Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e372e3234302f32382d3238203d3e20323636373639.roa
File:                     3139302e3231362e372e3234302f32382d3238203d3e20323636373639.roa (raw, json)
Hash identifier:          AeLLg/XrzbDMZqzQ9sXne8iHAcdzzAan/h+PNOOpOMA=
Subject key identifier:   1A:63:E6:72:88:8A:71:E7:F4:05:90:DF:7A:EC:A5:D4:5B:1B:8C:BB
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       59F1C455C67F94887773245F01FEC7BC773F76BB
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e372e3234302f32382d3238203d3e20323636373639.roa
Signing time:             Tue 04 Feb 2025 18:41:25 +0000
ROA not before:           Tue 04 Feb 2025 18:36:25 +0000
ROA not after:            Tue 03 Feb 2026 18:41:25 +0000
asID:                     266769
IP address blocks:        190.216.7.240/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f1:c4:55:c6:7f:94:88:77:73:24:5f:01:fe:c7:bc:77:3f:76:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:25 2025 GMT
            Not After : Feb  3 18:41:25 2026 GMT
        Subject: CN=1A63E672888A71E7F40590DF7AECA5D45B1B8CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:52:b6:7e:54:46:11:48:8f:66:05:27:6c:
                    d8:35:d7:8b:ee:a7:e9:80:b0:1d:ee:52:50:19:14:
                    9a:60:06:c9:c1:2b:ef:53:35:75:64:d5:39:2c:55:
                    9f:a9:a1:08:f0:70:2f:26:0b:6f:d1:cf:5e:f8:83:
                    92:5e:c6:f3:0a:f2:2a:d7:a4:d2:b4:43:74:a0:0c:
                    2c:ca:66:cf:8c:4b:d0:ed:db:b8:c8:b3:2a:e8:98:
                    85:aa:c2:8a:08:2d:60:b5:9b:71:4b:6b:88:a3:11:
                    3a:ca:23:e3:3a:bc:79:89:49:62:76:1a:1f:cd:b8:
                    68:a1:e8:dc:58:89:41:a5:91:34:e7:40:03:aa:59:
                    bb:73:b5:d7:a2:49:4b:15:91:f4:4e:30:9c:06:9e:
                    c4:f1:6a:0b:cb:ce:75:ff:ce:46:03:28:1d:b7:a7:
                    b9:e5:04:be:93:85:2d:a6:29:d0:6b:f5:0c:8c:c3:
                    d6:0f:f1:60:97:8f:ac:2e:54:73:f1:84:4b:e5:c5:
                    ff:90:d1:17:55:58:ec:fb:79:4c:68:bf:16:57:16:
                    8b:63:6a:28:dc:65:96:95:6e:b5:b2:8e:a0:20:37:
                    58:a3:9d:92:5f:60:49:6a:eb:99:ac:06:56:3c:b5:
                    d6:cb:26:a1:a8:d2:62:0f:f5:62:5a:21:d4:99:95:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:E6:72:88:8A:71:E7:F4:05:90:DF:7A:EC:A5:D4:5B:1B:8C:BB
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e372e3234302f32382d3238203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.7.240/28

    Signature Algorithm: sha256WithRSAEncryption
         a5:f2:56:92:ae:c8:9f:7c:69:05:6a:7f:9d:d2:40:4b:26:12:
         5d:26:1e:4a:c3:8f:e8:5a:76:6a:b2:96:22:57:b0:d8:46:6d:
         8b:eb:e2:35:e8:bc:d9:5d:29:2b:f4:82:78:1f:c8:8a:53:7b:
         a0:69:65:08:f6:dc:b6:f3:f5:c7:9d:31:3e:b6:3f:97:11:00:
         8b:13:4d:6b:ad:38:2f:b6:a6:b1:83:98:f7:65:f7:5a:14:7f:
         4b:e2:7f:18:7c:1a:f9:cf:60:97:4a:3a:51:93:ed:ef:75:ca:
         d8:47:12:32:fa:6f:1b:d8:ca:00:9d:8b:de:36:47:98:6a:4f:
         e2:5f:09:77:31:16:61:ad:74:40:d1:19:ba:11:0a:b2:99:4b:
         55:66:a8:f9:b4:d1:b7:04:04:70:72:ec:1e:51:6f:8b:e9:a7:
         53:72:cf:92:b1:e3:ee:0c:94:98:bf:cc:e3:ca:f8:29:11:f0:
         f4:cd:13:c6:1c:ed:1f:4d:b7:2d:9f:b9:61:79:c9:2c:fa:a1:
         e3:60:4d:f9:b2:8e:0d:4b:ab:73:0d:79:64:32:0d:dd:0d:7b:
         eb:b1:23:3e:7f:d1:fd:32:d3:63:de:44:c9:2d:47:48:fe:a7:
         f4:12:68:c1:8f:1e:19:50:88:0c:ad:36:d1:fd:e2:3f:cf:fd:
         2c:2f:90:f7
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUWfHEVcZ/lIh3cyRfAf7HvHc/drswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2MjVaFw0yNjAyMDMxODQxMjVaMDMxMTAvBgNV
BAMTKDFBNjNFNjcyODg4QTcxRTdGNDA1OTBERjdBRUNBNUQ0NUIxQjhDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpFK2flRGEUiPZgUnbNg114vu
p+mAsB3uUlAZFJpgBsnBK+9TNXVk1TksVZ+poQjwcC8mC2/Rz174g5JexvMK8irX
pNK0Q3SgDCzKZs+MS9Dt27jIsyromIWqwooILWC1m3FLa4ijETrKI+M6vHmJSWJ2
Gh/NuGih6NxYiUGlkTTnQAOqWbtztdeiSUsVkfROMJwGnsTxagvLznX/zkYDKB23
p7nlBL6ThS2mKdBr9QyMw9YP8WCXj6wuVHPxhEvlxf+Q0RdVWOz7eUxovxZXFotj
aijcZZaVbrWyjqAgN1ijnZJfYElq65msBlY8tdbLJqGo0mIP9WJaIdSZlcWhAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUGmPmcoiKcef0BZDfeuyl1FsbjLswHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM2MmUzNzJlMzIz
NDMwMmYzMjM4MmQzMjM4MjAzZDNlMjAzMjM2MzYzNzM2Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQS+
2AfwMA0GCSqGSIb3DQEBCwUAA4IBAQCl8laSrsiffGkFan+d0kBLJhJdJh5Kw4/o
WnZqspYiV7DYRm2L6+I16LzZXSkr9IJ4H8iKU3ugaWUI9ty28/XHnTE+tj+XEQCL
E01rrTgvtqaxg5j3ZfdaFH9L4n8YfBr5z2CXSjpRk+3vdcrYRxIy+m8b2MoAnYve
NkeYak/iXwl3MRZhrXRA0Rm6EQqymUtVZqj5tNG3BARwcuweUW+L6adTcs+SsePu
DJSYv8zjyvgpEfD0zRPGHO0fTbctn7lhecks+qHjYE35so4NS6tzDXlkMg3dDXvr
sSM+f9H9MtNj3kTJLUdI/qf0EmjBjx4ZUIgMrTbR/eI/z/0sL5D3
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:22:22 2025 by rpki-client