Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234362e302f32342d3234203d3e203532323935.roa
File:                     3139302e3231312e3234362e302f32342d3234203d3e203532323935.roa (raw, json)
Hash identifier:          c5ecCSRk0A21UuM/6CPxypRhgX9Rufj4FxNZlmxqCc8=
Subject key identifier:   06:5F:B7:9A:8D:39:EE:0D:92:F8:6A:8A:A1:EB:F7:EF:41:A4:0B:D7
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       124842D70BE797B482B5DF9B4CA4FD5429035409
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234362e302f32342d3234203d3e203532323935.roa
Signing time:             Tue 04 Feb 2025 18:09:16 +0000
ROA not before:           Tue 04 Feb 2025 18:04:16 +0000
ROA not after:            Tue 03 Feb 2026 18:09:16 +0000
asID:                     52295
IP address blocks:        190.211.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 06:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:48:42:d7:0b:e7:97:b4:82:b5:df:9b:4c:a4:fd:54:29:03:54:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Feb  4 18:04:16 2025 GMT
            Not After : Feb  3 18:09:16 2026 GMT
        Subject: CN=065FB79A8D39EE0D92F86A8AA1EBF7EF41A40BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:86:2d:8e:47:47:b7:a2:2c:e1:b0:e7:75:
                    a4:70:f6:1e:f9:66:91:3e:17:57:ca:52:e8:20:ad:
                    50:b5:66:21:37:0e:71:98:e2:76:98:db:ba:2c:8e:
                    2c:c4:38:4a:72:4c:4b:d9:e7:f9:f7:2a:10:53:0f:
                    f6:77:48:fc:e6:cf:ae:f2:60:b1:3a:ff:fe:bd:d2:
                    69:3a:88:70:73:bf:86:b6:4c:65:bf:4a:ba:fb:6a:
                    54:15:df:34:2b:49:6e:6f:a0:6f:9d:95:81:8d:fd:
                    db:20:b9:e2:7f:24:da:1d:9c:d6:26:46:f7:75:13:
                    59:90:e4:28:91:de:2e:86:af:03:09:a7:3f:dc:1a:
                    34:15:c5:7e:36:b1:f3:31:d6:d2:4e:6f:56:0e:14:
                    4c:74:e5:3c:13:65:6d:b4:27:a2:b3:8c:2b:d9:3d:
                    a1:27:48:e4:99:35:c3:fb:15:67:9c:26:82:d3:2b:
                    ce:81:5b:d2:07:2f:19:f8:39:73:52:90:14:7b:fc:
                    bb:6b:ee:a4:03:2b:4d:e5:14:57:28:0d:e1:8e:21:
                    99:05:4a:f7:52:e1:12:a1:54:d2:de:57:a8:be:4d:
                    ed:4f:79:d2:16:7b:e9:6d:b2:53:29:08:ef:0a:43:
                    04:d5:a2:89:4e:2c:a1:bb:b1:f8:23:76:e0:ea:15:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5F:B7:9A:8D:39:EE:0D:92:F8:6A:8A:A1:EB:F7:EF:41:A4:0B:D7
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234362e302f32342d3234203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:c8:8f:de:ec:c7:23:55:f5:0f:01:a4:76:01:b4:a3:9e:
         8d:3b:8a:e2:1f:97:62:b2:1c:89:bf:68:89:ed:46:03:2f:31:
