Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e31382e302f32342d3234203d3e203230323037.roa
File:                     3139302e3231362e31382e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          D0fQYDOIb9A81zSZJ+XwJy60ldbRPBcZEBeenfLe3gg=
Subject key identifier:   EE:0D:E4:05:AD:22:4E:2F:42:61:CB:60:4C:6B:E7:18:76:C6:03:BF
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0FD83DA594445D68F25034E599C77AB330DA2DE7
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e31382e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:41:35 +0000
ROA not before:           Tue 04 Feb 2025 18:36:35 +0000
ROA not after:            Tue 03 Feb 2026 18:41:35 +0000
asID:                     20207
IP address blocks:        190.216.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d8:3d:a5:94:44:5d:68:f2:50:34:e5:99:c7:7a:b3:30:da:2d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:35 2025 GMT
            Not After : Feb  3 18:41:35 2026 GMT
        Subject: CN=EE0DE405AD224E2F4261CB604C6BE71876C603BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:6a:bc:9b:76:2f:36:c0:db:8a:1f:44:70:
                    ae:a6:b9:85:9a:8e:c1:79:da:90:4a:34:3e:65:19:
                    22:47:08:77:75:fe:ca:73:66:65:d8:10:61:ae:6c:
                    17:8e:0e:01:ee:95:62:d1:57:a2:82:4b:fb:8c:f9:
                    05:09:43:04:a0:ca:e6:60:d6:24:fd:3d:ad:e7:35:
                    b6:d2:a8:ae:71:ee:d9:1e:7d:dd:45:c5:20:15:db:
                    91:34:e4:31:2f:87:72:68:4d:27:d5:7e:a5:41:26:
                    9b:08:19:d5:1e:a2:49:0f:44:91:6e:91:7b:65:32:
                    94:43:9e:5e:10:b6:81:c9:1b:65:f3:a5:5a:2f:d4:
                    47:e9:85:98:d0:a2:62:73:b8:00:52:bd:8e:8a:f3:
                    e9:fd:5f:05:18:04:fc:7f:16:1a:5a:4d:ce:c4:ef:
                    56:fd:88:5a:c0:af:d2:87:58:26:b6:70:a2:26:57:
                    38:84:d5:56:1a:37:d4:82:ff:ed:8b:8d:89:34:a9:
                    f1:ae:b7:83:06:d9:be:1b:2e:0e:5e:44:ff:e3:cc:
                    29:3e:41:16:10:14:6a:19:f4:aa:e1:fc:39:9f:73:
                    23:68:b9:42:0e:fd:df:c1:0c:0e:89:d0:9a:c9:96:
                    49:eb:31:12:65:09:e7:03:9f:db:a0:30:07:15:39:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:E4:05:AD:22:4E:2F:42:61:CB:60:4C:6B:E7:18:76:C6:03:BF
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e31382e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:49:74:25:75:2e:b1:24:27:10:eb:39:01:88:50:f3:55:6a:
         27:2c:d8:14:f7:22:e6:fd:4c:b2:d1:bd:21:59:55:42:a1:95:
         b5:fd:03:8c:13:44:10:06:f4:ba:5e:f5:16:1a:54:27:31:ed:
         37:2b:b6:2d:4a:db:7b:f9:59:cb:3f:8c:ca:e1:02:ef:da:b8:
         8e:5b:2c:41:66:d1:06:c1:73:e6:3e:30:fa:e4:d4:17:de:ff:
         15:3e:a2:df:66:f7:65:f2:20:c1:61:36:80:64:d8:8d:e4:ec:
         af:ce:99:75:d8:61:d8:ec:df:10:22:06:7c:eb:6a:1c:73:53:
         57:41:34:bd:73:db:72:6d:5b:c8:7c:a8:ae:f3:b3:73:c1:63:
         85:7a:ac:ee:c5:9f:75:1f:bb:c2:eb:3f:af:51:4c:d3:18:a5:
         d5:87:81:4b:10:df:be:b3:36:14:ce:a9:a1:cf:42:78:ca:52:
         d8:73:f3:1c:0b:ec:1b:94:ef:bf:17:dc:6f:ae:66:c0:94:38:
         14:93:f2:f9:3a:81:f3:b7:a2:5c:54:65:cd:d7:c4:ff:f3:c6:
         89:e5:21:c2:f3:6b:18:77:e7:a1:82:a5:b3:94:5c:cb:c8:44:
         89:18:b6:aa:d3:77:6e:16:86:8c:5e:68:92:db:8b:dc:b5:a5:
         b3:d4:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:23 2025 by rpki-client