Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa
File:                     3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          oKFIPEHAjIgzLIewYW6Ql8mcfBOmVkL4mYTZN+2Fa4Y=
Subject key identifier:   F9:C9:58:90:AA:96:D3:57:64:3D:67:96:CD:3A:84:74:AF:0C:7B:65
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       451C7E2BB97F41988921EB9037FEED7F6DD40366
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa
Signing time:             Tue 04 Feb 2025 18:41:44 +0000
ROA not before:           Tue 04 Feb 2025 18:36:44 +0000
ROA not after:            Tue 03 Feb 2026 18:41:44 +0000
asID:                     262187
IP address blocks:        190.216.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1c:7e:2b:b9:7f:41:98:89:21:eb:90:37:fe:ed:7f:6d:d4:03:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:44 2025 GMT
            Not After : Feb  3 18:41:44 2026 GMT
        Subject: CN=F9C95890AA96D357643D6796CD3A8474AF0C7B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2c:3c:64:c4:c3:7d:f7:c2:bd:e4:39:3b:40:
                    bd:23:e6:c9:05:af:8c:60:fc:00:8c:3e:14:93:ce:
                    73:25:eb:61:2e:d1:af:de:76:2f:3e:c3:f7:53:d0:
                    4c:a2:22:63:75:95:fe:8e:b9:97:00:51:83:83:e8:
                    10:b3:ce:73:d6:08:d6:81:e7:40:75:aa:97:b2:d2:
                    c5:ad:28:f1:86:97:b0:7d:83:cd:82:36:2b:40:f5:
                    0f:59:99:09:4e:31:18:ed:eb:5b:2d:2d:3e:75:eb:
                    2d:0c:50:48:6b:ef:42:3d:7b:00:11:16:75:cd:06:
                    45:e4:04:58:1f:2a:13:85:d0:cf:ee:c3:c7:69:4c:
                    a7:a8:c8:a6:96:96:55:3d:60:7a:9f:46:ab:1b:37:
                    9b:40:62:b3:ed:16:39:24:22:bb:fa:5b:b1:e4:6a:
                    8d:70:ab:33:f7:8d:a5:08:8d:1b:0a:c4:18:36:57:
                    d6:91:52:46:33:23:2c:85:28:db:5e:25:24:52:bf:
                    38:49:34:c1:7d:3a:9b:7c:2e:3f:76:cb:02:e0:e9:
                    c9:05:f6:4f:7c:03:f0:48:0e:af:f4:d4:60:c5:75:
                    24:b3:47:45:a1:21:dd:00:81:31:58:c2:da:3a:f9:
                    5b:fb:fc:eb:3c:01:16:a4:a3:e3:29:f6:df:d3:99:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C9:58:90:AA:96:D3:57:64:3D:67:96:CD:3A:84:74:AF:0C:7B:65
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3c:63:9a:10:d3:c2:b1:f6:0d:28:bf:1c:dc:33:db:dc:1d:
         4c:07:05:50:af:48:04:0e:f8:5f:23:69:8f:c0:4c:67:c3:60:
         76:80:7d:e0:36:72:fb:5a:f5:7c:9e:82:a9:83:b2:01:ab:6a:
         c3:f5:35:8c:6c:4b:da:8a:c7:ad:ad:8d:b0:0f:cb:92:a3:47:
         cb:21:8f:a3:84:a3:89:43:ee:bd:e8:35:cc:b4:cf:7d:47:2e:
         ef:51:01:a0:e7:42:c0:8e:fc:ca:7f:92:ca:d2:bc:f0:26:ed:
         28:fa:bd:39:01:48:d7:ab:99:43:2f:07:4f:18:36:91:d7:39:
         1b:03:3e:57:d2:1e:a0:d9:89:06:ec:a0:01:5f:8a:a1:98:f9:
         6b:cf:87:c9:aa:4e:50:9c:b1:41:51:f5:3f:ab:46:b0:ec:71:
         28:ba:ef:aa:71:c7:39:65:09:e0:a0:a8:f4:4c:64:de:74:2b:
         cb:23:d2:09:a8:cd:a5:25:f0:63:73:c5:e2:90:26:c3:f1:39:
         a0:1e:23:20:57:3d:07:4e:4a:12:1f:42:77:17:37:b8:c9:57:
         f7:2d:57:26:2d:43:2c:b1:a0:3e:b7:b9:bc:27:14:6f:89:54:
         88:9e:01:20:c3:d2:2b:5e:27:f3:d8:90:87:e6:f5:6f:b7:1d:
         a2:47:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:28 2025 by rpki-client