Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32362e38302f32382d3238203d3e203532343434.roa
File:                     3139302e3231362e32362e38302f32382d3238203d3e203532343434.roa (raw, json)
Hash identifier:          DNf0MvpclO6WKJhWsUq624qyb+W1IK0d7ocNg7fGjh8=
Subject key identifier:   28:A5:62:C9:6C:BE:AE:B4:1B:39:35:69:EB:53:1E:EB:B2:92:0C:11
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       7769DAD720A832A9C26D3D631946F29058263C6A
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32362e38302f32382d3238203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:41:33 +0000
ROA not before:           Tue 04 Feb 2025 18:36:33 +0000
ROA not after:            Tue 03 Feb 2026 18:41:33 +0000
asID:                     52444
IP address blocks:        190.216.26.80/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Feb 2025 23:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:69:da:d7:20:a8:32:a9:c2:6d:3d:63:19:46:f2:90:58:26:3c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:33 2025 GMT
            Not After : Feb  3 18:41:33 2026 GMT
        Subject: CN=28A562C96CBEAEB41B393569EB531EEBB2920C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:e4:03:2a:92:5e:82:b9:ad:e6:8e:9e:7b:
                    82:a7:95:5c:30:7a:af:70:24:20:e5:c1:b0:51:80:
                    45:28:60:1d:c4:be:92:7b:5b:60:53:c9:c2:1b:94:
                    10:84:2b:ae:9c:31:3e:1c:f1:ab:c4:62:11:4e:ce:
                    a6:a2:38:1c:73:0d:84:d8:6c:ad:ca:7e:35:be:c3:
                    4a:38:08:d8:a3:ad:aa:fc:18:a7:0a:19:91:29:40:
                    50:f0:9e:64:39:4d:8b:86:53:2b:39:90:5c:1f:9a:
                    9f:7d:9c:6a:a6:3d:ca:bb:8d:13:8c:80:32:05:15:
                    f8:a1:b1:cc:7c:2e:c7:aa:17:f6:ee:c6:19:fc:62:
                    f5:6b:ba:32:72:05:73:be:12:b7:23:6f:ca:d8:6d:
                    74:43:0d:f7:38:14:32:2b:d4:31:b2:e3:04:6e:ba:
                    67:35:28:10:8c:20:58:13:ca:62:ed:0f:8e:e6:6f:
                    95:fe:33:e1:dd:46:4c:b0:71:1d:17:5b:ef:a1:de:
                    cb:cb:a7:d7:e9:32:b5:c4:ef:af:c3:11:7c:56:fa:
                    21:4e:54:94:82:6a:ad:9c:b5:31:4f:60:2b:e8:19:
                    69:e5:90:51:c7:f6:57:3d:c4:eb:f2:44:6e:c2:70:
                    39:d9:bf:82:24:be:ed:4f:3e:ce:12:14:03:2a:39:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:62:C9:6C:BE:AE:B4:1B:39:35:69:EB:53:1E:EB:B2:92:0C:11
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32362e38302f32382d3238203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.26.80/28

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:49:75:11:1d:32:a8:68:7a:00:95:27:1b:1f:7b:71:15:
         07:f2:21:32:13:4b:d6:14:87:79:45:7c:58:cc:90:46:34:ac:
         90:da:f8:99:c7:c2:71:56:5a:82:fb:c5:b1:49:bd:1d:50:e2:
         28:dc:fd:44:fb:02:c8:c7:51:f2:47:c9:94:d5:28:4d:82:a8:
         99:84:97:60:f5:4d:f3:a4:87:7f:09:96:01:48:11:0d:c4:93:
         da:31:37:73:2d:96:af:04:a9:13:88:49:47:06:c6:8b:79:b7:
         4d:68:87:0d:54:fb:86:2d:30:b7:dd:e4:bf:02:cd:63:10:79:
         14:be:8f:ea:04:cc:9e:cb:99:38:1e:64:0c:af:78:c9:3d:95:
         e4:9e:c0:7e:0d:74:0d:36:07:b8:39:2e:86:79:38:2e:d4:6b:
         c8:8d:e8:99:6f:9f:c8:b3:81:8f:93:4f:b8:19:cd:dd:a6:f6:
         56:29:0d:fd:8e:54:c0:21:8f:1b:16:6a:6a:83:49:28:72:f2:
         51:35:d0:8b:fe:83:71:82:c8:65:5f:3b:96:90:2e:ce:96:4e:
         2c:16:29:59:c4:4a:c0:54:7a:f6:c0:b6:77:75:5f:13:3e:53:
         3d:fa:f2:e6:94:44:87:d6:24:21:57:85:e9:56:11:64:10:e9:
         75:a1:88:91
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUd2na1yCoMqnCbT1jGUbykFgmPGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2MzNaFw0yNjAyMDMxODQxMzNaMDMxMTAvBgNV
BAMTKDI4QTU2MkM5NkNCRUFFQjQxQjM5MzU2OUVCNTMxRUVCQjI5MjBDMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkeQDKpJegrmt5o6ee4KnlVww
eq9wJCDlwbBRgEUoYB3EvpJ7W2BTycIblBCEK66cMT4c8avEYhFOzqaiOBxzDYTY
bK3KfjW+w0o4CNijrar8GKcKGZEpQFDwnmQ5TYuGUys5kFwfmp99nGqmPcq7jROM
gDIFFfihscx8LseqF/buxhn8YvVrujJyBXO+Ercjb8rYbXRDDfc4FDIr1DGy4wRu
umc1KBCMIFgTymLtD47mb5X+M+HdRkywcR0XW++h3svLp9fpMrXE76/DEXxW+iFO
VJSCaq2ctTFPYCvoGWnlkFHH9lc9xOvyRG7CcDnZv4Ikvu1PPs4SFAMqOYgVAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUKKViyWy+rrQbOTVp61Me67KSDBEwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM2MmUzMjM2MmUz
ODMwMmYzMjM4MmQzMjM4MjAzZDNlMjAzNTMyMzQzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEvtga
UDANBgkqhkiG9w0BAQsFAAOCAQEAdT5JdREdMqhoegCVJxsfe3EVB/IhMhNL1hSH
eUV8WMyQRjSskNr4mcfCcVZagvvFsUm9HVDiKNz9RPsCyMdR8kfJlNUoTYKomYSX
YPVN86SHfwmWAUgRDcST2jE3cy2WrwSpE4hJRwbGi3m3TWiHDVT7hi0wt93kvwLN
YxB5FL6P6gTMnsuZOB5kDK94yT2V5J7Afg10DTYHuDkuhnk4LtRryI3omW+fyLOB
j5NPuBnN3ab2VikN/Y5UwCGPGxZqaoNJKHLyUTXQi/6DcYLIZV87lpAuzpZOLBYp
WcRKwFR69sC2d3VfEz5TPfry5pREh9YkIVeF6VYRZBDpdaGIkQ==
-----END CERTIFICATE-----
Generated at Sun Feb 9 14:41:31 2025 by rpki-client