Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa
File:                     3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          +taxbYYapsAd4Lr2rc2Ms6wHqz24XDNrDJGf0PPg1WE=
Subject key identifier:   7C:44:FE:1E:86:32:B1:00:67:2E:BC:FB:2E:2F:C2:06:1E:01:BB:74
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       7A768183AB617EEC34F096762D60F22D8683E3C0
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa
Signing time:             Tue 04 Feb 2025 18:55:09 +0000
ROA not before:           Tue 04 Feb 2025 18:50:09 +0000
ROA not after:            Tue 03 Feb 2026 18:55:09 +0000
asID:                     262208
IP address blocks:        190.13.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:76:81:83:ab:61:7e:ec:34:f0:96:76:2d:60:f2:2d:86:83:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Feb  4 18:50:09 2025 GMT
            Not After : Feb  3 18:55:09 2026 GMT
        Subject: CN=7C44FE1E8632B100672EBCFB2E2FC2061E01BB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:ef:74:fd:b5:05:e4:a2:af:6b:c4:09:9c:
                    fb:d8:55:fa:6c:ba:bd:6c:da:45:7e:cb:32:3b:16:
                    45:cc:23:ac:92:27:45:5f:d7:74:53:7e:24:b0:50:
                    c4:68:2a:19:70:25:ce:3e:1f:30:ea:30:83:de:af:
                    a6:5d:a8:fe:65:69:8a:b9:ab:53:f5:ca:6d:f8:a9:
                    0a:54:e6:80:b1:c8:f2:c7:ce:87:85:55:f3:8f:a4:
                    ce:7f:65:1e:90:f5:08:f3:d8:99:e4:a8:36:d9:52:
                    1e:da:48:23:1e:0f:3f:d0:dd:9d:45:a4:c6:52:9a:
                    a9:a5:99:c4:fa:36:51:34:ca:3d:4a:c3:23:b0:26:
                    9a:46:bd:45:d0:17:86:2a:72:26:df:61:c1:a1:ee:
                    8b:fc:24:ed:ae:fa:2b:8c:4a:73:54:43:af:6f:00:
                    e5:76:d3:0e:02:a0:49:2c:1b:bc:f9:6b:10:eb:ea:
                    d2:7b:a6:e3:bb:50:24:39:fc:85:b5:2b:ca:52:56:
                    21:1a:9e:20:dc:6a:a1:c4:ae:b0:e3:10:4b:df:6b:
                    bd:5b:3e:b1:0e:94:6f:c8:e6:66:f2:1e:c8:ab:0e:
                    e4:0a:46:eb:3c:5e:22:fb:db:fa:e6:b9:8f:67:2c:
                    e4:1c:64:af:f1:74:61:97:43:94:71:de:01:64:7f:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:FE:1E:86:32:B1:00:67:2E:BC:FB:2E:2F:C2:06:1E:01:BB:74
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:92:8e:0b:c5:3b:89:ff:80:0a:13:64:c9:29:81:60:75:
         78:42:60:5d:87:ec:8d:8a:d0:f8:0d:ae:da:ef:66:8e:91:09:
         ad:b8:e2:e6:65:d3:b0:8a:8a:41:b4:c9:55:29:cb:c8:08:88:
         13:46:07:dc:69:25:7e:3f:1d:53:66:5a:32:6b:03:8b:c1:16:
