Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa
File:                     3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          +94Lf/VS+hgziE2PuKO6r3HPxUMmlO8VyXUpvmCOqe0=
Subject key identifier:   D2:7F:B1:A2:7C:11:3C:D1:5A:91:2E:FF:A9:F7:BC:61:99:40:D7:8A
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       260B9E92C44E9FB0F76CAD60E81ED0907D7F4056
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 04 Feb 2025 18:41:30 +0000
ROA not before:           Tue 04 Feb 2025 18:36:30 +0000
ROA not after:            Tue 03 Feb 2026 18:41:30 +0000
asID:                     263771
IP address blocks:        190.216.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0b:9e:92:c4:4e:9f:b0:f7:6c:ad:60:e8:1e:d0:90:7d:7f:40:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:30 2025 GMT
            Not After : Feb  3 18:41:30 2026 GMT
        Subject: CN=D27FB1A27C113CD15A912EFFA9F7BC619940D78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:d2:c9:d4:9c:45:7b:62:ff:49:20:22:bd:
                    b3:b5:d3:ca:ab:b7:e5:e6:5f:c6:35:8c:07:72:28:
                    b4:c1:81:8f:32:59:82:84:38:37:ad:81:09:48:94:
                    5d:ea:0c:1f:b1:37:09:5b:a3:31:ff:e8:c4:7b:35:
                    f9:51:7e:4a:bb:a5:49:05:57:b5:ee:b0:3a:39:f2:
                    b0:f8:1b:6c:85:c4:03:7b:e6:12:36:1b:31:39:35:
                    67:4e:ba:a9:29:e5:25:cd:16:50:04:a1:52:ce:98:
                    87:5f:ca:18:0e:e3:3d:56:0f:79:03:1c:9f:8a:6e:
                    96:9c:07:70:0a:42:6e:0c:e1:a9:76:0c:d8:0e:cd:
                    60:27:4a:4f:0e:15:60:92:d8:c7:02:ee:31:6e:e2:
                    a9:c9:39:11:b6:9c:a2:a6:24:70:05:e8:cd:51:cb:
                    5b:a0:a8:65:55:53:54:ed:c9:9c:09:5b:b5:aa:3d:
                    3c:19:7b:5d:f9:92:f9:71:cb:a4:ad:d4:b6:73:19:
                    14:12:d8:db:93:6d:08:6d:0d:5e:2b:ef:b9:21:50:
                    6d:34:63:98:a8:7a:8a:9d:48:17:65:b5:d1:32:ea:
                    78:c5:41:53:d7:a7:bb:33:8d:3f:18:b3:7e:42:be:
                    52:cf:f6:53:48:b5:c1:8f:fc:5f:dc:d4:e7:0f:25:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7F:B1:A2:7C:11:3C:D1:5A:91:2E:FF:A9:F7:BC:61:99:40:D7:8A
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:87:35:1e:78:6e:a0:de:b5:63:80:00:5c:0d:2d:51:6e:
         7c:eb:82:a8:a8:87:0a:8a:83:cf:6c:cf:a0:cd:dc:31:7a:70:
         97:b0:54:11:49:01:45:be:02:32:6a:6a:4b:e4:a4:98:c9:6b:
         5e:69:2b:43:96:90:9a:66:10:2c:bb:a3:3a:c9:f2:d1:49:bd:
         22:cf:b6:09:8f:a6:34:91:8e:b0:26:f7:0a:8e:fb:fd:9b:8f:
         cd:70:a0:7d:24:da:4d:84:36:c3:5a:83:08:8d:40:91:4e:93:
         b6:dc:28:93:1a:36:f2:eb:75:b8:ad:b5:92:00:de:8b:b4:70:
         17:c8:8c:50:10:f4:e9:b5:4f:03:f4:59:8c:c4:4c:f6:50:b6:
         3e:fd:d1:10:b8:53:08:e4:27:d4:bc:7f:22:c3:aa:c7:e6:38:
         1f:67:47:d1:05:d8:b5:18:c5:95:a6:62:e8:bd:cd:d2:2b:13:
         d6:04:a6:5c:66:c2:5e:dd:e7:72:f0:10:6b:11:0b:9f:f6:ac:
         1a:14:52:2c:11:c1:0b:dc:0d:15:43:fa:d9:be:35:a9:3e:ea:
         d0:48:3b:56:79:f0:59:27:8e:74:0f:57:8a:9c:1f:ee:68:0f:
         b0:50:8f:49:12:bd:ae:11:d7:20:83:cc:01:bd:d3:56:40:bb:
         92:f2:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:41:05 2025 by rpki-client