Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131362e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131362e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          NmmYUqmMsiKCWmb22fedOwENN76s+aMMj1pjrRgNGr4=
Subject key identifier:   B5:13:37:0B:8D:5C:06:1F:9A:D4:BA:55:60:D8:02:9C:C8:33:86:63
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       5DF7AFBCDC097D00ACAB3038B383F2DE48ACB249
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131362e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:10 +0000
ROA not before:           Sun 02 Mar 2025 04:06:10 +0000
ROA not after:            Sun 01 Mar 2026 04:11:10 +0000
asID:                     52369
IP address blocks:        190.110.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f7:af:bc:dc:09:7d:00:ac:ab:30:38:b3:83:f2:de:48:ac:b2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:10 2025 GMT
            Not After : Mar  1 04:11:10 2026 GMT
        Subject: CN=B513370B8D5C061F9AD4BA5560D8029CC8338663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:10:08:46:ae:a2:0e:b7:3e:66:7a:be:a3:
                    c5:a3:15:d8:3d:23:ad:d0:d5:06:f0:33:5b:43:8c:
                    f5:11:65:5c:87:da:0d:91:d1:19:ad:20:13:93:27:
                    0e:27:87:70:14:77:0c:8e:00:f3:51:6d:9e:7f:12:
                    af:b8:3f:08:7a:be:80:36:14:fc:5e:8d:04:3b:aa:
                    16:c4:f8:52:9e:8b:92:2b:d9:94:cd:52:32:96:d5:
                    13:23:1f:ad:1e:f8:c4:75:b6:59:ad:56:77:05:89:
                    e2:cd:af:10:00:61:20:96:02:1e:9e:3a:02:9d:a1:
                    7e:cc:e5:36:19:25:e0:48:37:c8:32:27:c6:63:32:
                    ea:20:db:ef:d2:60:77:e5:57:66:fb:ed:ab:a7:b1:
                    14:a5:51:01:d0:ee:7b:b0:c9:c0:a9:8d:39:10:1f:
                    61:97:da:46:c8:58:63:1e:37:a5:7b:26:1d:73:e3:
                    e7:68:f9:99:55:e4:50:7e:3b:19:8d:45:d1:9e:49:
                    6b:9a:6b:6a:0d:b7:1e:01:3e:c0:1b:da:5c:c5:74:
                    c7:09:d8:54:02:70:27:d7:7b:f4:76:6e:b1:ae:91:
                    fe:a4:92:47:22:e0:9f:07:9a:c7:c7:6d:28:8b:e9:
                    97:0b:ab:b4:48:0d:f1:a6:5b:3a:c7:76:2c:d3:2f:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:13:37:0B:8D:5C:06:1F:9A:D4:BA:55:60:D8:02:9C:C8:33:86:63
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131362e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:60:3b:3c:18:c4:8a:21:ca:b3:5b:1b:d8:b9:10:ea:3f:73:
         c6:48:26:9f:f9:50:1e:0c:34:12:fd:1f:9b:70:45:da:ed:d3:
         38:75:96:95:7e:c9:7c:41:32:39:11:a7:73:78:c1:e1:6b:1f:
         35:25:92:fa:4d:de:58:19:8a:44:c8:89:18:da:a6:cd:37:82:
         39:7f:28:cb:25:27:ac:09:a1:6c:69:d0:dc:a3:e2:87:cc:36:
         83:28:c1:a8:4d:8c:40:63:8b:c4:89:d5:da:6c:fb:08:c0:30:
         51:3b:c9:de:fa:2b:c3:d3:3e:6e:55:6d:c7:a9:87:b0:ea:31:
         fd:3d:d7:28:ac:53:ed:f0:c0:97:3f:78:04:de:ec:56:a5:c3:
         f5:c5:31:03:5d:68:d4:a6:c9:58:15:c9:a5:dd:81:0b:d5:38:
         5a:88:e0:e5:2f:9c:70:ed:f0:0c:f9:86:8b:4e:95:0b:88:e2:
         c1:e8:20:6b:39:4b:63:d5:14:bd:b6:a6:8a:5b:30:13:34:3b:
         4e:6c:41:36:25:77:94:f2:71:28:cb:d9:70:73:0c:2a:8a:e1:
         68:43:20:ed:4c:84:da:63:e2:84:73:14:7f:6d:f8:ee:d4:89:
         90:f8:71:f6:b4:97:00:42:c6:ac:f8:0f:6c:6d:e3:5f:09:41:
         eb:ad:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:03 2025 by rpki-client