Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234302e302f32302d3232203d3e203133333335.roa
File:                     3139302e39332e3234302e302f32302d3232203d3e203133333335.roa (raw, json)
Hash identifier:          Fx1sl9y5r+SpWelD8BgfnU8LWeoxw4Xmo8B+9OLMKeg=
Subject key identifier:   ED:A4:68:50:BA:81:0D:90:58:9E:AF:74:F6:73:E6:9E:D9:D2:6B:E3
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       4E9EF38758917CBC1C4F2D06361E9086334CA72B
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234302e302f32302d3232203d3e203133333335.roa
Signing time:             Mon 31 Mar 2025 16:13:22 +0000
ROA not before:           Mon 31 Mar 2025 16:08:22 +0000
ROA not after:            Mon 30 Mar 2026 16:13:22 +0000
asID:                     13335
IP address blocks:        190.93.240.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9e:f3:87:58:91:7c:bc:1c:4f:2d:06:36:1e:90:86:33:4c:a7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar 31 16:08:22 2025 GMT
            Not After : Mar 30 16:13:22 2026 GMT
        Subject: CN=EDA46850BA810D90589EAF74F673E69ED9D26BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:ba:4b:fb:dd:47:bd:e1:7b:99:14:d8:d2:
                    d9:d4:6b:4f:9e:4c:65:36:7b:38:69:fc:fa:60:6e:
                    b4:ff:2e:72:14:f5:94:0c:34:60:c7:6a:22:0c:2e:
                    30:0e:fa:04:e6:9a:d3:9c:9f:f8:31:ca:83:21:f5:
                    23:1a:60:d8:c0:49:6d:52:eb:5a:92:71:6a:e0:7d:
                    0b:dc:40:10:d2:65:b8:42:a0:cc:6d:1f:10:ef:bc:
                    c9:2e:47:4a:50:1b:7b:20:c3:1c:8d:e1:cc:32:12:
                    5e:81:1a:ed:29:5d:6f:c0:58:c0:a9:7c:41:94:47:
                    5b:e2:07:83:6f:0e:ff:b7:ef:3e:bc:97:a1:f1:e0:
                    0e:5f:4c:c4:3d:8a:33:0b:b1:64:6f:b6:c9:cd:5a:
                    39:c2:68:54:9c:31:8c:c5:66:0b:f7:00:50:8a:77:
                    10:ce:fd:b5:09:36:af:6c:cb:4c:1e:95:61:9a:60:
                    e3:10:46:12:6f:69:23:ce:37:3e:e4:7e:a8:92:b1:
                    9d:e4:7e:bf:1a:d3:4b:3c:e2:29:26:73:fd:7c:05:
                    e6:6f:cd:b4:2e:65:27:cc:22:77:1f:96:ec:d7:fc:
                    16:e8:8a:74:c4:a1:f6:61:0f:11:ab:d2:ee:88:87:
                    69:c7:e7:15:b6:df:64:e7:cc:f6:a4:7f:5d:6d:71:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:68:50:BA:81:0D:90:58:9E:AF:74:F6:73:E6:9E:D9:D2:6B:E3
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234302e302f32302d3232203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:04:40:53:b1:57:78:15:3b:d4:fa:b4:73:2a:67:8f:f1:be:
         07:12:71:eb:5a:af:aa:3d:5a:4b:5a:b6:8d:7f:e3:a0:0c:76:
         8d:c8:72:f6:02:e7:a3:9c:54:86:5b:72:29:60:76:9e:49:80:
         ce:4e:a8:55:46:d6:09:14:ed:36:76:f9:db:08:78:78:2e:3f:
         cd:55:9f:47:81:b2:63:0a:2f:e6:07:98:48:99:6c:40:d7:8f:
         e0:c6:e4:a7:1d:5b:a0:0a:cf:00:f4:31:0f:e3:e4:14:ca:27:
         f7:aa:96:04:87:b9:a1:85:98:e0:1f:20:87:bf:c0:6b:83:1f:
         53:e5:ff:f0:0d:8a:86:30:57:94:1b:7c:cd:3f:75:26:bb:d6:
         cc:8c:5f:82:84:f1:45:69:fd:ce:91:47:cb:17:17:89:f8:83:
         23:33:36:c2:71:31:4f:cd:d9:39:bc:da:aa:0b:0b:7e:60:ea:
         84:bf:07:83:02:6d:9e:27:2e:95:7e:b0:bf:01:d7:1f:22:fe:
         2f:7f:f6:ed:f5:49:0a:5e:ec:c3:46:bb:6a:82:59:cb:c5:41:
         19:ae:95:65:8e:e7:55:8f:7e:16:44:af:9f:5c:11:16:11:68:
         82:31:9b:ae:51:80:76:12:5f:df:0c:5c:b1:f3:8c:1d:e0:fa:
         42:f0:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:31 2025 by rpki-client