Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3234382e302f32342d3234203d3e203238303132.roa
File:                     3139302e3231362e3234382e302f32342d3234203d3e203238303132.roa (raw, json)
Hash identifier:          jXi3lsVJim1pcyRadWS+OCabKPAihBAa5s4KaJvDNXc=
Subject key identifier:   8A:88:26:73:FE:4C:DB:6A:61:51:84:53:A2:7D:BC:77:0B:5B:2D:2E
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       461397EC0B96C7869CD83BDC8D34E20DC5E26A41
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3234382e302f32342d3234203d3e203238303132.roa
Signing time:             Tue 04 Feb 2025 18:41:33 +0000
ROA not before:           Tue 04 Feb 2025 18:36:33 +0000
ROA not after:            Tue 03 Feb 2026 18:41:33 +0000
asID:                     28012
IP address blocks:        190.216.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:97:ec:0b:96:c7:86:9c:d8:3b:dc:8d:34:e2:0d:c5:e2:6a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:33 2025 GMT
            Not After : Feb  3 18:41:33 2026 GMT
        Subject: CN=8A882673FE4CDB6A61518453A27DBC770B5B2D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:8d:f6:79:fe:f6:25:cb:d9:c3:97:3c:fd:
                    47:7f:3e:c8:74:3b:8b:7a:bd:f4:26:9d:c9:86:da:
                    e7:17:c2:7e:04:12:3c:a9:f5:df:f6:8e:de:ee:ad:
                    ab:47:09:3c:ac:6c:69:67:6b:51:9d:55:60:7d:a0:
                    32:34:3a:25:2a:99:52:13:32:45:ed:3c:e2:b3:17:
                    24:f2:06:ed:b5:27:3a:26:11:0b:28:a4:3f:bc:99:
                    08:3d:05:a2:dc:c3:c5:2f:cd:b9:96:b0:c9:c1:26:
                    4c:89:8c:f0:46:1a:0f:fc:cd:f1:b0:95:8f:5d:4b:
                    85:c3:17:06:95:68:b1:44:5d:72:2a:41:7b:1c:d6:
                    80:01:2d:5e:ea:31:a3:5b:81:9d:c0:9f:e1:40:79:
                    2d:64:93:22:ba:1b:43:ce:8d:21:20:fc:67:8d:1c:
                    67:c1:1d:e5:ac:ae:09:79:f5:1a:b0:61:c9:84:84:
                    5c:f1:64:7e:1e:1a:1a:88:e2:4d:fc:b1:ee:7e:b2:
                    67:7e:27:22:cf:0e:58:41:5e:99:cb:75:0b:f9:36:
                    fc:94:6a:6b:5f:6d:86:6d:1a:e1:b6:7d:27:e5:75:
                    45:a2:06:15:98:95:a2:d5:55:dd:a0:de:e6:ee:47:
                    f6:c4:ed:ab:c6:8b:b1:93:4f:05:50:5f:5e:a5:f5:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:26:73:FE:4C:DB:6A:61:51:84:53:A2:7D:BC:77:0B:5B:2D:2E
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3234382e302f32342d3234203d3e203238303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:fe:b1:a9:8d:c2:66:6d:f5:95:5d:db:b6:90:ad:6a:a2:
         21:f5:f4:b6:0d:74:f4:5e:9c:a2:e2:e7:c4:f3:f5:66:75:be:
         ef:20:fa:5d:86:1a:c7:0f:ea:ce:eb:7a:d3:2f:63:ac:02:8a:
         f2:a5:3d:a3:d1:49:23:31:54:ac:20:10:ad:22:9f:63:78:dd:
         2d:0b:9d:53:7f:5d:42:8c:2a:e8:48:5e:c2:6e:bf:01:f3:56:
         5e:07:b7:ff:aa:57:8b:d5:56:85:f6:2b:94:ef:72:2f:9b:97:
         73:28:71:6c:fa:62:07:d9:ff:ef:bc:a6:16:75:90:77:e1:a3:
         fe:dc:87:b7:dc:10:59:04:f1:97:93:e5:6a:bf:79:31:5a:1b:
         4a:db:9c:e4:a1:dc:e9:b8:89:e2:ef:2d:01:38:d9:a9:74:79:
         b3:9c:0b:45:7d:57:c7:ab:43:d8:99:c0:bf:57:8e:6b:f3:ab:
         0c:56:4c:20:62:6e:95:3d:e6:fe:5f:ff:c2:03:29:f9:1a:c1:
         46:18:98:a1:11:57:c1:dc:99:22:42:97:9a:b2:55:29:ea:ab:
         72:db:2c:8c:f8:02:6f:c9:71:e9:ad:94:b8:d9:dd:98:d8:b5:
         54:a4:a9:49:93:3f:87:c0:8d:d6:68:97:62:a8:fe:b8:42:76:
         a6:df:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:41:05 2025 by rpki-client