Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131342e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131342e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          9IZBRjls6kpVyfcHNKR36l6rhblDI4LEfUMt3t7O7jo=
Subject key identifier:   D2:D9:37:92:7E:F8:35:10:22:5D:B8:B8:65:A2:59:9F:04:F5:BE:93
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       21FCF68A9FDB6035636CCCFFD74E5DF38ABFF168
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131342e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:09 +0000
ROA not before:           Sun 02 Mar 2025 04:06:09 +0000
ROA not after:            Sun 01 Mar 2026 04:11:09 +0000
asID:                     52369
IP address blocks:        190.110.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fc:f6:8a:9f:db:60:35:63:6c:cc:ff:d7:4e:5d:f3:8a:bf:f1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:09 2025 GMT
            Not After : Mar  1 04:11:09 2026 GMT
        Subject: CN=D2D937927EF83510225DB8B865A2599F04F5BE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:d3:64:c2:33:3b:7f:2c:80:48:19:71:4d:
                    00:20:76:ac:8c:b9:ba:9a:e5:8f:03:12:7c:de:d8:
                    f0:e4:2e:d6:83:4f:be:44:c8:0e:d7:71:f8:2b:b0:
                    9f:a4:a1:d8:97:96:43:07:4a:a3:ff:d3:48:74:13:
                    4d:9b:5e:25:d4:e3:e4:98:b2:96:60:93:c7:c9:ca:
                    d0:24:67:e9:9c:3e:5c:e3:e2:c1:a9:62:6b:25:3f:
                    1b:b1:36:b8:d8:24:00:6e:95:2f:50:d3:a0:2d:39:
                    38:ae:38:93:73:b6:a4:d1:15:bf:92:19:62:54:a8:
                    61:f2:66:97:10:a4:ff:c6:ec:97:15:a7:35:b2:9b:
                    b2:57:eb:45:75:54:3f:3c:c1:f9:3b:83:99:17:af:
                    66:1f:f1:d2:fb:15:6a:97:a0:38:10:2a:ed:5c:85:
                    a9:e0:24:f8:2d:91:46:ed:50:a8:2d:1b:99:a3:c1:
                    b6:44:dc:4f:7d:57:a9:e3:f5:10:85:ce:83:15:59:
                    92:9e:d4:34:c1:08:91:30:a5:38:67:8b:50:b3:a5:
                    3b:60:73:6f:fa:08:a6:1c:90:7a:79:03:87:4b:dc:
                    36:cc:02:aa:34:05:8b:16:24:f3:7d:40:d3:30:d7:
                    51:f5:85:89:b3:9a:a0:27:35:91:74:d1:4e:8b:4e:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:37:92:7E:F8:35:10:22:5D:B8:B8:65:A2:59:9F:04:F5:BE:93
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131342e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:41:be:81:f8:dd:05:b9:18:9a:57:6f:09:ed:73:4e:43:9d:
         95:4f:23:b0:03:18:25:46:de:1c:db:01:62:c5:2f:ae:f5:1b:
         a0:67:fa:42:f0:64:a7:93:d4:60:be:02:60:ae:fd:eb:65:d7:
         54:57:4b:6c:b7:85:6f:50:01:c4:dc:49:b1:e1:8b:37:52:53:
         b2:7a:16:a9:85:45:68:be:9d:46:c9:b0:20:2a:50:ef:c0:a8:
         fd:e9:a4:88:b7:26:23:6a:b1:9b:2b:fd:c6:e7:a9:d2:4d:e8:
         33:22:36:ae:6f:10:d1:ba:cd:5c:7a:27:74:15:b0:8a:cd:3e:
         14:b7:91:48:f5:6c:d8:df:f4:21:6a:14:3e:d4:46:63:92:3b:
         d4:d5:5e:bc:b1:af:57:c2:b1:b9:c4:c7:48:85:d1:e4:66:e0:
         c8:e5:b5:46:87:a5:7c:5c:c8:c1:26:a3:9a:60:9b:86:07:3e:
         c3:3d:92:41:e2:27:b5:94:81:a1:0c:ad:e5:90:84:ba:00:15:
         be:d7:86:f6:95:4a:cb:ae:e0:05:26:07:8c:d5:5b:2c:cf:30:
         60:10:22:8c:a7:38:6f:27:c6:a7:ea:e1:1d:31:65:52:48:d4:
         f3:91:6c:8b:7e:34:f8:6a:0a:9d:d2:f3:d0:89:bf:08:4f:eb:
         2f:d5:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:58 2025 by rpki-client