Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa
File:                     3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          4bLg1hMHDPX2EXByMwQ7cFXxQQA9o6PMkwz4w+sXb9s=
Subject key identifier:   BF:34:06:C4:FC:57:A0:9D:16:13:1C:7C:E1:06:09:28:C7:D2:FF:A4
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       475B606E7A0FD5E54C248486F6DAD94B3AC6AEF4
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa
Signing time:             Tue 04 Feb 2025 18:55:09 +0000
ROA not before:           Tue 04 Feb 2025 18:50:09 +0000
ROA not after:            Tue 03 Feb 2026 18:55:09 +0000
asID:                     262208
IP address blocks:        190.13.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5b:60:6e:7a:0f:d5:e5:4c:24:84:86:f6:da:d9:4b:3a:c6:ae:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Feb  4 18:50:09 2025 GMT
            Not After : Feb  3 18:55:09 2026 GMT
        Subject: CN=BF3406C4FC57A09D16131C7CE1060928C7D2FFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:75:78:f8:a2:ce:2f:56:85:3a:8a:84:46:
                    96:10:d9:6a:c1:80:fd:29:79:18:96:53:42:c5:22:
                    ed:74:5f:7e:c4:a9:3c:9f:66:63:11:28:93:15:56:
                    fd:21:ff:88:6b:2e:61:20:4c:83:59:c5:48:38:18:
                    91:44:a1:c6:5c:99:76:cb:6c:19:25:f8:c6:2d:1e:
                    84:0e:1d:1e:72:bd:98:ff:c5:ef:2c:48:36:73:b1:
                    6a:03:f5:df:57:98:f7:6c:ad:25:98:fd:05:7b:95:
                    0d:8e:6e:31:f8:92:1d:da:24:78:e6:d4:e1:1d:e5:
                    0d:12:15:f1:ef:d5:51:57:a9:51:81:71:60:26:9f:
                    e1:70:f3:2e:b2:cb:7b:01:cf:a2:1a:35:25:11:d3:
                    f0:6c:57:06:cf:6e:d7:a6:e7:58:28:b7:f0:7b:e0:
                    2b:85:8a:99:71:86:18:45:01:f0:93:2f:e1:00:c7:
                    19:d4:a1:5c:18:ba:19:cb:10:c1:fb:c0:bf:48:00:
                    33:f7:f1:2f:10:40:dc:98:11:fd:39:5a:a3:85:01:
                    29:8e:ee:b8:8b:e9:13:98:29:5a:08:bc:da:f8:37:
                    f9:42:f6:b0:b7:1f:5e:19:6a:79:1d:c7:09:51:f8:
                    66:b7:c2:1a:6c:9c:9d:89:1f:04:75:2b:ca:2c:86:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:34:06:C4:FC:57:A0:9D:16:13:1C:7C:E1:06:09:28:C7:D2:FF:A4
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:e7:4d:73:b7:68:50:b4:54:2b:25:20:e9:40:50:99:1b:
         5e:34:b4:a7:b3:71:d3:5f:a3:d0:8c:5c:d3:64:d4:56:33:9d:
         ee:3d:1f:74:a5:71:15:a5:3a:a3:ce:8a:fc:d0:ec:3a:e3:19:
         70:05:5c:57:ef:d8:54:6a:32:12:ea:91:59:bb:fb:c4:a9:d6:
         15:f8:31:56:2c:03:0c:e8:55:09:1c:21:40:9a:13:16:6c:c5:
         d5:c2:41:81:e5:4f:0f:5b:4b:c4:1b:ef:26:80:d4:d3:90:0c:
         35:2a:66:51:78:1a:0a:03:d5:ec:e8:f7:90:b8:24:71:c7:e2:
         d3:9d:29:d1:dc:14:ee:ef:c9:84:c5:a9:f9:dc:1a:b4:f5:01:
         a0:81:df:99:73:90:36:13:08:17:0e:57:6a:fa:04:01:ea:23:
         99:bf:15:45:df:51:86:27:96:d2:76:6f:2f:3e:46:35:60:3b:
         16:72:1c:a3:4e:2a:40:e8:3c:73:d1:8f:1c:e5:98:5b:00:20:
         ee:78:57:cb:09:7c:c3:0c:b0:7b:6d:94:2a:45:9f:97:f6:0b:
         e1:42:94:89:1b:19:a7:08:08:38:4f:79:7d:d9:9a:42:8d:52:
         ff:ee:6d:13:45:6d:ba:88:a3:42:cd:32:e6:b6:2c:8b:5d:46:
         15:2b:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:07:49 2025 by rpki-client