c1:a5:e4:01:e5:98:a1:80:14:d2:d9:32:52:7c:22:98:66:4f:
         3b:9e:ba:1a:39:c3:6d:11:20:19:68:ba:1a:b8:b7:d1:10:ec:
         22:a1:db:0d:92:45:8a:67:b7:c6:1d:82:c5:14:85:c4:dc:a9:
         2d:64:81:dd:5b:5c:38:09:ce:f4:be:80:89:f4:71:87:6e:40:
         ed:1c:b5:68:83:59:6f:09:96:3c:e3:5d:c3:6a:27:32:64:a9:
         d4:c6:30:4b:00:e5:c8:25:a6:f2:7d:68:7e:dc:a0:c9:ff:4d:
         ba:7b:d0:d1:21:da:78:83:c2:d4:dd:ed:33:3d:6f:4e:f3:12:
         30:fa:9d:d5:56:ad:8d:77:2c:dc:69:87:fe:e6:57:e1:af:49:
         31:aa:c6:77:ab:c7:65:05:d0:46:06:e0:1b:f9:f3:71:6d:0a:
         39:cf:fd:a9:14:ac:db:a3:02:22:79:8c:df:5e:c0:11:56:d8:
         13:ba:d9:28:59:67:b0:85:6e:95:61:32:cf:1e:31:e9:27:af:
         99:37:a7:05:96:bb:72:7a:2f:f1:04:26:bb:70:39:c1:62:f1:
         b1:43:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:17:42 2025 by rpki-client