Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32342d3234203d3e203532323935.roa
File:                     3139302e3231312e3234342e302f32342d3234203d3e203532323935.roa (raw, json)
Hash identifier:          28Yh7h9HrFaBKpsGZ9MfJ03AKGrn7RePMQ+4vsw0FtM=
Subject key identifier:   39:A1:F6:1C:58:FB:10:71:39:5A:BC:F5:7F:17:FC:36:D6:25:74:87
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       5BFBF471CB609FBBFD819F3B6F5C4C709B0B1A61
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32342d3234203d3e203532323935.roa
Signing time:             Tue 04 Feb 2025 18:09:16 +0000
ROA not before:           Tue 04 Feb 2025 18:04:16 +0000
ROA not after:            Tue 03 Feb 2026 18:09:16 +0000
asID:                     52295
IP address blocks:        190.211.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 06:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fb:f4:71:cb:60:9f:bb:fd:81:9f:3b:6f:5c:4c:70:9b:0b:1a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Feb  4 18:04:16 2025 GMT
            Not After : Feb  3 18:09:16 2026 GMT
        Subject: CN=39A1F61C58FB1071395ABCF57F17FC36D6257487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:f5:77:6e:45:51:e6:c2:ce:c1:3a:c2:46:
                    7b:b2:5c:15:25:f0:47:fa:ad:62:f6:aa:ec:62:5d:
                    55:17:73:4b:39:a9:36:95:03:ed:61:8e:8a:77:56:
                    0a:36:97:42:ca:2d:98:41:53:00:81:6c:b5:c7:92:
                    7d:59:12:8d:2d:19:dc:6d:7b:a8:70:32:53:63:b5:
                    31:58:87:5c:84:78:95:2c:e2:cc:37:f4:e1:f0:2b:
                    2e:1e:a8:05:c6:4e:82:dc:d5:e0:bf:c4:13:4e:16:
                    84:69:d4:de:d2:44:c3:e0:c2:b5:7f:08:22:0d:6a:
                    41:c3:aa:e5:df:1c:dc:d8:8e:40:7a:3f:35:2d:84:
                    af:d0:92:a5:f2:36:81:ab:2a:11:96:5a:32:47:a2:
                    35:82:44:9b:bf:ea:99:f8:79:b4:fe:79:46:6b:16:
                    b3:be:98:30:7f:db:ef:c6:77:e9:97:79:17:6e:68:
                    40:67:41:62:0a:09:fa:51:99:da:60:78:91:56:ae:
                    c4:bc:ef:ea:58:77:55:e2:7a:19:5d:4e:7e:e4:5b:
                    f7:73:75:13:f8:1c:7b:77:98:40:d9:9f:ed:ce:68:
                    d9:c3:b5:9f:d5:dd:b6:d0:3d:df:b9:94:ae:fe:6b:
                    12:98:d7:29:15:bf:0d:62:7d:3c:18:fa:be:1e:17:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:F6:1C:58:FB:10:71:39:5A:BC:F5:7F:17:FC:36:D6:25:74:87
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32342d3234203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:54:86:21:06:d6:d7:bb:88:68:e3:e7:1c:00:28:ef:19:f9:
         a4:0f:01:65:5d:b1:5e:39:db:5b:d9:ef:eb:b9:d5:a5:2b:96:
         ea:cf:39:42:57:43:44:71:99:bd:74:fc:7f:29:1b:90:18:a9:
         eb:9a:cc:91:ee:a4:61:31:d3:9c:bc:81:22:dc:1c:00:61:08:
         a0:d6:16:ea:45:90:9c:90:0d:e3:bd:3b:1d:2d:30:0a:cb:fd:
         24:46:b6:7d:b6:6e:48:88:d7:cb:0b:07:6b:a7:56:6c:81:5e:
         77:1f:47:8d:50:21:fa:9e:6a:7c:0a:69:f0:05:b7:d3:44:d2:
         40:dd:dc:d9:10:18:a8:bb:0e:c1:c8:7d:4e:c1:ff:28:1e:b9:
         01:1d:bd:ec:39:eb:a2:88:8e:6a:94:3c:50:c4:9a:bf:2a:f1:
         17:3a:43:3b:2a:95:5c:84:7a:2e:e2:35:c4:a5:8d:3f:78:e2:
         31:41:d5:b7:e1:8a:61:cd:ff:ed:bc:ce:39:31:9a:6d:ca:09:
         84:32:12:64:0c:e1:ed:41:35:a0:84:f4:28:a1:1a:d6:42:6b:
         92:1d:99:f2:8d:71:b2:a3:59:31:94:3e:b5:5e:08:70:f4:01:
         4d:2d:cb:70:83:72:63:3b:fa:b1:6c:89:91:a1:9c:88:24:6e:
         9a:72:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 00:04:04 2025 by rpki-client