Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3230302e302f32312d3234203d3e20323632313931.roa
File:                     3139302e3133312e3230302e302f32312d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          hjTx5K1vfKdpxXoea6SNHADw0eKSuSMB3/O4dRxapr4=
Subject key identifier:   97:E0:80:A8:26:96:C8:4C:AF:FD:2A:33:3F:2B:E6:62:93:61:BA:67
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       624FC96AEB5D394E980CAF8A5AE41DC7FB403F4A
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3230302e302f32312d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:35 +0000
ROA not before:           Tue 04 Feb 2025 19:59:35 +0000
ROA not after:            Tue 03 Feb 2026 20:04:35 +0000
asID:                     262191
IP address blocks:        190.131.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4f:c9:6a:eb:5d:39:4e:98:0c:af:8a:5a:e4:1d:c7:fb:40:3f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:35 2025 GMT
            Not After : Feb  3 20:04:35 2026 GMT
        Subject: CN=97E080A82696C84CAFFD2A333F2BE6629361BA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:7c:73:53:11:a8:07:61:7b:fa:ab:d8:d5:
                    7a:1b:59:7a:6d:69:ca:85:b4:c3:5d:74:42:3a:cf:
                    13:24:13:9c:65:b8:34:68:d1:fb:f1:fb:00:ad:6a:
                    87:b8:b0:6e:10:00:c6:d1:d4:e4:79:6d:ae:f1:e6:
                    ce:29:4f:12:21:0b:21:56:0c:25:9c:c4:26:ba:90:
                    46:35:e5:22:7d:54:78:e1:6c:64:f3:1f:e5:bc:6d:
                    69:8b:6b:e6:95:98:09:4f:d7:8b:93:9d:5d:fc:81:
                    98:95:90:0f:a7:2b:69:6a:c8:42:21:f1:8d:38:3c:
                    2f:ab:2d:1f:e6:85:1b:94:c0:5d:fb:4e:72:0b:61:
                    c1:c8:3e:9b:ba:68:bb:b0:f7:29:5f:05:02:70:83:
                    6a:d4:d6:e6:9b:78:20:22:f8:b7:af:8a:71:6f:66:
                    03:fb:86:ca:73:92:dc:de:84:3f:99:8d:c8:b2:a3:
                    ef:8d:05:cd:31:7d:c5:41:30:06:e6:29:1d:c7:07:
                    eb:7f:b0:69:b9:65:2a:64:c3:91:50:7f:aa:bb:54:
                    1c:56:f6:ed:8b:53:0a:1f:5b:21:2f:cb:f3:21:f5:
                    4a:9f:00:ac:e0:d6:24:04:c9:15:73:55:48:df:c8:
                    8a:9e:3f:bb:4e:0a:6d:f9:a3:e9:d5:c0:f8:15:a6:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E0:80:A8:26:96:C8:4C:AF:FD:2A:33:3F:2B:E6:62:93:61:BA:67
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3230302e302f32312d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:29:2c:93:49:02:b7:14:d2:f8:94:68:11:90:51:e1:4f:
         b0:1c:7e:d6:f3:50:65:fb:d1:91:d5:fb:c6:d3:50:67:8f:a0:
         03:cb:f3:ea:74:65:77:41:59:f8:d0:43:9b:1d:9a:db:d1:05:
         aa:33:50:ab:5a:36:15:b0:78:5b:fa:ff:bc:8a:e2:3e:42:ed:
         ec:3a:71:84:8b:b9:57:6f:e8:d3:97:85:23:ee:98:ab:4b:7c:
         46:79:3c:a9:ef:f5:b1:c7:f9:01:35:e5:8c:7b:44:14:5b:51:
         b5:d9:5d:0e:87:d5:58:9e:4d:eb:fe:2c:34:34:30:7e:47:b8:
         83:a4:03:62:00:71:b8:99:65:6c:f5:fe:f0:03:fa:4d:b1:4b:
         c4:1d:3a:70:e7:f9:c2:51:45:c8:1b:a4:d0:e0:12:18:7c:b8:
         df:bc:c8:eb:0a:59:62:3b:60:0e:44:62:ed:dd:09:64:c2:a2:
         85:49:24:8b:2a:76:ee:c4:51:27:98:f7:5c:2a:3d:e0:ed:42:
         dc:ac:1f:6b:5b:8f:ec:c2:d7:17:de:1d:8f:73:0f:06:1f:a2:
         96:40:c6:fa:f2:19:05:e0:5c:ba:77:b6:79:62:92:4f:4c:93:
         26:fa:38:7b:2c:82:66:bc:f2:f7:32:6c:58:62:d9:c9:b2:ce:
         43:ba:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:07:44 2025 by rpki-client