Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa
File:                     3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa (raw, json)
Hash identifier:          NVQtWe0v73xhwkIc713pQBnjAlwf9yrwY5tDytIh63s=
Subject key identifier:   4A:6D:8B:D7:EA:A9:48:55:71:36:18:1B:A5:70:CC:23:56:8C:2D:5D
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       0BE48D3DB71E0AF95EC5D083E2CDF7F705C9C2CF
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa
Signing time:             Tue 04 Feb 2025 18:09:15 +0000
ROA not before:           Tue 04 Feb 2025 18:04:15 +0000
ROA not after:            Tue 03 Feb 2026 18:09:15 +0000
asID:                     52295
IP address blocks:        190.211.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 06:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e4:8d:3d:b7:1e:0a:f9:5e:c5:d0:83:e2:cd:f7:f7:05:c9:c2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Feb  4 18:04:15 2025 GMT
            Not After : Feb  3 18:09:15 2026 GMT
        Subject: CN=4A6D8BD7EAA948557136181BA570CC23568C2D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:f1:df:7a:f1:32:eb:9d:1d:bf:27:86:e5:
                    ab:e3:38:ce:2b:19:0f:98:e0:51:6f:94:50:9d:8e:
                    11:63:de:ce:21:ab:63:21:97:b4:f5:b3:1f:c1:1f:
                    92:0e:18:5b:b0:20:30:6e:43:06:41:8e:6b:35:3a:
                    b4:66:9c:0f:aa:dc:0b:1c:04:53:3f:57:0f:38:ea:
                    06:90:1b:c7:66:8b:a6:5d:32:ef:9b:5f:a7:0c:c9:
                    04:a0:d4:96:6f:7f:e7:a4:5d:e3:45:fa:c6:87:35:
                    cf:06:e9:b1:aa:7f:5d:22:a5:22:30:a7:0a:a1:a9:
                    5b:f0:ec:f1:49:4f:06:58:1b:11:aa:ec:c0:4e:48:
                    1b:5b:5d:fc:eb:54:ed:15:eb:ab:0c:cd:af:47:4e:
                    9b:94:79:af:0e:e5:2c:35:15:47:42:de:e2:99:e7:
                    4a:53:9a:b2:c2:f3:89:49:4c:b9:5b:9e:ae:fa:0d:
                    32:d8:ff:35:0b:c6:d2:85:1b:e3:18:0b:d0:6f:85:
                    d0:d3:49:dc:0d:02:61:d8:7d:35:48:ea:68:06:4e:
                    95:c3:3a:5f:a4:ad:e1:5a:d2:d3:9f:b4:4c:8c:02:
                    06:cd:67:43:9c:15:3e:c8:c5:7d:57:38:fc:f4:dc:
                    e1:3d:61:d0:78:a2:c8:61:f1:90:29:06:8f:88:58:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6D:8B:D7:EA:A9:48:55:71:36:18:1B:A5:70:CC:23:56:8C:2D:5D
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9b:c0:e5:7b:c9:d3:61:e7:ad:95:c4:58:41:3e:1a:f6:05:
         08:01:46:64:d3:76:8d:98:2d:2b:9e:e7:95:09:7d:08:e1:f1:
         f3:d4:bc:f2:bf:f0:aa:5f:f3:e5:81:d7:1e:b4:06:f8:75:09:
         9b:74:cf:2a:8c:c2:c4:68:81:13:08:dc:b3:4c:08:bc:0d:b5:
         0e:28:42:77:f6:24:69:b9:dd:54:19:3f:83:a7:1c:a7:cf:d0:
         c2:3c:87:75:37:a2:13:ca:08:b4:c9:b6:46:cf:6c:0c:53:f3:
         3d:f8:72:d3:00:31:20:c4:34:82:7f:2d:16:69:8d:02:c3:51:
         60:e4:b6:57:05:f4:04:5e:10:92:a5:31:46:e8:0c:76:be:4e:
         42:3a:1e:8a:63:f5:d1:10:d7:3f:6d:f1:9c:a4:e9:94:3d:7f:
         77:50:61:a8:13:2f:24:ec:27:55:0a:62:bc:8e:03:0b:3f:74:
         25:ed:cc:d7:18:21:74:9a:35:7a:fa:e7:99:d5:2a:8e:1d:de:
         6b:07:d7:7e:b0:15:7c:e4:3d:a8:aa:2d:65:54:9d:af:e7:58:
         8f:73:67:a2:6f:3f:17:aa:96:27:b0:a3:1c:c6:b7:6a:72:b8:
         23:e6:f2:d5:66:ec:64:4a:64:4b:f6:8b:83:e1:c9:68:ba:8e:
         5e:39:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 01:07:26 2025 by rpki-client