Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131392e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131392e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          dvHkEilmAADaa6GhONkQyENKoKXtZ/Q3iJgP/+0DTc8=
Subject key identifier:   F5:A2:1D:B0:D8:7E:53:4D:09:38:38:3F:2D:55:E7:77:6E:66:47:91
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       7A5B786C851F7BA1FC607176CB2DB3BB82334F1E
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131392e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:12 +0000
ROA not before:           Sun 02 Mar 2025 04:06:12 +0000
ROA not after:            Sun 01 Mar 2026 04:11:12 +0000
asID:                     52369
IP address blocks:        190.110.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5b:78:6c:85:1f:7b:a1:fc:60:71:76:cb:2d:b3:bb:82:33:4f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:12 2025 GMT
            Not After : Mar  1 04:11:12 2026 GMT
        Subject: CN=F5A21DB0D87E534D0938383F2D55E7776E664791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:9e:e8:7f:6b:ea:db:58:8a:1d:ab:72:bb:
                    b3:66:28:d6:57:5c:35:4e:36:57:83:8c:66:02:71:
                    9f:04:1b:b5:5f:9d:fb:45:dc:95:3e:22:9b:9d:4a:
                    a0:2c:d5:f8:c2:8c:40:47:36:d5:f1:7f:f9:6c:6f:
                    80:69:65:77:a7:56:35:1b:3f:44:a2:be:85:e7:5d:
                    c3:bf:01:7c:f8:17:36:d1:77:c9:04:db:4e:89:0d:
                    4a:cc:25:c2:eb:53:c6:e9:f6:6b:b4:f0:90:cc:4d:
                    0b:93:57:83:35:28:4d:96:d8:36:1b:8b:68:1d:ed:
                    98:e6:c2:06:58:01:e2:aa:e5:0b:cc:a0:10:07:52:
                    bb:2c:86:3e:88:09:fd:85:cf:37:0d:0f:b5:44:ca:
                    c1:ab:c1:f7:46:60:8b:d9:e9:b1:6f:a7:70:5d:8c:
                    f8:04:36:ff:81:38:28:eb:78:76:a7:cb:90:eb:dd:
                    b4:9b:e5:35:a5:c2:7f:c2:2f:98:a3:af:e5:7d:a0:
                    ce:73:02:f9:b5:8d:31:2d:b2:1f:a4:c2:45:a9:51:
                    54:e2:ee:72:eb:6b:c3:cd:95:e8:00:1f:55:99:c3:
                    d9:21:98:5c:d1:eb:d9:13:81:15:76:cc:99:21:6d:
                    54:65:70:5f:23:66:df:37:14:7a:5d:f5:18:3b:66:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:1D:B0:D8:7E:53:4D:09:38:38:3F:2D:55:E7:77:6E:66:47:91
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131392e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:62:df:b2:7d:07:04:3f:6f:bf:5e:7f:ae:ec:d5:95:ed:
         e6:77:55:eb:72:0e:f0:7c:82:e0:09:cd:32:f7:d5:62:00:25:
         a2:13:eb:21:9c:c5:a6:60:e7:03:f4:6f:5d:e4:1a:0e:32:69:
