Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235342e302f32342d3234203d3e20323633373731.roa
File:                     3139302e3231362e3235342e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          5hSTwrfG56L5Tp4jIyVHljSdDB6RE5shiRrTGKWvw04=
Subject key identifier:   8D:DC:0C:DE:70:4C:70:38:C7:F5:B1:95:59:6C:09:C0:AF:95:22:B7
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       050042D74313001D31F5E8C787F80D42007727BE
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235342e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 04 Feb 2025 18:41:34 +0000
ROA not before:           Tue 04 Feb 2025 18:36:34 +0000
ROA not after:            Tue 03 Feb 2026 18:41:34 +0000
asID:                     263771
IP address blocks:        190.216.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:00:42:d7:43:13:00:1d:31:f5:e8:c7:87:f8:0d:42:00:77:27:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:34 2025 GMT
            Not After : Feb  3 18:41:34 2026 GMT
        Subject: CN=8DDC0CDE704C7038C7F5B195596C09C0AF9522B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:35:62:6e:41:9a:0a:6e:37:39:37:91:7b:
                    5c:80:80:7f:70:62:49:40:b5:93:94:d7:39:e5:a6:
                    00:36:78:1a:5a:a1:2d:bd:d9:c0:1c:74:c2:61:ef:
                    e8:77:8f:be:f4:8c:e4:46:92:30:66:30:a6:54:4f:
                    b0:08:da:3e:99:3a:7d:1e:4b:dc:5d:ee:6c:c6:9a:
                    f3:18:11:eb:e1:a7:02:31:1f:8b:79:20:e6:39:69:
                    7b:77:07:c1:59:24:92:12:21:00:7c:bf:6a:2d:e9:
                    6e:61:6b:70:a6:e3:1c:c4:63:0c:6d:39:f1:04:7d:
                    fb:b6:91:33:41:a1:37:3b:99:98:7f:ae:8e:49:ec:
                    dc:14:96:56:e7:fe:6a:08:54:e3:f7:10:88:2d:3a:
                    3c:1b:3f:d3:ce:cc:89:c2:54:c6:a3:1a:9d:96:a6:
                    df:c4:15:c0:ed:e7:53:e3:23:e1:b8:1b:32:70:29:
                    78:78:ef:5b:45:b1:dc:07:87:e7:22:f4:24:19:90:
                    8a:34:e8:a4:aa:1a:6d:ec:dd:6d:e8:0e:5c:53:d3:
                    94:92:5b:4d:bc:88:a9:a8:a2:d2:77:65:59:ea:43:
                    60:fe:7c:3e:72:e4:8e:a6:46:4d:d8:53:6c:4c:cd:
                    c2:48:06:ec:db:c9:7e:59:b2:a3:80:bb:35:8d:d3:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:0C:DE:70:4C:70:38:C7:F5:B1:95:59:6C:09:C0:AF:95:22:B7
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235342e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:87:c0:0a:fa:fb:14:c4:0e:fa:dc:cb:6f:f9:bd:36:c1:31:
         13:21:91:a2:cf:72:2b:62:b6:b0:2e:e9:33:ea:44:f4:26:c7:
         61:bb:2a:57:67:6f:62:79:85:8e:a5:d9:75:63:c9:0c:fe:f0:
         97:0f:dc:b6:75:8d:60:c4:99:ee:45:b1:55:2d:9b:57:eb:d1:
         5e:fc:c8:30:e4:5a:22:d7:8c:13:fd:bc:a9:8e:78:89:cb:26:
         80:a5:39:7e:93:7a:d0:3c:dc:96:34:d5:8d:ac:a0:3d:96:03:
         51:a8:3e:d8:f3:28:35:36:56:0e:e4:be:f0:23:60:27:ba:9f:
         2c:59:03:24:85:09:90:89:76:20:90:b5:a4:e8:3e:f0:7f:3e:
         97:72:ff:80:1d:92:41:59:13:c8:4c:41:00:80:e6:bd:43:76:
         c6:34:ab:cb:7e:98:33:11:b6:8a:b8:f5:71:e2:8d:7f:e7:3f:
         98:9e:21:e6:11:a3:ea:18:9d:b2:03:4e:c0:10:70:ac:99:c5:
         e3:18:d2:f4:c8:16:8a:43:c6:95:37:de:b0:d3:9e:ed:1a:83:
         2a:72:4e:8b:ce:5c:e7:18:fe:14:8b:18:17:28:88:9b:f6:65:
         4a:42:31:b2:c6:f7:f8:6d:37:18:d9:2e:ca:ff:6f:7e:7c:38:
         49:cb:b8:96
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUBQBC10MTAB0x9ejHh/gNQgB3J74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2MzRaFw0yNjAyMDMxODQxMzRaMDMxMTAvBgNV
BAMTKDhEREMwQ0RFNzA0QzcwMzhDN0Y1QjE5NTU5NkMwOUMwQUY5NTIyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipzVibkGaCm43OTeRe1yAgH9w
YklAtZOU1znlpgA2eBpaoS292cAcdMJh7+h3j770jORGkjBmMKZUT7AI2j6ZOn0e
S9xd7mzGmvMYEevhpwIxH4t5IOY5aXt3B8FZJJISIQB8v2ot6W5ha3Cm4xzEYwxt
OfEEffu2kTNBoTc7mZh/ro5J7NwUllbn/moIVOP3EIgtOjwbP9POzInCVMajGp2W
pt/EFcDt51PjI+G4GzJwKXh471tFsdwHh+ci9CQZkIo06KSqGm3s3W3oDlxT05SS
W028iKmootJ3ZVnqQ2D+fD5y5I6mRk3YU2xMzcJIBuzbyX5ZsqOAuzWN0zstAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUjdwM3nBMcDjH9bGVWWwJwK+VIrcwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM2MmUzMjM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM3MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
2P4wDQYJKoZIhvcNAQELBQADggEBAEWHwAr6+xTEDvrcy2/5vTbBMRMhkaLPciti
trAu6TPqRPQmx2G7Kldnb2J5hY6l2XVjyQz+8JcP3LZ1jWDEme5FsVUtm1fr0V78
yDDkWiLXjBP9vKmOeInLJoClOX6TetA83JY01Y2soD2WA1GoPtjzKDU2Vg7kvvAj
YCe6nyxZAySFCZCJdiCQtaToPvB/Ppdy/4AdkkFZE8hMQQCA5r1DdsY0q8t+mDMR
toq49XHijX/nP5ieIeYRo+oYnbIDTsAQcKyZxeMY0vTIFopDxpU33rDTnu0agypy
TovOXOcY/hSLGBcoiJv2ZUpCMbLG9/htNxjZLsr/b358OEnLuJY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:41:06 2025 by rpki-client