Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f31392d3234203d3e2033383136.roa
File:                     3139302e31332e302e302f31392d3234203d3e2033383136.roa (raw, json)
Hash identifier:          W+7Q5P9GzlclQGerkSwqrHtnE8tcdbu+ZVA2CRExNs4=
Subject key identifier:   3C:3C:D2:4B:42:74:89:AA:87:0C:5A:49:34:09:65:24:44:D3:30:E1
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       1F35AE5603820A75699C59EF23AFA5347BDA0BC6
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f31392d3234203d3e2033383136.roa
Signing time:             Thu 12 Jun 2025 16:21:55 +0000
ROA not before:           Thu 12 Jun 2025 16:16:55 +0000
ROA not after:            Thu 11 Jun 2026 16:21:55 +0000
asID:                     3816
IP address blocks:        190.13.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:35:ae:56:03:82:0a:75:69:9c:59:ef:23:af:a5:34:7b:da:0b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jun 12 16:16:55 2025 GMT
            Not After : Jun 11 16:21:55 2026 GMT
        Subject: CN=3C3CD24B427489AA870C5A493409652444D330E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:94:63:92:ec:36:7c:f4:5c:7d:cc:96:57:
                    3a:29:7e:9b:a9:83:c5:6b:5c:29:cc:a9:c8:d7:bd:
                    1d:36:08:99:5b:3b:5d:70:8e:4c:d1:26:91:72:3a:
                    ea:45:02:b0:8a:5a:6e:a8:88:3b:53:55:9a:6a:ce:
                    55:46:e1:2b:50:a3:f9:43:85:6b:d7:cb:40:32:67:
                    7e:03:23:e8:27:64:e5:ce:86:50:34:a9:86:86:4f:
                    3b:6e:8e:e7:fa:41:29:74:22:94:b1:b2:2f:34:40:
                    0e:0f:2e:49:e6:8f:bb:f4:e0:f6:69:e4:6f:42:16:
                    ee:43:0d:99:12:78:9a:e9:ba:12:89:c7:c7:89:84:
                    c2:2f:c8:f4:1f:95:b2:10:5b:0d:47:cb:db:19:6a:
                    8c:6d:cf:1f:8c:ab:22:49:bf:59:b9:e6:50:38:7d:
                    ea:7a:01:09:d5:50:1a:4b:e4:3d:b2:01:41:3d:27:
                    16:7a:ae:45:f3:8b:7c:b4:3a:d5:59:c0:67:76:14:
                    2a:62:bc:49:0e:f0:50:ec:cb:ab:ac:09:0f:26:50:
                    05:25:21:05:60:81:6a:5c:90:24:df:8e:d4:87:fd:
                    cd:e8:49:09:7c:24:e9:cf:b6:1b:0f:ad:92:3e:79:
                    e9:a0:7b:d1:6b:cb:6e:13:09:4d:56:d0:5d:7a:8f:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:D2:4B:42:74:89:AA:87:0C:5A:49:34:09:65:24:44:D3:30:E1
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f31392d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:e1:19:e3:b9:03:44:2c:30:d0:9e:4a:2e:61:b9:3e:8f:
         1d:2e:b6:9a:bb:b0:be:ca:e1:34:a8:20:30:67:24:a6:e8:6f:
         f2:7e:be:ad:34:27:68:f9:e1:28:65:4d:8e:08:bd:de:36:c2:
         8d:47:75:9a:73:7e:27:ae:5f:99:03:db:37:fd:7f:73:25:0f:
         44:86:0b:b4:b9:d5:78:ed:72:9f:2d:f0:da:db:b3:6a:95:b3:
         5c:22:cd:4b:c3:5c:a2:07:9a:fd:49:a9:de:52:a2:7e:d4:55:
         32:ad:c2:e6:1e:7e:d6:35:cc:94:42:ce:cd:9f:4a:b4:52:db:
         4c:4a:ae:61:44:9b:c7:e9:14:e3:1d:a9:8b:19:95:cb:1a:b1:
         42:c8:d0:60:14:49:2f:35:7e:14:16:51:e1:aa:0a:0b:b8:9c:
         53:1e:a4:d8:ec:51:df:15:a7:39:82:04:ef:eb:e1:f1:be:2d:
         e9:99:d9:38:26:f7:c7:77:44:e2:82:3b:9e:db:53:f2:4d:86:
         d1:8a:b2:e2:1d:c9:b8:34:d9:42:91:2c:be:ac:f9:45:5a:55:
         ae:15:52:1b:3c:94:f8:66:4d:e7:52:5e:71:b6:b1:25:08:91:
         7f:a5:9c:bb:e1:43:74:dd:c3:48:33:43:44:66:d4:b9:69:b9:
         4b:3f:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:07:50 2025 by rpki-client