         c5:35:8c:16:be:f6:29:28:da:5e:a8:1b:eb:c9:47:e3:78:6c:
         8f:f0:8f:74:b2:e9:41:1c:fb:ff:75:69:90:ac:6c:f8:4a:e9:
         f2:de:20:0f:2a:32:7b:61:b0:be:26:dd:1b:0e:8d:f9:94:cf:
         b0:0a:1a:47:30:35:76:3d:d1:39:d2:a3:ef:74:4a:34:4b:63:
         7b:e5:8b:2f:b3:51:eb:49:24:ba:89:b2:de:4e:b5:4a:8e:61:
         7f:75:09:22:c9:ba:fe:d6:c1:a9:17:94:ff:5f:bb:cf:ea:18:
         46:d7:52:d4:d2:22:cb:60:69:dc:06:79:df:75:0a:e6:a6:90:
         32:d2:75:6d:84:2c:92:fd:95:f8:fc:f7:39:08:9e:09:0c:86:
         30:fc:39:36:3d:ae:18:0e:6c:31:c9:de:54:91:75:7c:46:b6:
         8d:60:b0:f5:73:b1:32:ec:e9:b6:bc:0e:08:55:db:d0:98:77:
         9a:94:a6:d3:e0:a9:97:a1:09:40:31:d7:ae:4b:e2:94:76:03:
         dd:6f:4f:4c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUelt4bIUfe6H8YHF2yy2zu4IzTx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGOUM3RDY1QTRDQkFGNUQyMUExNUZBMkMyMzdERDg3
RkY3RUY4NDAeFw0yNTAzMDIwNDA2MTJaFw0yNjAzMDEwNDExMTJaMDMxMTAvBgNV
BAMTKEY1QTIxREIwRDg3RTUzNEQwOTM4MzgzRjJENTVFNzc3NkU2NjQ3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/J7of2vq21iKHatyu7NmKNZX
XDVONleDjGYCcZ8EG7VfnftF3JU+IpudSqAs1fjCjEBHNtXxf/lsb4BpZXenVjUb
P0SivoXnXcO/AXz4FzbRd8kE206JDUrMJcLrU8bp9mu08JDMTQuTV4M1KE2W2DYb
i2gd7ZjmwgZYAeKq5QvMoBAHUrsshj6ICf2FzzcND7VEysGrwfdGYIvZ6bFvp3Bd
jPgENv+BOCjreHany5Dr3bSb5TWlwn/CL5ijr+V9oM5zAvm1jTEtsh+kwkWpUVTi
7nLra8PNlegAH1WZw9khmFzR69kTgRV2zJkhbVRlcF8jZt83FHpd9Rg7Zv0XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9aIdsNh+U00JODg/LVXnd25mR5EwHwYDVR0j
BBgwFoAUjvnH1lpMuvXSGhX6LCN92H/374QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkVDNERCQ0IxREE4NjZBQUYzNzExMjYyOTA5QjFCM0Q1
NTNBOUZBRTkxMTkyMTI2OEYyNTk2MkY1NUQ1QTFDLzAvOEVGOUM3RDY1QTRDQkFG
NUQyMUExNUZBMkMyMzdERDg3RkY3RUY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUY5QzdENjVBNENCQUY1RDIx
QTE1RkEyQzIzN0REODdGRjdFRjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFQzREQkNCMURBODY2QUFGMzcxMTI2MjkwOUIxQjNENTUzQTlGQUU5
MTE5MjEyNjhGMjU5NjJGNTVENUExQy8wLzMxMzkzMDJlMzEzMTMwMmUzMTMxMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm53
MA0GCSqGSIb3DQEBCwUAA4IBAQAOl2Lfsn0HBD9vv15/ruzVle3md1Xrcg7wfILg
Cc0y99ViACWiE+shnMWmYOcD9G9d5BoOMmnFNYwWvvYpKNpeqBvryUfjeGyP8I90
sulBHPv/dWmQrGz4Suny3iAPKjJ7YbC+Jt0bDo35lM+wChpHMDV2PdE50qPvdEo0
S2N75Ysvs1HrSSS6ibLeTrVKjmF/dQkiybr+1sGpF5T/X7vP6hhG11LU0iLLYGnc
BnnfdQrmppAy0nVthCyS/ZX4/Pc5CJ4JDIYw/Dk2Pa4YDmwxyd5UkXV8RraNYLD1
c7Ey7Om2vA4IVdvQmHealKbT4KmXoQlAMdeuS+KUdgPdb09M
-----END CERTIFICATE-----
Generated at Mon Apr 14 19:57:49 2025 by rpki-client