Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/3139302e3132342e34382e302f32332d3234203d3e20323730303634.roa
File:                     3139302e3132342e34382e302f32332d3234203d3e20323730303634.roa (raw, json)
Hash identifier:          /VUOuFs+dZ0PnQdI/UKW0cHNMaEac6dEvvjGc/GveI4=
Subject key identifier:   CB:78:CB:16:0A:2C:BA:82:C6:42:0B:AB:0F:50:7D:0B:33:26:53:10
Certificate issuer:       /CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
Certificate serial:       31C5904C5401C8DF912D161FF0B26A5B4C5B676D
Authority key identifier: D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/3139302e3132342e34382e302f32332d3234203d3e20323730303634.roa
Signing time:             Sat 07 Jun 2025 17:05:00 +0000
ROA not before:           Sat 07 Jun 2025 17:00:00 +0000
ROA not after:            Sat 06 Jun 2026 17:05:00 +0000
asID:                     270064
IP address blocks:        190.124.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c5:90:4c:54:01:c8:df:91:2d:16:1f:f0:b2:6a:5b:4c:5b:67:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
        Validity
            Not Before: Jun  7 17:00:00 2025 GMT
            Not After : Jun  6 17:05:00 2026 GMT
        Subject: CN=CB78CB160A2CBA82C6420BAB0F507D0B33265310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:b3:13:39:ce:f4:4b:47:7d:08:d3:30:63:
                    74:c6:98:1d:45:71:b4:68:a7:ef:38:3f:32:97:48:
                    0c:2c:90:87:7a:12:92:0a:d7:95:0b:1f:1e:fb:52:
                    f0:4f:1a:e8:3e:f2:2a:4d:73:48:dd:ce:e5:c8:e5:
                    ee:10:3f:70:20:3f:67:f6:40:85:60:fc:a4:af:34:
                    93:f4:d8:4e:f6:e6:f2:8b:e7:67:e6:d2:3b:7e:21:
                    35:02:1c:fc:34:d7:41:eb:98:18:17:d0:2c:47:69:
                    c4:4c:c2:bb:5e:65:68:38:75:86:24:db:17:57:e5:
                    b5:d9:f8:a1:b9:c5:bd:58:c0:75:1f:53:8c:5d:e2:
                    aa:5d:c9:c0:68:47:44:e2:e7:b6:3d:de:27:67:66:
                    41:d3:79:0b:3f:7b:c9:a8:bc:29:b0:2b:30:22:69:
                    02:79:dc:2d:0f:4e:ef:cd:4d:7f:23:3f:09:7f:de:
                    c0:42:3e:35:0d:f7:d9:64:41:6c:b0:65:9c:36:5c:
                    25:c5:45:60:5d:4c:84:c0:44:c7:2b:8b:f1:46:2c:
                    ec:e6:d0:fc:d5:d8:44:a8:ae:be:c9:36:fa:e9:bd:
                    61:76:d1:b6:b0:c4:d1:5c:0a:17:7e:fd:f7:99:b4:
                    58:2c:2e:6e:e2:68:98:6a:82:b3:06:35:3c:5b:b1:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:CB:16:0A:2C:BA:82:C6:42:0B:AB:0F:50:7D:0B:33:26:53:10
            X509v3 Authority Key Identifier:
                keyid:D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/3139302e3132342e34382e302f32332d3234203d3e20323730303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:df:a5:ab:bd:db:ed:b8:56:5a:04:65:40:e9:93:6c:70:
         5c:f8:70:f6:73:e0:9f:df:8b:71:1b:7b:6d:4b:81:d0:12:48:
         d8:19:a2:a7:77:95:08:4e:3e:60:da:2b:e2:f9:d3:be:60:6b:
         02:5b:0f:ae:d1:0d:7a:b4:ca:34:b1:85:ed:5b:88:54:6b:74:
         30:95:c6:77:6c:87:d7:a5:6f:bd:a8:b3:b0:0c:54:b4:78:6f:
         10:bf:61:47:f1:f5:ff:95:68:70:9f:02:17:86:f1:cf:70:97:
         ef:6f:9a:ee:1d:2e:ee:37:69:26:c9:54:73:6d:91:3b:bf:6d:
         ec:2a:a3:b4:a0:1b:8a:1b:30:49:93:70:01:ab:e4:c2:a2:22:
         f9:05:51:fa:5c:e9:29:6c:c1:13:a2:3e:fa:2c:4d:5a:5a:64:
         95:ec:d9:7f:47:9f:02:e4:22:fd:52:ba:f8:a7:00:92:38:81:
         49:72:56:a6:bb:2d:14:d9:c0:1f:f8:b3:33:20:13:ac:fd:30:
         ed:69:d4:e9:e5:a5:f3:6e:a1:eb:d6:59:14:c1:52:a6:37:23:
         ae:78:16:d9:ca:21:92:47:bd:1d:c0:ce:b6:8c:18:4d:2e:b8:
         f0:ac:a2:28:55:cc:9a:79:9c:03:58:7f:a0:2a:2e:eb:6b:df:
         2f:6a:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:08:13 2025 by rpki-client