Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          NcmhKtI+oZs5ej8vrh5su8oFq79KdkR4tjgbq55322E=
Subject key identifier:   2D:17:F2:56:37:4C:02:77:69:41:AD:DE:C2:F5:90:BF:61:96:96:2D
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       1238437C710E9AA7E0BBD9A1B25012495C6FE67D
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:10 +0000
ROA not before:           Sun 02 Mar 2025 04:06:10 +0000
ROA not after:            Sun 01 Mar 2026 04:11:10 +0000
asID:                     52369
IP address blocks:        190.110.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:43:7c:71:0e:9a:a7:e0:bb:d9:a1:b2:50:12:49:5c:6f:e6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:10 2025 GMT
            Not After : Mar  1 04:11:10 2026 GMT
        Subject: CN=2D17F256374C02776941ADDEC2F590BF6196962D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:25:61:e8:08:ee:62:d5:20:83:53:83:e7:
                    47:ba:ce:02:a2:3d:a6:92:b8:c8:ba:32:f4:35:78:
                    51:05:66:a8:78:3d:7d:16:b7:99:22:5b:5a:62:71:
                    5f:25:ee:07:bb:f9:46:96:32:91:0f:9b:54:6e:a5:
                    85:ed:85:40:1f:2b:fe:9a:56:9d:39:45:4e:19:99:
                    c7:ef:74:0d:45:dc:85:cd:f0:d5:83:68:d5:84:b7:
                    38:5f:64:81:5d:d0:bd:d2:3a:e9:af:8a:dc:91:76:
                    e8:79:1e:4d:3d:e5:43:e1:e4:71:08:d1:82:a8:e0:
                    0e:d6:08:c1:b2:ac:85:96:b2:18:21:21:64:bd:7d:
                    84:e3:f9:ec:c7:44:3d:3d:ce:36:42:2d:1f:6c:cc:
                    66:8d:c0:48:4f:6d:11:ec:02:a6:42:5d:6e:9a:0c:
                    ce:cf:db:b9:17:00:db:f7:a3:20:d0:42:4c:37:8d:
                    20:20:7e:f8:d9:36:5e:e7:d6:2b:f1:34:68:db:f7:
                    04:3e:db:c1:d4:8a:8b:ae:59:ea:a6:59:36:0f:e0:
                    ee:a9:7c:8a:86:d1:cd:58:c5:2a:f9:7f:92:6f:be:
                    19:e1:4c:61:a9:aa:b7:1d:26:07:32:ae:35:37:9a:
                    38:50:ea:86:d3:a1:a9:83:61:b2:80:a7:25:6b:33:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:F2:56:37:4C:02:77:69:41:AD:DE:C2:F5:90:BF:61:96:96:2D
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:45:ac:48:c6:8f:20:ee:2a:a2:21:30:34:7d:a5:93:dd:8c:
         e4:dd:0a:db:00:9c:7b:d9:23:5a:64:c1:27:47:54:27:da:e9:
         59:f8:ff:ae:36:37:c7:a2:8d:21:96:5f:fe:f4:3f:66:9a:01:
         e9:f9:eb:dc:43:75:dd:21:c1:3a:da:45:a4:a9:fd:a3:4b:3f:
         bd:17:77:39:c0:16:fd:5a:99:d2:82:df:02:e9:2e:af:58:02:
         97:cc:4e:44:35:05:84:5e:07:11:f3:b0:0a:e7:68:86:ca:41:
         58:3f:08:c4:9c:e0:dc:fd:88:ff:3f:95:e3:75:20:e9:0d:5a:
         8c:d9:fa:da:ab:9f:56:47:0b:43:0d:37:2f:10:7e:67:b9:d6:
         7a:29:be:c6:10:df:4b:5e:7f:b5:0a:9c:7d:0c:50:9e:4d:1b:
         fe:89:3c:c3:8b:ff:7f:6a:a1:79:81:e9:7c:56:f8:4b:00:8e:
         b6:16:de:d7:ba:07:e3:5a:c1:f3:44:89:cc:5f:ca:ca:39:83:
         db:f9:69:d6:23:12:07:0e:76:b0:b4:b4:11:aa:b8:d2:c0:ea:
         80:aa:cd:07:ae:1e:10:91:0d:9a:92:14:40:0f:b4:62:a0:d5:
         b9:07:8b:45:6f:06:0d:8b:6d:46:22:fe:ea:00:be:f9:4c:e8:
         03:a4:9d:62
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEjhDfHEOmqfgu9mhslASSVxv5n0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGOUM3RDY1QTRDQkFGNUQyMUExNUZBMkMyMzdERDg3
RkY3RUY4NDAeFw0yNTAzMDIwNDA2MTBaFw0yNjAzMDEwNDExMTBaMDMxMTAvBgNV
BAMTKDJEMTdGMjU2Mzc0QzAyNzc2OTQxQURERUMyRjU5MEJGNjE5Njk2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbyVh6AjuYtUgg1OD50e6zgKi
PaaSuMi6MvQ1eFEFZqh4PX0Wt5kiW1picV8l7ge7+UaWMpEPm1RupYXthUAfK/6a
Vp05RU4ZmcfvdA1F3IXN8NWDaNWEtzhfZIFd0L3SOumvityRduh5Hk095UPh5HEI
0YKo4A7WCMGyrIWWshghIWS9fYTj+ezHRD09zjZCLR9szGaNwEhPbRHsAqZCXW6a
DM7P27kXANv3oyDQQkw3jSAgfvjZNl7n1ivxNGjb9wQ+28HUiouuWeqmWTYP4O6p
fIqG0c1YxSr5f5JvvhnhTGGpqrcdJgcyrjU3mjhQ6obToamDYbKApyVrM3upAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULRfyVjdMAndpQa3ewvWQv2GWli0wHwYDVR0j
BBgwFoAUjvnH1lpMuvXSGhX6LCN92H/374QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkVDNERCQ0IxREE4NjZBQUYzNzExMjYyOTA5QjFCM0Q1
NTNBOUZBRTkxMTkyMTI2OEYyNTk2MkY1NUQ1QTFDLzAvOEVGOUM3RDY1QTRDQkFG
NUQyMUExNUZBMkMyMzdERDg3RkY3RUY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUY5QzdENjVBNENCQUY1RDIx
QTE1RkEyQzIzN0REODdGRjdFRjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFQzREQkNCMURBODY2QUFGMzcxMTI2MjkwOUIxQjNENTUzQTlGQUU5
MTE5MjEyNjhGMjU5NjJGNTVENUExQy8wLzMxMzkzMDJlMzEzMTMwMmUzMTMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm5w
MA0GCSqGSIb3DQEBCwUAA4IBAQBDRaxIxo8g7iqiITA0faWT3Yzk3QrbAJx72SNa
ZMEnR1Qn2ulZ+P+uNjfHoo0hll/+9D9mmgHp+evcQ3XdIcE62kWkqf2jSz+9F3c5
wBb9WpnSgt8C6S6vWAKXzE5ENQWEXgcR87AK52iGykFYPwjEnODc/Yj/P5XjdSDp
DVqM2fraq59WRwtDDTcvEH5nudZ6Kb7GEN9LXn+1Cpx9DFCeTRv+iTzDi/9/aqF5
gel8VvhLAI62Ft7XugfjWsHzRInMX8rKOYPb+WnWIxIHDnawtLQRqrjSwOqAqs0H
rh4QkQ2akhRAD7RioNW5B4tFbwYNi21GIv7qAL75TOgDpJ1i
-----END CERTIFICATE-----
Generated at Mon Apr 14 19:08:47 2025 by rpki-client