Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3138322e302f32342d3234203d3e20323633323338.roa
File:                     3139302e392e3138322e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          nIaifMUfgajduQNbjHCzUVF15bqzySqcRvrTtzbdG1I=
Subject key identifier:   A9:42:BD:EB:0C:E8:8F:95:FC:11:B8:1D:D1:DB:7D:90:E4:08:D6:B7
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       1FA5038256CE362C7BBCE5A8E9370672802E6720
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3138322e302f32342d3234203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 18:33:22 +0000
ROA not before:           Tue 04 Feb 2025 18:28:22 +0000
ROA not after:            Tue 03 Feb 2026 18:33:22 +0000
asID:                     263238
IP address blocks:        190.9.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a5:03:82:56:ce:36:2c:7b:bc:e5:a8:e9:37:06:72:80:2e:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Feb  4 18:28:22 2025 GMT
            Not After : Feb  3 18:33:22 2026 GMT
        Subject: CN=A942BDEB0CE88F95FC11B81DD1DB7D90E408D6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:b9:2a:d3:0c:76:eb:21:6b:bb:c1:f9:57:
                    2a:ba:7d:b8:9b:57:1d:34:58:5c:62:a2:18:fd:27:
                    4c:eb:9f:c6:dd:c3:48:45:e6:4d:87:01:54:c4:5f:
                    be:f5:c6:c2:5f:27:ca:3d:9c:9c:43:8a:87:db:68:
                    f5:e4:6e:c0:7d:b3:91:0e:d8:6d:a8:88:48:d7:d4:
                    cf:a9:c4:a9:92:a4:e3:d6:88:a7:dc:f5:32:c0:ce:
                    67:ab:aa:07:f2:6b:09:3e:43:e8:c1:28:f5:47:bd:
                    c2:3a:ce:28:ca:5b:88:df:d8:a6:9c:dd:07:fe:7a:
                    72:86:c4:7e:a2:83:e3:80:7c:7c:f8:a6:58:02:40:
                    a1:e8:3c:a0:e3:51:cc:57:14:d3:5b:04:7d:c1:67:
                    a6:0f:7a:cc:43:1e:fc:34:d0:ab:bb:44:55:21:9d:
                    46:ef:ed:9e:05:43:64:f3:eb:42:59:99:09:20:15:
                    e1:74:57:8f:06:66:0b:ea:44:39:a0:03:3a:28:20:
                    d1:12:a0:db:8f:94:46:e8:aa:ca:58:81:9c:82:17:
                    b1:6d:b2:db:24:ae:7a:9e:05:82:1a:7e:ec:49:e9:
                    97:bf:60:19:7f:66:ef:bf:d5:91:10:8a:63:d5:7c:
                    ec:96:f1:bf:5f:f7:11:f0:e0:43:ac:70:fa:51:4c:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:BD:EB:0C:E8:8F:95:FC:11:B8:1D:D1:DB:7D:90:E4:08:D6:B7
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3138322e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c6:53:5a:5d:6b:6e:5b:f7:37:00:83:84:5f:b0:3f:e5:ac:
         0e:72:af:d4:6d:34:e8:de:72:a1:b2:aa:23:64:99:7b:65:99:
         f2:60:5b:2b:cc:48:c0:10:0e:07:16:6c:be:a0:74:d7:54:4b:
