Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa
File:                     3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa (raw, json)
Hash identifier:          MWUT69uAzqWFP3iWL/OAzVRMUM9o23RrzzG1QzUStQQ=
Subject key identifier:   FD:2B:10:A0:20:7A:35:54:F2:11:C6:73:12:1C:0E:77:3C:74:25:97
Certificate issuer:       /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial:       3C6A618F1185B55ECF7506F8A54FE08659792509
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa
Signing time:             Tue 04 Feb 2025 18:27:25 +0000
ROA not before:           Tue 04 Feb 2025 18:22:25 +0000
ROA not after:            Tue 03 Feb 2026 18:27:25 +0000
asID:                     60022
IP address blocks:        190.121.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6a:61:8f:11:85:b5:5e:cf:75:06:f8:a5:4f:e0:86:59:79:25:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
        Validity
            Not Before: Feb  4 18:22:25 2025 GMT
            Not After : Feb  3 18:27:25 2026 GMT
        Subject: CN=FD2B10A0207A3554F211C673121C0E773C742597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:48:1d:ab:7b:94:86:71:a1:5a:2e:98:de:
                    60:ca:b9:cb:7d:27:aa:11:5f:c1:84:82:30:2f:2b:
                    bd:6b:5a:56:8f:2d:f8:55:d1:e4:27:28:42:45:c1:
                    ec:b7:f9:98:23:e0:39:43:92:4f:9d:42:fe:03:15:
                    d3:e7:bd:01:88:ce:69:cf:0f:ce:dc:0f:00:d1:04:
                    33:40:28:15:2e:98:83:a4:a8:15:9c:bc:53:a6:63:
                    cb:02:c9:de:64:42:83:aa:ac:56:d4:e0:e7:96:75:
                    3e:57:fd:32:9c:19:ac:9a:74:67:97:fb:aa:0b:45:
                    7d:1e:eb:d5:6e:e6:67:97:36:39:91:f8:db:11:6a:
                    b7:39:59:d4:89:41:a8:75:19:2a:81:fa:50:ab:f7:
                    b2:ef:3d:bd:b7:6c:81:32:0d:6b:00:66:19:d6:4b:
                    49:97:11:f2:05:96:51:dc:8a:ed:b5:29:62:db:f3:
                    3e:3e:67:1e:a0:82:5f:00:7a:fa:7b:22:a0:f8:e5:
                    7e:aa:be:f4:98:79:5f:3e:29:c7:11:c1:34:6b:2e:
                    7b:be:f9:92:ef:9c:7c:c2:5a:1d:50:8d:29:7f:31:
                    15:38:6c:70:2e:9c:bb:9d:0f:fe:d2:43:f7:0b:62:
                    d9:60:1d:6a:09:58:d2:cd:a9:96:f1:9e:57:bf:5a:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2B:10:A0:20:7A:35:54:F2:11:C6:73:12:1C:0E:77:3C:74:25:97
            X509v3 Authority Key Identifier:
                keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:ce:d9:2b:57:28:30:47:b7:0c:5e:ef:d1:40:97:4f:02:
         75:96:32:e9:71:a5:37:de:16:fd:a1:86:69:bb:f0:32:9a:bc:
         5e:c1:17:10:b9:6f:f0:ae:92:bd:c1:30:d2:30:1c:82:e3:59:
         2c:35:b6:c4:fe:45:7f:e3:92:3a:31:ef:bf:fd:19:db:b4:95:
         87:bc:34:a2:49:11:10:71:b7:53:57:c2:20:00:b0:8d:0d:44:
         80:aa:de:21:a0:73:8f:e0:e9:d0:b3:3d:77:b5:7f:6d:6e:86:
         3a:70:b4:10:25:ab:dd:0d:8a:a8:0a:bd:eb:0b:69:13:72:45:
         f4:7d:c0:c5:57:f4:e4:b3:0a:cc:75:75:9d:00:7d:00:34:b9:
         3b:b8:55:e2:5f:e2:e9:b8:bf:5d:7b:6c:b1:aa:d1:9f:d1:b7:
         1f:6c:56:32:6f:96:f0:48:74:d2:10:bd:2a:71:3e:de:bc:b2:
         57:92:11:27:f6:e2:ec:fb:22:f9:60:45:c7:f5:d3:30:aa:22:
         e5:aa:47:24:69:a1:8d:66:6b:2f:d3:dd:40:de:e6:21:6d:cb:
         59:86:ba:82:69:8c:a5:78:cf:67:b8:73:38:7c:48:ab:28:b2:
         86:8a:d8:da:22:71:56:a1:dc:7a:26:bc:0e:81:00:6a:a9:8c:
         c7:58:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:44 2025 by rpki-client