Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232382e302f32322d3232203d3e203532333639.roa
File:                     3139302e3138342e3232382e302f32322d3232203d3e203532333639.roa (raw, json)
Hash identifier:          oyE9LWXopmN9YkOpGccnmPnXsy5WJ6asUUvSVewW84I=
Subject key identifier:   FA:68:5A:5B:CC:C7:48:22:D6:58:1F:1B:BF:95:44:16:93:30:6D:9A
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       6FB060CF83CD607F3EE00DEF105959ACC3AAE7CD
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232382e302f32322d3232203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:09 +0000
ROA not before:           Sun 02 Mar 2025 04:06:09 +0000
ROA not after:            Sun 01 Mar 2026 04:11:09 +0000
asID:                     52369
IP address blocks:        190.184.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b0:60:cf:83:cd:60:7f:3e:e0:0d:ef:10:59:59:ac:c3:aa:e7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:09 2025 GMT
            Not After : Mar  1 04:11:09 2026 GMT
        Subject: CN=FA685A5BCCC74822D6581F1BBF95441693306D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:c2:8b:31:8a:4e:8c:d3:a6:43:9c:6e:dd:
                    ba:48:4f:ba:8b:b6:11:f8:71:c4:17:08:d3:dd:78:
                    9b:d2:28:5b:be:16:bc:b0:31:ea:fe:1c:c7:2f:17:
                    f3:74:f3:20:c9:9e:c3:d4:d1:cb:57:00:99:ea:85:
                    3c:27:53:85:19:fa:a6:28:52:e4:e7:99:c8:83:bd:
                    40:82:33:12:ad:dd:f2:28:f5:1c:d2:53:9b:4a:ec:
                    3b:ac:81:ab:3c:da:38:4e:b1:58:c4:a4:c7:3c:90:
                    d4:ba:88:ff:c7:61:fe:17:66:9b:9f:5e:4f:81:f5:
                    0e:c0:69:10:bf:40:d8:a9:ed:99:a7:c0:37:ce:a5:
                    e0:9d:8b:cf:40:d2:19:39:de:61:4e:fd:cb:b5:f0:
                    3c:e7:9d:b5:06:80:39:19:09:cd:5c:32:36:4b:d1:
                    12:21:ab:dd:62:c3:a6:d4:9a:73:2e:4b:6f:94:ba:
                    12:ee:2b:f8:43:69:94:17:fd:f6:8d:5e:7a:75:d4:
                    8f:d9:19:9e:3a:05:4a:1e:80:b5:f2:a5:e2:e6:fa:
                    a4:58:47:3f:02:23:a4:3c:cc:37:c0:21:19:89:d5:
                    65:72:eb:23:bc:b2:62:1e:25:80:2b:78:0c:f5:93:
                    1c:a1:c2:47:fe:ae:3e:92:2b:03:81:89:a4:8a:3a:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:68:5A:5B:CC:C7:48:22:D6:58:1F:1B:BF:95:44:16:93:30:6D:9A
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232382e302f32322d3232203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:60:bd:df:87:b2:0e:47:04:81:30:4e:ad:62:51:58:5f:1b:
         c4:e2:7f:4e:64:cb:41:f9:29:18:e0:78:ed:7c:ff:48:81:8e:
         7f:85:6a:b3:b4:69:c0:12:dc:8e:19:98:61:90:ea:4f:65:b7:
         c9:b4:c0:f0:89:3f:d7:b6:1d:6b:6a:84:ba:bc:8a:25:a8:39:
         d1:a0:50:ba:82:e3:db:d6:9e:00:f4:19:ea:68:e1:58:27:8d:
         bf:f0:de:b5:a4:35:32:ae:2d:bd:c1:c5:ce:97:72:c6:29:ba:
         c3:7b:fc:12:4e:ab:8e:59:27:67:60:4a:98:29:05:f2:6d:64:
         ae:f8:dc:e4:16:51:57:78:90:c4:d8:d9:87:bd:91:14:35:d7:
         f4:3e:0b:90:c6:5c:58:ef:95:5a:98:63:b6:b6:04:e8:24:02:
         2f:42:57:aa:33:f6:c2:47:18:35:da:e7:47:8c:97:d8:f9:ff:
         b2:4a:35:fc:20:37:ec:e1:98:a7:35:98:8e:be:41:84:42:c8:
         dd:3d:dd:78:30:dd:ea:e8:36:15:30:1a:80:29:ba:66:9e:69:
         8b:d8:6e:25:06:ed:d6:31:bc:73:3b:2b:6e:e7:c0:e7:77:64:
         06:52:01:d2:c5:41:53:d4:44:2d:91:9e:75:9f:ca:da:f1:f4:
         40:2a:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:41:57 2025 by rpki-client