Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3139302e352e3231362e302f32312d3234203d3e203532343236.roa
File:                     3139302e352e3231362e302f32312d3234203d3e203532343236.roa (raw, json)
Hash identifier:          P/wHi22Hs+w6ZB74VPACx8UrauGCStBBH2a7j0Yp5NU=
Subject key identifier:   60:C1:4F:95:FF:0D:9D:1A:C5:53:C9:B8:DC:D5:A8:15:C9:CF:A4:85
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       283B28EC5EB2E32B9F5404B2F36C1BD931182E44
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3139302e352e3231362e302f32312d3234203d3e203532343236.roa
Signing time:             Thu 26 Jun 2025 19:23:48 +0000
ROA not before:           Thu 26 Jun 2025 19:18:48 +0000
ROA not after:            Thu 25 Jun 2026 19:23:48 +0000
asID:                     52426
IP address blocks:        190.5.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3b:28:ec:5e:b2:e3:2b:9f:54:04:b2:f3:6c:1b:d9:31:18:2e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: Jun 26 19:18:48 2025 GMT
            Not After : Jun 25 19:23:48 2026 GMT
        Subject: CN=60C14F95FF0D9D1AC553C9B8DCD5A815C9CFA485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:e0:64:e7:9f:35:20:4b:e8:02:1b:e5:ae:
                    a5:4d:75:c8:7d:8e:ad:8e:1d:6f:70:e3:63:49:ef:
                    84:fc:75:f1:60:5d:fd:f9:48:81:ea:93:c4:33:3f:
                    c2:85:6d:3e:a6:eb:5a:0f:e7:0e:83:77:15:15:1d:
                    be:20:a6:c0:1a:aa:54:74:ba:48:9e:1f:10:24:fa:
                    46:29:6a:f8:ab:39:9b:e9:94:56:da:c3:63:90:b3:
                    75:df:ee:0c:10:ea:a5:fa:fd:4e:69:fc:4d:8c:ec:
                    98:ca:e7:54:93:8c:96:24:6d:ff:db:fb:9b:9a:7c:
                    ab:7e:01:5d:3d:22:f3:04:95:d2:7e:9b:6e:f0:cc:
                    46:e7:53:ee:30:f3:f9:c6:d3:49:ca:a1:4d:0c:cb:
                    4f:91:4c:e9:23:5b:c9:33:13:83:78:cc:4d:e8:dc:
                    6c:e8:2a:53:d3:1d:c8:1d:29:5a:71:96:3e:81:1a:
                    1c:0b:17:16:f0:b0:5e:24:70:94:da:55:19:d1:3f:
                    82:1c:f2:ee:7a:09:d7:77:e4:55:f2:9a:f3:a4:77:
                    8e:a5:3f:6e:63:1d:7b:9e:e7:91:24:12:90:1d:2e:
                    36:2c:36:d8:50:b3:eb:bb:5d:98:ad:96:23:10:38:
                    43:b0:c0:f8:41:70:70:ad:5c:63:ec:fb:27:c3:2a:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:4F:95:FF:0D:9D:1A:C5:53:C9:B8:DC:D5:A8:15:C9:CF:A4:85
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3139302e352e3231362e302f32312d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d2:4f:a4:9a:41:ca:60:4f:0b:1e:f3:15:01:75:60:89:36:d8:
         3d:eb:15:b2:38:e8:81:24:38:ff:52:e6:0a:c6:4d:20:f1:06:
         e8:20:bb:6f:a1:2f:d3:86:80:ab:ac:e4:ed:e4:76:75:ed:8a:
         27:1e:df:49:44:f0:91:97:7a:2e:2e:94:df:7d:4d:4d:1e:a7:
         3c:ff:fb:35:6d:41:58:a9:9e:7f:cf:42:5e:29:b9:93:ae:63:
         cd:5f:35:ed:85:22:68:b3:ee:81:42:a3:37:58:c8:63:01:5a:
         88:d5:a9:38:d7:36:85:11:eb:44:48:22:af:b0:04:34:fa:6c:
         cb:a3:17:fe:3c:22:70:69:b5:44:e3:30:0c:e5:ef:49:7c:db:
         be:71:0e:65:2e:dc:4d:50:e0:2d:cb:ef:11:93:09:9b:b8:91:
         ef:0c:d5:2a:9a:09:48:0b:b9:aa:90:cd:fc:c2:77:0f:f7:c0:
         bc:9a:3a:4e:12:d2:2e:be:d5:ec:33:e0:fb:18:02:5f:18:91:
         86:c8:80:7f:62:42:8c:fb:99:22:d3:be:8d:24:01:9b:1c:f6:
         7e:6d:6e:9a:4c:01:47:04:e4:d8:e5:4b:07:9e:03:fd:6e:30:
         bc:96:b8:96:b8:ba:18:94:27:4f:10:f1:75:f4:9d:01:b5:6e:
         5c:1c:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:39:27 2025 by rpki-client