Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38332e302f32342d3234203d3e203634323030.roa
File:                     3139302e39392e38332e302f32342d3234203d3e203634323030.roa (raw, json)
Hash identifier:          bYmXjLPDwkm8OvlNJLqZFZ/rYvjSNfo9HSAt75mjQ4A=
Subject key identifier:   D2:D0:0B:A8:9C:E9:26:9D:E1:61:CD:01:D8:64:4B:C7:C0:F5:A2:CD
Certificate issuer:       /CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
Certificate serial:       3BC0710B76418D244A57E584730C78E6E621EE76
Authority key identifier: CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38332e302f32342d3234203d3e203634323030.roa
Signing time:             Tue 04 Feb 2025 20:08:24 +0000
ROA not before:           Tue 04 Feb 2025 20:03:24 +0000
ROA not after:            Tue 03 Feb 2026 20:08:24 +0000
asID:                     64200
IP address blocks:        190.99.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c0:71:0b:76:41:8d:24:4a:57:e5:84:73:0c:78:e6:e6:21:ee:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
        Validity
            Not Before: Feb  4 20:03:24 2025 GMT
            Not After : Feb  3 20:08:24 2026 GMT
        Subject: CN=D2D00BA89CE9269DE161CD01D8644BC7C0F5A2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:3c:50:a1:20:c2:77:eb:36:ad:4a:25:46:
                    10:3f:de:4d:b8:3b:26:5d:23:27:d3:d1:19:7c:d2:
                    b6:91:84:7c:43:b2:7b:03:a8:94:12:86:c7:aa:36:
                    3a:34:87:aa:61:3f:80:6b:27:eb:95:d4:49:df:fc:
                    c3:43:19:b5:d2:b9:8b:fb:de:ed:e7:ee:b9:29:40:
                    3f:d9:09:21:a8:f7:2b:13:59:5e:be:0d:3f:0a:15:
                    f3:13:de:9e:23:2d:2b:c5:3e:67:5a:b8:13:bc:93:
                    e6:d8:ec:de:78:fd:1a:3b:e4:2b:cb:cc:24:fe:1c:
                    35:89:9b:82:ee:99:92:a3:6c:aa:ec:74:3e:f8:a2:
                    48:be:1d:98:49:e4:4d:9b:4d:a3:91:8c:a9:d3:7b:
                    d2:31:bb:3c:58:ca:c2:32:27:07:d2:b6:fc:1a:47:
                    08:4d:d7:b1:42:7e:3b:87:4a:bc:5c:3e:87:70:0b:
                    7e:07:9b:21:78:b5:7e:53:17:7c:c6:b0:0a:04:a8:
                    1c:9d:67:07:8e:91:93:24:5e:35:70:b8:ed:03:28:
                    c2:31:8a:b0:39:52:46:4e:5a:96:32:6e:9e:c3:f7:
                    24:e4:80:57:b5:01:ac:d8:8b:f1:c7:16:37:ac:54:
                    6f:c1:5e:a8:86:36:71:a2:d9:33:cc:b6:e2:72:8a:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D0:0B:A8:9C:E9:26:9D:E1:61:CD:01:D8:64:4B:C7:C0:F5:A2:CD
            X509v3 Authority Key Identifier:
                keyid:CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38332e302f32342d3234203d3e203634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:30:b3:85:42:19:e1:4d:0c:ce:f8:8f:6b:1e:99:26:32:6f:
         a0:d5:14:75:a9:1c:da:a3:8f:1d:8b:2a:b7:1e:5c:7e:a5:39:
         0d:44:63:22:a2:31:d2:44:c2:19:c6:d1:94:7b:ff:91:ac:cf:
         d8:21:8b:e2:fb:7c:16:17:c9:04:40:d2:0c:79:0b:a3:af:4c:
         e1:bb:2f:41:42:13:95:65:e0:41:d0:7d:c4:2c:c5:5d:b9:93:
         b5:1c:5f:36:a6:cc:ff:85:c6:1c:e1:17:ba:c7:f3:7e:c0:4d:
         44:54:c8:e3:bf:3d:6a:39:44:05:a8:7e:67:4a:db:9d:06:59:
         10:4e:95:28:2f:f0:a6:68:e8:1a:21:50:38:41:eb:f2:87:b0:
         a6:1a:cd:5c:08:64:f8:de:d1:79:bc:4b:8f:e6:4b:33:b8:79:
         eb:8c:61:85:14:f9:be:42:fc:4c:c5:02:6d:d8:38:14:96:83:
         e6:3e:ac:1c:89:d4:4b:3d:55:50:d5:46:b7:57:19:2a:12:11:
         c8:3f:8a:b8:92:1b:d9:12:69:77:e5:f6:33:f8:5a:53:5d:68:
         26:51:f9:ef:2d:9c:31:c5:0e:e5:fa:e9:cd:ae:a0:c8:24:a9:
         ee:0e:6a:9e:ea:26:4f:99:89:19:68:20:f4:88:c8:8c:f0:f0:
         0c:3f:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:23:38 2025 by rpki-client