Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233362e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233362e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          Ibf7vmLxER9qe/hdyT0KLXWVkrjXFBwZ6hHXbw04+D8=
Subject key identifier:   58:22:50:FD:C7:96:DB:9B:0D:85:30:FF:A0:77:18:18:20:54:B8:7A
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       6EA03357A616E2F3A301A86E526A3CFA7EE963AE
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233362e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:11 +0000
ROA not before:           Sun 02 Mar 2025 04:06:11 +0000
ROA not after:            Sun 01 Mar 2026 04:11:11 +0000
asID:                     52369
IP address blocks:        190.184.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:33:57:a6:16:e2:f3:a3:01:a8:6e:52:6a:3c:fa:7e:e9:63:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:11 2025 GMT
            Not After : Mar  1 04:11:11 2026 GMT
        Subject: CN=582250FDC796DB9B0D8530FFA07718182054B87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:30:2e:fb:81:10:e3:26:a3:24:d3:89:c5:
                    7f:2a:d7:1e:9a:81:ed:56:44:0d:3f:82:25:1c:cb:
                    6b:0a:37:72:16:0c:4e:09:d6:d9:ef:d5:13:42:e8:
                    23:cc:83:26:78:8e:01:ba:fb:96:c5:85:f3:63:a0:
                    64:77:22:ba:b5:ac:30:05:32:ab:65:dd:bc:5a:44:
                    62:25:c8:cb:ac:08:3c:1a:bb:84:6a:f7:3f:23:fe:
                    f5:10:ff:74:37:b4:83:dd:fe:8c:62:78:27:4d:d9:
                    1b:7f:55:11:b8:88:08:16:fe:b7:55:2e:fa:00:32:
                    25:89:fc:66:9d:e7:59:5b:5a:33:7a:89:2c:d9:00:
                    85:95:e9:3c:81:0a:df:2b:9b:14:9e:d6:b1:37:7e:
                    1c:2e:d1:c3:f2:f4:49:18:27:29:b2:5b:55:7e:41:
                    51:18:ca:7d:59:1c:4b:86:c3:57:6e:c4:45:b5:96:
                    a7:dd:2e:82:04:3f:ac:c8:22:df:7a:40:51:7a:ef:
                    7e:2a:af:c8:9b:d1:67:5c:03:f5:fd:f3:a6:42:8e:
                    cb:ca:48:04:be:8a:d6:d8:ec:4a:fa:68:3f:a6:cf:
                    78:1f:49:18:cf:5d:4c:0b:fd:6e:df:ac:33:2d:dc:
                    34:57:cb:62:8f:82:47:8b:a1:89:c8:72:dc:60:47:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:22:50:FD:C7:96:DB:9B:0D:85:30:FF:A0:77:18:18:20:54:B8:7A
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233362e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:1f:9a:fd:15:47:9a:d7:e5:23:1a:8d:01:2b:9b:33:e9:fb:
         52:67:87:6d:73:e5:f3:b2:da:00:66:f9:0e:aa:9c:50:ad:f2:
         4a:3d:b4:77:31:05:cd:69:7b:f5:d1:19:8f:72:4e:89:e8:12:
         36:81:af:67:b9:c1:4d:d5:26:b1:ce:53:6a:07:1a:51:5a:ff:
         53:6d:14:60:bb:8c:73:45:83:e7:90:e1:25:b2:7f:df:0c:01:
         dc:cf:71:ed:28:cd:77:5b:e8:a3:7b:da:16:6d:92:87:58:25:
         4f:58:dd:ad:77:7d:3c:de:04:d8:a1:87:43:69:58:a4:57:05:
         05:ca:35:fd:19:f0:61:de:28:10:41:a6:b8:b3:e3:0c:09:b2:
         e7:b7:1b:03:62:c1:47:17:99:9d:29:a5:ff:8a:a9:29:39:71:
         dc:e1:f8:db:88:9e:17:02:c6:c1:b1:ec:77:7b:eb:53:0a:f3:
         12:f5:56:98:8a:54:a0:de:2d:f4:e9:5f:ca:b3:1a:d1:15:3d:
         1a:a3:af:4e:df:68:5e:88:b3:b5:78:2f:4a:42:14:d8:f5:70:
         15:19:32:76:78:82:af:81:56:06:fa:34:86:76:f6:a9:ee:59:
         e0:35:22:b1:07:17:cd:d2:97:39:7d:c0:47:40:74:43:6a:3b:
         c0:cd:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:27 2025 by rpki-client