Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231382e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231382e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          T+g19UXoNVU7jMLDHXVFQ7vxPddjvswKJpriW+gNxWo=
Subject key identifier:   C3:84:20:F9:D1:80:71:06:B2:6A:06:07:5D:05:10:C2:A9:E0:7C:E1
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       5BA5FD279CD09C305E32A6EEB7C1B4EFDE6CCECA
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231382e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:20 +0000
ROA not before:           Tue 04 Feb 2025 18:31:20 +0000
ROA not after:            Tue 03 Feb 2026 18:36:20 +0000
asID:                     52348
IP address blocks:        190.52.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a5:fd:27:9c:d0:9c:30:5e:32:a6:ee:b7:c1:b4:ef:de:6c:ce:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:20 2025 GMT
            Not After : Feb  3 18:36:20 2026 GMT
        Subject: CN=C38420F9D1807106B26A06075D0510C2A9E07CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:e0:89:d7:7e:d8:3d:94:48:a4:a2:2b:a0:
                    e2:cb:3c:54:70:e9:70:58:8e:18:88:e3:89:4a:23:
                    10:5c:30:fc:14:b7:6e:9d:fe:0f:10:95:00:16:d0:
                    e9:b5:8a:37:e8:81:8c:19:5e:77:4b:1e:27:e5:94:
                    8c:ea:e7:11:07:38:e9:4a:44:60:ea:1b:fb:d4:8b:
                    d8:6b:f8:62:94:42:4b:59:a8:38:c8:c2:06:2d:f2:
                    01:55:24:7d:bd:ed:bb:93:21:25:ac:63:e2:95:09:
                    a6:fe:7f:94:51:54:62:61:ef:b6:73:7c:12:dd:d2:
                    49:03:f2:28:dc:7d:4f:84:c0:f4:74:76:fe:b4:bf:
                    3e:84:44:ab:13:58:e9:e5:59:ad:40:fb:6a:99:c2:
                    45:2c:11:4a:ad:28:84:e0:7f:02:5d:b2:f3:7e:78:
                    e1:3d:61:07:ae:6e:73:6d:ff:9c:15:19:62:67:d2:
                    30:4f:76:3e:9b:70:60:08:a8:04:68:cc:91:9d:46:
                    31:75:eb:17:ff:c8:08:6b:9a:29:46:8f:f6:5a:da:
                    31:87:78:b2:75:65:9f:f4:be:13:c9:f8:a1:20:bd:
                    c4:98:8c:d9:85:02:fd:03:a4:8c:aa:67:ea:bc:90:
                    9e:10:3f:96:c9:e9:e4:16:33:d6:e4:2a:27:61:36:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:20:F9:D1:80:71:06:B2:6A:06:07:5D:05:10:C2:A9:E0:7C:E1
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231382e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:68:a9:d7:22:9c:3d:35:00:0e:15:e3:be:ce:f7:40:dc:
         e8:f6:67:94:b5:f9:a6:eb:92:1f:6b:f9:3e:bc:fc:48:07:ae:
         72:91:9f:31:73:c5:c2:91:e1:4b:48:c1:1c:f5:a7:c0:95:5a:
         fa:4c:85:8d:09:85:fe:54:b5:62:8b:fa:18:8a:ba:47:60:76:
         03:61:e5:7d:47:2e:d2:e2:f4:99:04:cf:99:da:20:61:29:c4:
         da:be:c4:9d:4e:e3:30:9a:c6:08:8f:53:1e:84:c5:ba:17:67:
         a0:9a:5b:7f:8a:ff:99:ff:8a:1a:db:ed:7b:dc:a6:fe:00:23:
         bc:a9:7d:4e:35:ea:38:2b:be:6e:4d:96:2d:a6:2a:07:01:e1:
         8d:89:cf:1f:cc:1f:91:f7:86:31:30:34:a2:fb:0d:50:8e:ed:
         d9:97:8d:ca:63:4a:ba:61:62:69:9e:18:e2:02:93:8f:b1:f3:
         f8:49:72:b8:75:78:93:bd:93:c3:2a:7e:56:a9:f5:ea:df:00:
         f1:4d:90:f2:25:fc:e1:f2:55:e7:60:92:27:e3:60:88:30:53:
         f7:97:32:25:87:7c:0b:13:49:bf:1a:95:e7:d1:d3:a2:a4:0f:
         8b:58:26:b7:7c:7b:13:37:62:6c:95:27:63:e2:18:20:16:d6:
         b5:71:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:22:15 2025 by rpki-client