         12:05:0a:bf:1f:c6:f2:03:e6:c9:c1:ae:49:9d:2c:d1:43:59:
         ac:fc:94:d9:e8:2d:3b:a7:d7:b1:2f:ef:99:6e:00:42:98:22:
         1b:05:d4:f9:a6:e4:31:af:7b:b1:fe:23:89:ee:43:e2:3e:7e:
         27:b5:b3:aa:e2:f9:77:2f:8e:62:88:23:47:2a:61:c0:1a:a4:
         42:ff:3e:3e:ba:3d:f7:d7:04:c9:4c:b6:c6:9f:c1:b9:c0:3a:
         3a:9c:a5:66:7d:5d:b9:bf:3a:1a:b3:d8:5a:c2:6d:1f:ce:39:
         8c:f6:92:40:59:13:9c:e2:de:93:67:dc:ea:56:39:78:7a:50:
         08:3e:e9:d6:a9:8f:4c:b5:77:c6:6c:a3:f1:c1:63:2f:a8:8c:
         73:a1:72:29:05:57:59:a7:9f:cd:98:0e:db:98:e9:df:33:ff:
         45:74:6b:e8:70:ab:81:b4:30:e0:0d:a8:4a:27:8f:6c:91:0d:
         97:a7:e1:90
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUenaBg6thfuw08JZ2LWDyLYaD48AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE4Q0E1NkUzQjdCRjg4Q0QxMzQ3OTcxREJFRTg5NkYz
Njc3MTRDNzAeFw0yNTAyMDQxODUwMDlaFw0yNjAyMDMxODU1MDlaMDMxMTAvBgNV
BAMTKDdDNDRGRTFFODYzMkIxMDA2NzJFQkNGQjJFMkZDMjA2MUUwMUJCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpe90/bUF5KKva8QJnPvYVfps
ur1s2kV+yzI7FkXMI6ySJ0Vf13RTfiSwUMRoKhlwJc4+HzDqMIPer6ZdqP5laYq5
q1P1ym34qQpU5oCxyPLHzoeFVfOPpM5/ZR6Q9Qjz2JnkqDbZUh7aSCMeDz/Q3Z1F
pMZSmqmlmcT6NlE0yj1KwyOwJppGvUXQF4YqcibfYcGh7ov8JO2u+iuMSnNUQ69v
AOV20w4CoEksG7z5axDr6tJ7puO7UCQ5/IW1K8pSViEaniDcaqHErrDjEEvfa71b
PrEOlG/I5mbyHsirDuQKRus8XiL72/rmuY9nLOQcZK/xdGGXQ5Rx3gFkfwGHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfET+HoYysQBnLrz7Li/CBh4Bu3QwHwYDVR0j
BBgwFoAUSoylbjt7+IzRNHlx2+6JbzZ3FMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEZGMzM2QTZCMkY5RkFBOUE3OTgwODI5ODMyRERFNzU3
ODE0QzE3NUU0MjBFOTMxN0REQTUzMTA2Njg0MDQ3LzAvNEE4Q0E1NkUzQjdCRjg4
Q0QxMzQ3OTcxREJFRTg5NkYzNjc3MTRDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QThDQTU2RTNCN0JGODhDRDEz
NDc5NzFEQkVFODk2RjM2NzcxNEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhGRjMzNkE2QjJGOUZBQTlBNzk4MDgyOTgzMkRERTc1NzgxNEMxNzVF
NDIwRTkzMTdEREE1MzEwNjY4NDA0Ny8wLzMxMzkzMDJlMzEzMzJlMzIzMTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvg3Y
MA0GCSqGSIb3DQEBCwUAA4IBAQBFLZKOC8U7if+AChNkySmBYHV4QmBdh+yNitD4
Da7a72aOkQmtuOLmZdOwiopBtMlVKcvICIgTRgfcaSV+Px1TZloyawOLwRYSBQq/
H8byA+bJwa5JnSzRQ1ms/JTZ6C07p9exL++ZbgBCmCIbBdT5puQxr3ux/iOJ7kPi
Pn4ntbOq4vl3L45iiCNHKmHAGqRC/z4+uj331wTJTLbGn8G5wDo6nKVmfV25vzoa
s9hawm0fzjmM9pJAWROc4t6TZ9zqVjl4elAIPunWqY9MtXfGbKPxwWMvqIxzoXIp
BVdZp5/NmA7bmOnfM/9FdGvocKuBtDDgDahKJ49skQ2Xp+GQ
-----END CERTIFICATE-----
Generated at Tue Apr 15 23:03:00 2025 by rpki-client