Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32342e302f32342d3234203d3e203230323037.roa
File:                     3139302e3231362e32342e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          +s0L1o+HzuIXIBamnTu3fUGlDrAokAFgYTO1AlwI6wk=
Subject key identifier:   4F:04:89:FE:8B:9C:08:59:F1:6C:70:7A:DF:F3:07:5A:59:58:D8:27
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       6AADB7B90E0CE74B830AB12CF25687C24CF3D474
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32342e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:41:41 +0000
ROA not before:           Tue 04 Feb 2025 18:36:41 +0000
ROA not after:            Tue 03 Feb 2026 18:41:41 +0000
asID:                     20207
IP address blocks:        190.216.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 20:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ad:b7:b9:0e:0c:e7:4b:83:0a:b1:2c:f2:56:87:c2:4c:f3:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:41 2025 GMT
            Not After : Feb  3 18:41:41 2026 GMT
        Subject: CN=4F0489FE8B9C0859F16C707ADFF3075A5958D827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:01:55:77:68:66:8d:54:7d:ae:f8:8c:73:
                    e2:58:29:e6:0a:e2:14:a4:e2:d8:08:8d:5b:fc:b5:
                    84:56:5c:1e:e4:ea:7d:ed:45:b0:9e:7a:47:13:d4:
                    af:90:a5:d9:58:d4:bd:d8:f0:ef:61:ce:91:d0:11:
                    f6:6b:60:f2:ed:df:c2:9d:ed:26:4f:79:19:15:9e:
                    a5:f4:c9:06:0c:de:9c:e7:94:89:d8:18:8f:53:bd:
                    37:5a:69:48:87:cc:e1:89:f0:92:c9:0b:79:0f:75:
                    c6:86:fc:f5:dd:e3:02:b6:6e:07:f7:ba:56:cb:fb:
                    87:40:53:c0:12:f2:09:ca:25:7b:15:1d:34:bc:15:
                    66:c7:23:71:c4:52:24:61:96:4e:db:b9:77:b8:f1:
                    7e:e2:2b:7a:be:e2:c1:54:cd:9b:b1:52:4c:13:b0:
                    8d:d2:59:9a:07:3c:23:52:95:cf:77:ea:6a:58:fb:
                    29:ca:b4:eb:93:9a:75:36:00:1d:f3:76:86:1b:3f:
                    ca:27:d8:01:c8:d2:41:fd:90:30:c9:cb:25:42:f5:
                    a0:a4:58:cb:d5:bd:c8:f4:dd:a8:88:77:e2:26:cd:
                    96:7d:d6:e6:3f:ed:1b:58:d0:54:3b:74:cc:7b:a9:
                    75:39:65:4d:60:7f:37:d0:92:52:ff:e7:e0:51:bf:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:89:FE:8B:9C:08:59:F1:6C:70:7A:DF:F3:07:5A:59:58:D8:27
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32342e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:88:2d:ab:71:c6:ce:43:0d:2f:5d:a1:07:c4:f2:bd:3d:09:
         d9:b9:dd:f9:09:1a:99:7b:9f:11:58:a8:eb:a0:4d:c1:98:30:
         58:f1:1e:dc:ad:d2:f2:3a:70:88:ec:d3:28:12:5c:95:97:ee:
         35:9c:48:f6:1f:4e:74:69:cf:e2:aa:2e:5b:a0:cb:95:42:9a:
         18:da:e7:f4:80:81:b1:c3:6c:29:9f:d2:70:5f:c0:8d:c9:4a:
         fb:32:f3:18:ac:ac:a2:11:ae:04:0d:19:31:14:45:6e:26:8c:
         18:18:ad:1f:e3:74:31:ab:32:17:51:cb:42:e1:ef:bb:52:7f:
         93:aa:bc:90:d6:ff:31:5d:2c:7f:75:9b:29:89:8e:ff:8e:f2:
         3b:0c:38:cb:86:e0:1f:ad:af:ad:b4:ad:65:47:6b:78:25:e7:
         c4:c7:c8:4f:95:ff:2e:86:90:9b:e7:0c:e9:a8:8d:37:93:3f:
         08:fd:ff:8c:fc:ff:d2:a6:f2:3f:e7:ff:69:8f:0f:15:b7:5a:
         6b:4e:9d:f6:02:9a:9c:f0:f0:47:ae:68:a9:4c:45:d8:6a:0f:
         26:45:b3:87:5f:15:7f:e9:38:73:d5:34:d9:44:0a:8a:9f:11:
         36:ec:36:b2:75:2c:3c:4d:99:6b:c0:04:bf:c1:29:e7:2d:91:
         6d:a2:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:55:25 2025 by rpki-client