Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32342d3234203d3e20323632323038.roa
File:                     3139302e31332e3231362e302f32342d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          0rkxmO4pBWHfrl+hNkJCMfgYI1mw/jzQGG6puOttCF0=
Subject key identifier:   0D:D9:E4:01:52:71:C8:55:2B:D8:73:3E:2C:8D:D8:8D:A7:DE:6D:36
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       6FF28D82A15D1C26943EB2FE1EA55DB995C26AC0
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32342d3234203d3e20323632323038.roa
Signing time:             Tue 04 Feb 2025 18:55:10 +0000
ROA not before:           Tue 04 Feb 2025 18:50:10 +0000
ROA not after:            Tue 03 Feb 2026 18:55:10 +0000
asID:                     262208
IP address blocks:        190.13.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:8d:82:a1:5d:1c:26:94:3e:b2:fe:1e:a5:5d:b9:95:c2:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Feb  4 18:50:10 2025 GMT
            Not After : Feb  3 18:55:10 2026 GMT
        Subject: CN=0DD9E4015271C8552BD8733E2C8DD88DA7DE6D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:1a:fa:27:75:66:ac:c4:2d:e4:b1:4d:46:
                    ec:04:42:17:2d:45:2f:c9:15:46:af:ff:f4:8f:81:
                    16:b8:fa:80:ae:3b:88:1f:c2:af:89:96:8d:53:42:
                    cb:2f:41:ca:1f:e2:6f:d5:d4:c4:30:a1:06:9b:96:
                    81:3a:45:75:43:9c:fd:95:47:a1:3a:fe:5d:67:1f:
                    5d:26:10:a8:4f:88:25:04:e5:1d:54:05:00:7d:ba:
                    43:a8:13:3c:12:fc:af:81:24:99:9b:2f:8f:84:dd:
                    33:f0:3b:f0:ed:77:21:48:0a:a7:9f:03:12:ff:2f:
                    cf:6f:da:43:e9:f3:11:a1:e7:c2:8c:06:53:25:07:
                    c6:e9:53:17:85:ef:67:10:e8:3b:20:2c:c9:c1:7c:
                    90:dd:ee:68:d8:07:80:99:32:91:ef:90:fd:88:5b:
                    d9:14:c1:f4:cd:e8:90:9f:57:ef:bd:c0:54:27:84:
                    29:1e:8b:7d:60:51:cb:48:eb:a0:41:a1:9b:21:76:
                    93:eb:46:8e:92:dc:ac:a9:1a:92:cb:66:af:e7:ff:
                    9e:1f:38:9f:3b:e9:bc:c5:39:53:f4:19:51:97:28:
                    44:21:34:8c:8c:10:12:98:80:ce:2b:21:ae:a2:66:
                    cd:6e:53:b5:cb:bc:5c:b6:56:7f:e3:b8:7e:30:ef:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:E4:01:52:71:C8:55:2B:D8:73:3E:2C:8D:D8:8D:A7:DE:6D:36
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32342d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:24:46:49:a4:bf:3b:e0:6b:f6:77:8c:6a:38:be:84:34:
         e2:cd:a4:5e:48:97:43:69:da:16:10:63:1d:e8:35:a2:16:43:
         27:d0:62:52:8c:50:df:80:52:d5:7a:a8:da:45:ac:e7:21:ae:
         11:54:b6:cb:85:df:fb:c7:cd:c9:c7:a6:20:86:ed:60:a6:b5:
         ca:d7:27:d3:5c:f4:08:36:0b:ef:96:d3:58:9d:1f:f3:d9:6e:
         fe:35:1e:a3:68:4f:c9:9b:2a:fd:bf:e4:91:f2:02:b7:11:1d:
         27:b0:3e:0e:4a:3e:fc:da:f7:fc:c3:e8:e6:1d:b3:6e:c2:6d:
         50:55:23:91:87:1d:6e:db:0d:12:e1:11:25:cf:37:fe:3f:5e:
         63:a9:d4:1c:07:a9:12:e4:bc:9b:a2:d4:ac:8f:27:df:ab:b6:
         4c:87:d9:f8:ed:ad:48:93:11:98:11:86:ef:20:1e:5f:df:20:
         ca:6e:7c:e0:13:9d:9f:10:f1:d2:11:7f:60:7e:3c:85:a8:ae:
         c3:ae:f5:a8:16:8b:1f:8e:61:33:25:bb:ac:56:73:fd:b9:4a:
         70:e9:82:05:66:d6:b8:f4:23:93:09:4a:48:c6:3a:57:31:b0:
         04:42:bf:c9:a6:fb:16:bb:cc:7b:1a:e4:c4:58:5c:5a:ee:fe:
         8e:01:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:05:30 2025 by rpki-client