Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31382d3234203d3e203237383834.roa
File:                     3139302e39322e302e302f31382d3234203d3e203237383834.roa (raw, json)
Hash identifier:          npBmsenpmpVoo7iVGt5GkB8wBzbTBMeA7G6+N00kZTA=
Subject key identifier:   44:B8:5D:16:8E:FB:E6:75:E5:A8:83:E6:F0:13:EA:56:6C:9F:40:4A
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       04E99DE0D2047624D45B87CFB8703239764A8292
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31382d3234203d3e203237383834.roa
Signing time:             Fri 02 May 2025 21:17:36 +0000
ROA not before:           Fri 02 May 2025 21:12:36 +0000
ROA not after:            Fri 01 May 2026 21:17:36 +0000
asID:                     27884
IP address blocks:        190.92.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 18:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e9:9d:e0:d2:04:76:24:d4:5b:87:cf:b8:70:32:39:76:4a:82:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: May  2 21:12:36 2025 GMT
            Not After : May  1 21:17:36 2026 GMT
        Subject: CN=44B85D168EFBE675E5A883E6F013EA566C9F404A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:e9:74:ff:fd:fa:3d:47:89:75:ed:e8:b4:
                    88:a6:13:f3:37:7a:b7:87:da:25:fa:ea:28:25:74:
                    ee:24:2e:ca:55:21:3d:3f:5a:3d:cc:a2:b3:47:d8:
                    18:39:4f:59:7a:49:31:1a:06:16:0e:15:d0:5d:66:
                    6c:57:98:2e:72:0b:54:15:9d:d9:eb:86:01:a8:11:
                    94:cb:4e:42:f5:d0:7b:d5:bc:f1:f7:5a:c0:73:36:
                    9a:ca:1c:43:48:e5:a7:17:71:7a:54:ff:d5:8e:ee:
                    50:70:ae:ff:dd:7b:59:5e:74:3f:86:40:0a:df:55:
                    e4:af:9b:d0:4a:a3:f5:f8:23:99:fe:6f:20:be:11:
                    d1:a9:ca:63:b7:cc:8e:0f:3c:6e:f0:f3:75:95:7a:
                    f8:cc:bb:1a:1e:5d:3b:49:27:22:01:9b:e0:46:3f:
                    b4:d0:95:58:18:fe:cd:23:2f:fe:8d:41:b3:f6:68:
                    6b:32:12:dc:19:b2:2f:ba:e7:ff:17:c3:43:b1:91:
                    40:b3:b5:7e:a6:be:71:65:ab:b9:99:91:7c:9b:45:
                    77:d3:74:45:ef:12:0b:ce:86:e4:8a:53:b8:80:d2:
                    80:0e:0d:57:b2:03:73:3a:3d:5d:11:f6:44:15:94:
                    6e:81:3e:38:a2:ad:35:c3:19:1e:84:bc:dc:e3:fb:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B8:5D:16:8E:FB:E6:75:E5:A8:83:E6:F0:13:EA:56:6C:9F:40:4A
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e302e302f31382d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:00:60:0c:4c:51:52:c9:71:28:7a:6f:f9:d3:41:64:7a:75:
         81:65:f7:ef:ec:8b:2d:c1:88:a4:17:c7:db:3f:fe:b2:d6:98:
         a1:6f:22:c4:be:e3:9f:88:74:8a:8f:f5:de:67:c8:45:ca:78:
         59:41:13:0f:e1:6b:9c:ee:15:ec:b9:9c:b9:46:b7:fb:0f:6a:
         c3:97:01:e1:90:77:98:2e:4d:80:4a:99:81:c0:9f:b8:98:1d:
         1f:a6:65:f4:26:b9:66:19:71:93:66:ff:b5:e9:5e:e1:af:09:
         e6:d4:21:72:b9:61:b7:2e:71:62:40:82:a8:39:34:8c:1e:db:
         05:55:50:5b:00:f8:d8:32:db:1a:68:61:38:d0:ad:b1:12:4f:
         f1:4c:76:09:db:2e:d6:da:2a:6f:35:19:34:2a:70:8d:27:dd:
         c7:01:8d:fa:08:94:30:c5:4d:5c:81:a7:57:2f:0a:76:8a:bc:
         a1:13:0d:09:8b:b3:c9:1d:e3:92:68:12:cc:c8:81:81:99:9f:
         46:31:95:2f:7d:06:8d:e2:74:81:8e:61:90:13:3f:7f:34:3d:
         61:d9:aa:91:66:cc:0c:21:8e:a9:ca:25:73:92:86:41:74:7a:
         cf:97:7f:60:9d:ad:ae:35:4c:fd:b2:0f:d3:e8:73:a3:4e:02:
         b9:70:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:00:49 2025 by rpki-client