Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa
File:                     3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa (raw, json)
Hash identifier:          CXcvB/rFJw+3JW6eccmXJCGMg1jin6PMunoQczUU470=
Subject key identifier:   D2:37:73:15:18:E1:61:53:AA:08:6B:9C:D7:79:45:56:28:7B:47:13
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       27D2AE8D5AADA4C5046B34D79140DB86671521DC
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa
Signing time:             Tue 04 Feb 2025 20:04:10 +0000
ROA not before:           Tue 04 Feb 2025 19:59:10 +0000
ROA not after:            Tue 03 Feb 2026 20:04:10 +0000
asID:                     23456
IP address blocks:        190.210.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d2:ae:8d:5a:ad:a4:c5:04:6b:34:d7:91:40:db:86:67:15:21:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:10 2025 GMT
            Not After : Feb  3 20:04:10 2026 GMT
        Subject: CN=D237731518E16153AA086B9CD7794556287B4713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:c1:52:03:6a:b6:06:18:28:aa:ad:08:0f:
                    37:5d:39:21:b2:08:6f:c1:ca:e7:fd:97:7b:9d:bc:
                    1b:1c:9d:07:08:f1:1b:2f:48:71:b2:a7:5c:89:12:
                    1d:2d:3e:f0:db:2d:71:d6:4e:9f:a8:a3:1f:eb:fa:
                    de:ca:82:7d:a2:eb:96:a9:99:d5:39:5a:90:ee:63:
                    2f:06:24:65:4c:ee:54:0e:96:d4:c4:41:89:1e:2b:
                    eb:c4:4d:d1:de:e2:73:50:9f:ac:af:97:04:24:09:
                    08:2e:55:ee:4d:21:fe:c6:8b:c6:ec:da:ed:64:2d:
                    c0:70:f3:b5:4d:ea:fa:bb:1f:ac:12:7c:3b:82:e2:
                    71:bd:15:5d:1d:63:ae:ee:9f:30:9c:12:3e:13:75:
                    db:b9:70:e1:9e:9f:bc:98:02:12:5a:69:0d:87:a8:
                    ce:41:20:d7:51:02:b0:cb:71:45:a9:42:a2:0b:ec:
                    5e:1f:4d:b6:b0:f1:23:cc:c5:bb:6e:8f:3f:7f:f1:
                    29:94:76:e6:ba:f1:32:0b:25:bb:ae:0a:22:71:b7:
                    26:71:f1:f1:b3:d2:d5:f9:55:c0:71:96:c2:2b:2c:
                    dc:97:85:ed:7d:8f:80:c1:eb:41:ad:18:7e:d0:ba:
                    f0:56:b0:8d:ad:8d:64:6a:87:13:43:73:f3:10:eb:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:73:15:18:E1:61:53:AA:08:6B:9C:D7:79:45:56:28:7B:47:13
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c1:94:93:71:5a:0f:f6:93:f3:fc:04:91:45:6a:ff:0a:23:
         20:34:5d:1b:c7:78:e8:36:1c:53:a5:1e:9d:e4:41:33:a2:56:
         e1:47:d2:22:27:c1:b5:43:5b:28:71:da:2f:e4:0e:cb:45:c8:
         e1:65:2f:df:b7:f8:b6:87:11:04:d9:ba:5b:7a:b6:c7:3a:53:
         ee:c9:27:78:07:3f:f9:e2:07:e8:11:eb:7d:a9:6c:f7:09:7e:
         6d:39:7e:ec:82:09:77:e9:dd:a7:63:17:28:2d:b0:be:b4:19:
         fb:69:e8:55:85:f9:31:4d:dd:91:ec:32:99:aa:25:13:05:8f:
         3a:2f:d9:6c:2e:d8:77:2c:a8:be:0a:7d:b3:26:19:26:11:22:
         a3:f0:49:6c:df:f5:70:dd:db:83:8d:6a:a7:f1:e0:34:b0:6f:
         4d:4f:fd:74:2b:8b:17:2e:8c:10:bd:59:9e:9b:e8:b0:aa:b9:
         74:7d:20:c0:77:d9:84:dc:ce:0c:9c:00:1c:f0:eb:f1:4c:41:
         f6:e2:e0:82:a7:43:3c:68:fe:33:e5:46:e5:7d:1d:6f:30:c7:
         70:12:f0:0f:a0:72:ea:94:93:79:af:31:27:da:06:49:eb:85:
         fe:2d:c5:15:9b:b0:91:2f:98:f3:3d:22:8e:a7:d4:88:1c:49:
         c1:dc:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:23:29 2025 by rpki-client