Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          4PZhZ9VrBpL/Nl+2yFhcBC85VpX4m47DeYkoRYs6z8Q=
Subject key identifier:   6B:3D:BF:83:DF:8E:1C:6C:29:92:05:07:35:56:42:07:4F:6D:BE:BE
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       7F372B6039B5F4D35B30CEDBFA7372BC0638217C
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:32 +0000
ROA not before:           Tue 04 Feb 2025 19:59:32 +0000
ROA not after:            Tue 03 Feb 2026 20:04:32 +0000
asID:                     262191
IP address blocks:        190.131.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:37:2b:60:39:b5:f4:d3:5b:30:ce:db:fa:73:72:bc:06:38:21:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:32 2025 GMT
            Not After : Feb  3 20:04:32 2026 GMT
        Subject: CN=6B3DBF83DF8E1C6C29920507355642074F6DBEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:a8:5e:28:76:60:eb:0f:34:61:d7:30:c2:
                    63:a9:52:c7:29:d5:47:98:f3:bc:65:be:d2:33:1e:
                    f7:1a:9a:69:53:b5:25:4a:ba:9a:45:e5:c0:72:87:
                    6c:1f:a9:a0:e9:c2:f4:73:d4:39:b7:7c:4d:40:99:
                    90:6b:ad:8e:a4:93:08:7b:25:ca:94:7f:a7:10:6f:
                    f8:08:0f:d7:26:47:2b:c3:69:e0:df:c4:75:d5:f7:
                    09:17:80:2f:16:e0:6d:3f:5d:73:ee:ed:17:bc:d6:
                    d1:af:4f:df:77:5d:be:ff:13:b4:22:f7:53:90:cf:
                    b8:95:9d:4d:87:66:80:09:67:c7:52:cd:16:90:9a:
                    97:a8:80:94:6b:13:7b:1d:55:c1:ca:68:f4:46:77:
                    9a:8c:42:11:fe:f4:2c:90:eb:e6:12:ef:a9:ab:fa:
                    8f:35:0f:97:b3:87:a7:cc:78:2d:c9:e6:1c:0e:ff:
                    c4:20:4d:56:f1:df:19:0e:20:e0:5b:d6:7a:b9:4f:
                    75:15:70:fb:1f:04:c8:38:17:5f:ab:5a:d7:8c:e2:
                    c3:59:5c:af:af:72:63:c8:66:a5:af:22:e8:3c:46:
                    b9:5b:3f:af:2c:ac:5b:43:f4:70:a2:be:40:a9:95:
                    d7:f2:87:e6:fa:6d:1c:07:12:92:f6:71:31:d4:49:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3D:BF:83:DF:8E:1C:6C:29:92:05:07:35:56:42:07:4F:6D:BE:BE
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:12:7b:f6:f4:e6:9a:64:44:96:71:31:c5:ea:bf:c3:03:c0:
         db:e5:08:00:31:63:7b:9f:1c:1a:cc:99:4e:8e:ad:f8:48:a4:
         df:ef:67:8d:1f:ff:e7:ce:20:c4:df:e5:77:09:b2:5b:1b:54:
         b8:12:ba:31:92:18:36:29:a1:d2:87:06:01:03:e1:8a:d3:c3:
         7d:37:cd:b5:c0:52:01:61:d0:d2:6f:3d:b9:c4:39:1b:0b:bc:
         05:1a:b0:31:24:c9:b8:f6:9b:5e:ab:f3:79:09:4b:31:81:7a:
         82:bc:92:da:ee:ca:8b:b2:13:1c:59:e7:34:78:cc:46:1f:05:
         04:ec:5a:04:e2:44:af:6d:ad:0b:78:f6:81:f7:52:a9:77:56:
         8d:26:3c:f8:63:50:de:3c:c2:d8:80:31:05:98:01:fc:f4:ee:
         70:42:c8:17:07:81:d5:61:1c:10:c2:89:2f:1b:29:b3:89:80:
         ad:99:a8:2a:f4:f3:02:d0:91:9c:72:af:ba:c2:91:53:92:0b:
         7a:4d:ff:b5:3b:9c:93:0d:99:6b:95:27:05:a4:d1:8f:f7:0a:
         93:71:1f:8c:44:29:20:fe:1a:b8:f4:9f:ec:6f:bb:26:d6:58:
         3c:41:83:73:3f:b1:4c:fa:ca:0e:70:4b:e2:0e:69:e2:f8:09:
         f4:d0:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:19:35 2025 by rpki-client