Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa
File:                     3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa (raw, json)
Hash identifier:          rf7PrshrvQZUAKYWc8N9VUR+5/FGIoS2e0XN88Avtd4=
Subject key identifier:   63:F1:F2:6A:DF:E4:B7:43:4E:7B:9E:F2:66:CD:73:F0:C9:63:52:B0
Certificate issuer:       /CN=BF11CB48CF916394332035E2F40492905EE5F226
Certificate serial:       16E39FA498839E2FA148FE1A50B850A5E1740C9F
Authority key identifier: BF:11:CB:48:CF:91:63:94:33:20:35:E2:F4:04:92:90:5E:E5:F2:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF11CB48CF916394332035E2F40492905EE5F226.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa
Signing time:             Tue 17 Jun 2025 15:22:33 +0000
ROA not before:           Tue 17 Jun 2025 15:17:33 +0000
ROA not after:            Tue 16 Jun 2026 15:22:33 +0000
asID:                     52292
IP address blocks:        190.211.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/BF11CB48CF916394332035E2F40492905EE5F226.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/BF11CB48CF916394332035E2F40492905EE5F226.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF11CB48CF916394332035E2F40492905EE5F226.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 12:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:9f:a4:98:83:9e:2f:a1:48:fe:1a:50:b8:50:a5:e1:74:0c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF11CB48CF916394332035E2F40492905EE5F226
        Validity
            Not Before: Jun 17 15:17:33 2025 GMT
            Not After : Jun 16 15:22:33 2026 GMT
        Subject: CN=63F1F26ADFE4B7434E7B9EF266CD73F0C96352B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:44:be:58:94:c1:ed:c3:47:d3:1b:1f:ad:
                    01:65:22:ac:87:28:eb:91:4d:6f:0b:f8:33:1e:7c:
                    b9:d7:82:a9:42:78:fd:0c:75:04:07:11:62:1c:df:
                    e2:fe:f9:2b:86:ab:d8:72:53:0a:67:82:a4:f6:c2:
                    88:36:a9:87:82:42:6c:a8:47:5d:f7:d9:6d:69:1c:
                    c4:e2:c0:1f:d8:ac:b6:5e:c4:63:79:e6:49:7f:f8:
                    a3:c7:c8:61:bd:d8:3a:fe:67:01:09:91:85:7e:2d:
                    4a:98:ba:e5:57:9d:a9:18:75:38:3e:05:f9:38:77:
                    f7:2c:ab:e3:f5:12:4d:1e:b9:17:33:0c:42:21:5d:
                    bb:6d:53:41:b0:05:6f:3b:a1:03:bd:8b:57:ba:c5:
                    6c:0d:4c:12:58:01:82:e1:8b:e3:63:5d:fe:81:83:
                    b7:c3:17:61:bd:ff:20:b6:40:ac:3a:ea:1d:9b:19:
                    8d:4a:9b:90:54:72:40:a7:83:e3:39:91:88:1e:c4:
                    83:8a:1a:cf:2a:5a:a1:82:50:22:e7:86:eb:0a:08:
                    56:d8:ca:de:43:57:1f:32:04:b0:08:14:2b:ba:c2:
                    2d:91:77:55:be:c4:95:40:6d:c8:b0:a2:31:e0:24:
                    b9:4a:4a:c6:bf:7f:b4:58:4c:a7:90:c6:ae:5b:60:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:F2:6A:DF:E4:B7:43:4E:7B:9E:F2:66:CD:73:F0:C9:63:52:B0
            X509v3 Authority Key Identifier:
                keyid:BF:11:CB:48:CF:91:63:94:33:20:35:E2:F4:04:92:90:5E:E5:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/BF11CB48CF916394332035E2F40492905EE5F226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF11CB48CF916394332035E2F40492905EE5F226.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:94:e6:6b:c5:36:7f:10:ea:e1:6b:c1:2a:e2:3e:32:e3:
         52:e3:74:66:04:57:b9:e1:d9:d1:8b:cd:9b:9f:06:7c:e1:92:
         18:34:8d:c2:85:d3:67:c6:2c:df:43:96:c1:b7:d6:e5:33:34:
         20:7b:de:4b:6d:7a:52:7b:1f:3d:21:cc:85:51:6f:af:66:e6:
         53:bb:96:c3:4a:17:bf:9e:a3:cf:29:e2:d7:ac:df:6e:f5:e0:
         10:0f:74:e1:e9:28:c1:4b:61:2d:d5:1f:b0:7b:90:e5:e2:26:
         cd:a7:8f:e6:b3:a4:38:93:c7:66:f6:f6:f9:38:a7:e2:8b:7b:
         59:46:93:1a:a8:17:7e:9e:e7:9c:6e:d5:4c:ce:98:30:59:bf:
         ca:f8:84:9c:3c:af:a8:22:34:30:2d:b5:c5:ba:33:91:07:98:
         ca:e4:9d:0e:d1:97:47:7b:b6:65:2d:7a:a5:88:31:c8:c9:a7:
         ce:c1:37:7f:d7:27:c9:8d:ff:29:24:4b:0d:91:39:65:06:28:
         78:67:14:7c:dc:ef:32:8e:42:8d:b5:45:86:08:34:de:ab:90:
         3c:e5:5e:18:3e:61:70:3b:7e:17:81:ba:8b:00:73:58:7b:87:
         e9:f7:bc:e2:75:19:ba:b2:f7:1c:55:cb:45:4f:49:31:64:b3:
         7c:e4:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 09:05:11 2025 by rpki-client