         47:a7:f7:97:5f:6c:63:bd:c7:39:76:5f:2a:ba:da:d4:16:99:
         8c:07:88:8a:dd:1e:c2:a6:50:0f:38:30:d8:7b:7f:ed:ad:07:
         c8:ae:23:e0:18:a7:e8:2b:6d:28:92:da:49:6e:ec:0f:2d:80:
         cc:06:1c:5e:29:9a:2e:11:52:96:8c:b4:08:1d:67:57:3a:cd:
         12:d3:bd:4c:1c:2f:82:8d:a6:ef:08:ec:6f:dc:f3:97:81:86:
         f6:cf:c0:2e:1b:c1:ad:87:98:5f:4d:3f:b7:24:1e:e3:8b:7c:
         66:bc:3a:97:1b:44:60:72:0b:cd:43:fe:17:92:37:59:41:d3:
         09:37:cb:f4:78:35:5d:75:00:56:09:1e:34:e6:19:50:fb:d1:
         c7:29:ef:ba:99:20:e1:07:53:77:48:88:1d:9c:31:49:4e:65:
         88:c7:5e:25:60:35:b6:f6:b9:cd:f8:f8:a4:5d:7d:53:64:e9:
         de:87:94:2f:69:84:68:d7:8a:89:0f:73:80:b0:50:31:ed:70:
         96:35:77:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUH6UDglbONix7vOWo6TcGcoAuZyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3MDlGNzc3OTg4RDhCQjlDMjlEQkJCNTM5Njg4MTI1
NjhDNjE2RTAeFw0yNTAyMDQxODI4MjJaFw0yNjAyMDMxODMzMjJaMDMxMTAvBgNV
BAMTKEE5NDJCREVCMENFODhGOTVGQzExQjgxREQxREI3RDkwRTQwOEQ2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvbkq0wx26yFru8H5Vyq6fbib
Vx00WFxiohj9J0zrn8bdw0hF5k2HAVTEX771xsJfJ8o9nJxDiofbaPXkbsB9s5EO
2G2oiEjX1M+pxKmSpOPWiKfc9TLAzmerqgfyawk+Q+jBKPVHvcI6zijKW4jf2Kac
3Qf+enKGxH6ig+OAfHz4plgCQKHoPKDjUcxXFNNbBH3BZ6YPesxDHvw00Ku7RFUh
nUbv7Z4FQ2Tz60JZmQkgFeF0V48GZgvqRDmgAzooINESoNuPlEboqspYgZyCF7Ft
stskrnqeBYIafuxJ6Ze/YBl/Zu+/1ZEQimPVfOyW8b9f9xHw4EOscPpRTLbfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqUK96wzoj5X8Ebgd0dt9kOQI1rcwHwYDVR0j
BBgwFoAU0nCfd3mI2LucKdu7U5aIElaMYW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JEQTNDQkUzRjk0QjE5RURGMDA5OTUzQzBGNDU1RDcw
NTNCMDYwODgzRkY3NEFCM0ZGQ0ExMjgxOEYwOTMyLzAvRDI3MDlGNzc3OTg4RDhC
QjlDMjlEQkJCNTM5Njg4MTI1NjhDNjE2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjcwOUY3Nzc5ODhEOEJCOUMy
OURCQkI1Mzk2ODgxMjU2OEM2MTZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCREEzQ0JFM0Y5NEIxOUVERjAwOTk1M0MwRjQ1NUQ3MDUzQjA2MDg4
M0ZGNzRBQjNGRkNBMTI4MThGMDkzMi8wLzMxMzkzMDJlMzkyZTMxMzgzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzMzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4JtjAN
BgkqhkiG9w0BAQsFAAOCAQEAPMZTWl1rblv3NwCDhF+wP+WsDnKv1G006N5yobKq
I2SZe2WZ8mBbK8xIwBAOBxZsvqB011RLR6f3l19sY73HOXZfKrra1BaZjAeIit0e
wqZQDzgw2Ht/7a0HyK4j4Bin6CttKJLaSW7sDy2AzAYcXimaLhFSloy0CB1nVzrN
EtO9TBwvgo2m7wjsb9zzl4GG9s/ALhvBrYeYX00/tyQe44t8Zrw6lxtEYHILzUP+
F5I3WUHTCTfL9Hg1XXUAVgkeNOYZUPvRxynvupkg4QdTd0iIHZwxSU5liMdeJWA1
tva5zfj4pF19U2Tp3oeUL2mEaNeKiQ9zgLBQMe1wljV3nw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:28 2025 by rpki-client