Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137322e302f32332d3233203d3e20323732303339.roa
File:                     3139302e38392e3137322e302f32332d3233203d3e20323732303339.roa (raw, json)
Hash identifier:          I/d73zCOcsfp4O8UVqebjpkWvBV5u26KVnEAKtN7Cw8=
Subject key identifier:   8A:4C:90:C4:FA:C7:AD:EC:25:73:6B:6A:00:FA:6D:C7:70:9A:8A:2D
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       3B5E2CCAB5896EF164EB6C3DD7D9EB16D11394C8
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137322e302f32332d3233203d3e20323732303339.roa
Signing time:             Tue 04 Feb 2025 20:02:41 +0000
ROA not before:           Tue 04 Feb 2025 19:57:41 +0000
ROA not after:            Tue 03 Feb 2026 20:02:41 +0000
asID:                     272039
IP address blocks:        190.89.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl
                          rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:2c:ca:b5:89:6e:f1:64:eb:6c:3d:d7:d9:eb:16:d1:13:94:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Feb  4 19:57:41 2025 GMT
            Not After : Feb  3 20:02:41 2026 GMT
        Subject: CN=8A4C90C4FAC7ADEC25736B6A00FA6DC7709A8A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d0:43:c7:f2:34:52:3c:74:cd:2d:94:5b:8a:
                    49:6e:19:71:6e:18:c8:77:19:c9:dd:9e:cb:57:e4:
                    75:ab:77:37:f8:28:3d:7e:ed:92:fe:03:d1:d5:34:
                    1c:68:80:63:5d:24:b3:f6:42:d5:da:c5:99:21:84:
                    ca:02:fb:0e:d9:ad:03:24:ad:0b:c6:7f:e6:f1:0c:
                    8a:59:b2:47:76:46:c6:d4:38:ec:8b:57:12:ed:9d:
                    64:48:19:7f:c0:15:bb:dc:56:63:60:60:9b:a1:6d:
                    75:2f:cb:6a:bf:d1:b0:01:43:37:08:68:0d:d3:ac:
                    ce:0d:75:44:54:a9:75:1a:68:34:db:a1:6d:47:cf:
                    d9:c7:a0:86:29:2d:e9:21:4f:f3:52:56:e2:ca:21:
                    38:35:1d:09:04:df:66:3f:43:67:bd:c6:5b:90:e1:
                    89:70:43:6f:a0:47:4b:ae:0a:4b:32:cd:65:a7:ff:
                    d7:72:14:a4:60:5d:77:3d:6d:eb:a7:58:79:b0:41:
                    19:e8:7b:07:88:a5:20:35:02:2b:bd:4f:e3:c9:65:
                    ce:53:54:3b:cf:da:e8:34:a1:f5:c7:d3:f1:b7:8f:
                    0c:76:4c:ab:30:41:79:68:d3:ca:e8:cc:2a:60:d1:
                    3b:69:84:4b:59:29:70:4e:ce:2a:41:e4:46:d1:3a:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4C:90:C4:FA:C7:AD:EC:25:73:6B:6A:00:FA:6D:C7:70:9A:8A:2D
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137322e302f32332d3233203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:1f:74:3b:f4:8b:52:2d:61:6d:b3:8d:8f:8b:c9:05:2c:
         06:88:51:1c:f5:13:0a:3a:70:ec:23:ab:88:74:c6:bb:c4:78:
         9f:f5:1e:d6:9f:3f:6b:c1:a6:ca:68:df:7b:fa:48:05:c9:79:
         2d:f3:d6:cd:49:ea:27:fa:2a:3d:94:48:1e:58:d2:f1:64:60:
         5b:fb:cf:c7:9d:52:fb:de:c2:0f:43:60:5a:58:9a:53:f3:ed:
         64:e2:2c:91:07:f1:c8:34:2b:84:fc:8d:f3:1c:0b:86:c5:46:
         22:98:38:e1:fd:5a:6a:9d:1a:ae:3a:96:e0:c0:cd:10:96:0f:
         e2:43:ef:42:17:17:c8:7b:8c:d7:ca:2b:9e:34:a9:a4:18:e4:
         9d:55:b8:ad:f7:ad:07:57:59:bb:ba:c3:27:37:92:1f:2c:51:
         62:82:60:38:ea:cf:3f:a7:c9:78:2d:b2:74:c5:07:8e:e8:da:
         9d:08:01:7e:e6:fa:48:9c:e8:18:f7:76:56:3e:52:39:eb:be:
         d6:31:db:66:f2:68:b0:ed:09:cb:99:bd:4f:cb:e8:a0:d1:95:
         7c:da:14:ed:95:98:0c:bb:30:d7:f8:94:9c:d1:9a:3a:7e:af:
         61:48:9b:a7:e3:2b:27:49:35:20:b8:7d:e3:ac:20:6f:e5:86:
         49:d3:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:22 2025 by rpki-client