         36:e9:ae:8e:21:75:6c:ee:43:79:c2:e8:e0:bf:59:ce:2b:8a:
         b1:56:b0:1e:fe:62:6e:54:f5:14:07:84:b0:94:d3:f9:0a:f8:
         9d:01:6b:f3:af:70:84:70:5c:69:e8:90:1e:3d:d2:85:32:28:
         c8:5d:76:a8:07:3d:3e:01:2a:84:93:1d:6b:dd:3a:58:96:d3:
         f8:94:c6:63:76:6e:b8:89:11:84:7b:ff:b0:52:b5:12:73:8a:
         d3:0d:fc:b0:a8:cd:04:83:88:a9:c4:2e:a0:20:60:a5:ee:6c:
         5f:2e:1f:e7:c7:53:8d:4f:77:40:7f:a5:68:6c:0d:df:67:ac:
         8a:fd:6e:02:a4:c7:fa:d6:16:cc:fb:f2:00:30:79:de:24:66:
         e0:06:cf:24:f7:7f:c2:45:e2:4a:36:69:1f:e0:fb:de:2d:c9:
         26:0a:3f:ad:ca:ef:5b:83:09:13:b8:c6:a3:13:7d:fc:c5:41:
         be:b3:cd:92:34:d3:e4:8a:6c:fc:ea:8a:fd:1d:7a:70:95:f2:
         0a:05:b2:b0:47:59:a9:e7:70:32:d9:8b:21:14:c0:60:d9:29:
         b0:53:e5:07
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEkhC1wvnl7SCtd+bTKT9VCkDVAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA3NzM1OUM0MjEwRDk0RkJCRTUzRUE4QTM4NUM0NEY4
REUzQTI2QzAeFw0yNTAyMDQxODA0MTZaFw0yNjAyMDMxODA5MTZaMDMxMTAvBgNV
BAMTKDA2NUZCNzlBOEQzOUVFMEQ5MkY4NkE4QUExRUJGN0VGNDFBNDBCRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3oYtjkdHt6Is4bDndaRw9h75
ZpE+F1fKUuggrVC1ZiE3DnGY4naY27osjizEOEpyTEvZ5/n3KhBTD/Z3SPzmz67y
YLE6//690mk6iHBzv4a2TGW/Srr7alQV3zQrSW5voG+dlYGN/dsgueJ/JNodnNYm
Rvd1E1mQ5CiR3i6GrwMJpz/cGjQVxX42sfMx1tJOb1YOFEx05TwTZW20J6KzjCvZ
PaEnSOSZNcP7FWecJoLTK86BW9IHLxn4OXNSkBR7/Ltr7qQDK03lFFcoDeGOIZkF
SvdS4RKhVNLeV6i+Te1PedIWe+ltslMpCO8KQwTVoolOLKG7sfgjduDqFSzpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBl+3mo057g2S+GqKoev370GkC9cwHwYDVR0j
BBgwFoAUsHc1nEIQ2U+75T6oo4XET43jomwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTEyMkZBRjE3MzBCODYyM0Q5OTlGQjMzOERDRDJBRTk3
OTM0NEJCRTFENTRCNEExNzA5QzAwMzVGNzNGODQ4LzAvQjA3NzM1OUM0MjEwRDk0
RkJCRTUzRUE4QTM4NUM0NEY4REUzQTI2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMDc3MzU5QzQyMTBEOTRGQkJF
NTNFQThBMzg1QzQ0RjhERTNBMjZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEUxMjJGQUYxNzMwQjg2MjNEOTk5RkIzMzhEQ0QyQUU5NzkzNDRCQkUx
RDU0QjRBMTcwOUMwMDM1RjczRjg0OC8wLzMxMzkzMDJlMzIzMTMxMmUzMjM0MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvtP2
MA0GCSqGSIb3DQEBCwUAA4IBAQCuAsiP3uzHI1X1DwGkdgG0o56NO4riH5dishyJ
v2iJ7UYDLzE26a6OIXVs7kN5wujgv1nOK4qxVrAe/mJuVPUUB4SwlNP5CvidAWvz
r3CEcFxp6JAePdKFMijIXXaoBz0+ASqEkx1r3TpYltP4lMZjdm64iRGEe/+wUrUS
c4rTDfywqM0Eg4ipxC6gIGCl7mxfLh/nx1ONT3dAf6VobA3fZ6yK/W4CpMf61hbM
+/IAMHneJGbgBs8k93/CReJKNmkf4PveLckmCj+tyu9bgwkTuMajE338xUG+s82S
NNPkimz86or9HXpwlfIKBbKwR1mp53Ay2YshFMBg2SmwU+UH
-----END CERTIFICATE-----
Generated at Mon Feb 17 01:34:14 2025 by rpki-client