Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa
File:                     3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa (raw, json)
Hash identifier:          pYEf8MSNYNwKdxzqDWaeCaSFddvjTvlz7d4qwzOzwwY=
Subject key identifier:   C1:72:A7:E9:BE:00:D6:1C:45:BE:D1:D6:0B:86:AD:60:C9:FA:DA:D9
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       77816FFC6324CF0F5F345B7CE75CFD126DE23BB2
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa
Signing time:             Tue 04 Feb 2025 18:41:30 +0000
ROA not before:           Tue 04 Feb 2025 18:36:30 +0000
ROA not after:            Tue 03 Feb 2026 18:41:30 +0000
asID:                     16528
IP address blocks:        190.216.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:81:6f:fc:63:24:cf:0f:5f:34:5b:7c:e7:5c:fd:12:6d:e2:3b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:30 2025 GMT
            Not After : Feb  3 18:41:30 2026 GMT
        Subject: CN=C172A7E9BE00D61C45BED1D60B86AD60C9FADAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:92:6b:48:3b:00:7c:a8:06:1a:21:97:60:
                    3f:99:7f:0d:eb:bf:88:4d:3b:c8:94:5e:97:1d:00:
                    57:ed:d1:ff:a8:b3:61:f8:64:67:64:6b:6c:fb:cd:
                    b6:9a:03:a2:f8:9d:2c:4e:81:bb:89:9c:e0:71:49:
                    a3:fc:ae:36:b2:74:8f:02:96:08:0d:66:9a:71:29:
                    79:82:b1:fe:ac:d5:71:4a:c8:b5:3b:2a:ce:7b:1d:
                    4d:79:22:46:52:9c:fd:08:03:f1:0e:94:bb:6b:83:
                    de:cf:86:4c:62:8f:a8:73:f0:10:51:cf:9d:cd:02:
                    6c:de:1b:4f:e6:ac:cf:39:9c:e3:9f:41:92:b9:47:
                    06:b8:87:cd:b7:79:6a:8a:0f:f2:cf:d0:9a:a6:e0:
                    70:27:05:55:46:d6:0d:51:b5:24:93:ba:50:02:57:
                    3d:5a:87:30:de:03:ca:ac:9b:4b:23:67:46:42:2d:
                    44:1e:23:38:8c:ac:35:8f:87:06:f1:2f:c3:e7:0f:
                    05:7d:ae:e1:1f:82:30:9a:26:43:bf:a9:df:c4:2c:
                    db:44:6d:1e:f2:7e:31:42:8f:ad:60:fd:59:53:9e:
                    15:50:8b:d1:20:fb:22:78:da:86:f9:3a:64:ae:1b:
                    04:88:06:53:41:b4:86:fa:f7:7e:03:a1:5a:ef:ca:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:72:A7:E9:BE:00:D6:1C:45:BE:D1:D6:0B:86:AD:60:C9:FA:DA:D9
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7b:2d:d4:e6:bb:25:45:8d:b4:42:70:69:b3:83:ec:95:b1:
         94:bd:25:b0:cd:15:6f:81:c8:e1:8f:23:d3:97:b6:40:08:64:
         a0:9c:01:f7:5d:49:7f:13:24:bd:1d:1b:b7:ab:8f:a0:13:fa:
         6a:fd:82:5d:81:d6:72:f3:14:b6:59:89:64:e9:a9:bc:b4:f4:
         3b:3a:a5:81:f3:0d:7f:06:a8:99:0b:7d:ba:12:5d:d1:89:d8:
         ad:25:87:e7:db:66:53:b7:5a:d8:8c:09:5f:13:35:f9:3a:81:
         ee:ea:7a:70:c8:e7:64:1b:ef:1f:2f:0c:83:7f:c9:6e:56:9e:
         11:cf:d9:72:43:df:da:58:ec:14:f3:1d:cc:b3:1d:b9:80:4f:
         a5:ad:cc:74:4c:48:55:f3:0c:f8:88:32:08:7d:7f:b7:80:a8:
         8d:05:54:8e:6c:b6:a3:f0:3e:58:3f:1e:2f:25:a2:4f:ab:b5:
         e2:56:51:98:e9:cd:6c:f3:d4:50:70:d9:dc:25:76:30:5d:7d:
         ad:13:e7:8f:e9:98:4a:c7:4f:d0:c4:72:e6:b4:57:0b:95:1c:
         c8:91:dd:ac:19:be:15:9d:84:4b:25:b1:1a:10:13:d7:2c:82:
         07:af:f2:e5:4d:0d:c4:21:fc:3a:78:e5:4c:62:79:10:c1:b1:
         1b:eb:39:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:41:06 2025 by rpki-client