Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3139302e3231312e38302e302f32312d3234203d3e20323632313837.roa
File:                     3139302e3231312e38302e302f32312d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          6qvjJPrc87iFVHGGnLylP+fYw9kvhFLgTcayX9FO3A0=
Subject key identifier:   FB:27:D9:33:46:46:3B:7C:46:0D:38:56:60:B6:6A:B7:F6:5F:44:D7
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       22D24E695AE62AC8CC3A07B7B1816693FEC4908B
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3139302e3231312e38302e302f32312d3234203d3e20323632313837.roa
Signing time:             Tue 04 Feb 2025 18:39:52 +0000
ROA not before:           Tue 04 Feb 2025 18:34:52 +0000
ROA not after:            Tue 03 Feb 2026 18:39:52 +0000
asID:                     262187
IP address blocks:        190.211.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d2:4e:69:5a:e6:2a:c8:cc:3a:07:b7:b1:81:66:93:fe:c4:90:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Feb  4 18:34:52 2025 GMT
            Not After : Feb  3 18:39:52 2026 GMT
        Subject: CN=FB27D93346463B7C460D385660B66AB7F65F44D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:b2:69:0d:01:1d:6f:ea:c8:ba:40:2d:8c:
                    7e:ac:fb:54:03:4e:d9:7f:0e:75:6e:c6:ff:62:5a:
                    58:d3:ef:81:12:e5:74:b8:18:54:e4:9c:96:5a:33:
                    bd:12:a2:0e:02:37:15:44:18:64:ef:ab:a0:c2:58:
                    b4:66:1f:e5:fb:66:0b:a0:51:15:7f:52:4a:b9:ea:
                    99:52:e1:53:63:48:cf:4a:f1:db:20:7c:ed:6c:ed:
                    10:b4:e3:98:0d:26:68:41:56:94:34:cd:56:8f:42:
                    a0:cd:3c:e5:4d:1c:fe:09:b2:75:be:8b:32:64:69:
                    0a:9e:c7:61:ff:25:f9:d7:6f:2d:15:06:63:44:07:
                    18:e2:b8:47:a8:c0:cc:2e:19:27:8d:76:74:62:49:
                    72:4a:ca:8c:cd:4a:88:44:1f:5e:39:5d:86:be:a1:
                    6d:09:4b:14:eb:0c:ae:d9:78:b7:ca:5e:90:7c:bf:
                    65:cc:2c:ab:d9:e1:74:fb:dc:cf:96:9c:9c:ba:98:
                    33:19:0f:2f:e3:65:12:72:e5:73:e5:34:4d:f9:d6:
                    7c:6a:bd:07:31:f8:14:db:db:7d:b3:29:f0:2d:32:
                    ad:f2:41:ff:d2:d0:f4:53:bf:af:9d:4a:b3:f0:98:
                    d5:d9:b2:f5:51:c0:48:34:2b:22:c2:c1:b1:43:c0:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:27:D9:33:46:46:3B:7C:46:0D:38:56:60:B6:6A:B7:F6:5F:44:D7
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3139302e3231312e38302e302f32312d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:87:20:18:f4:50:d3:e4:96:2a:85:ce:e6:86:15:cd:a0:1d:
         8d:6f:87:c1:86:8b:8d:25:a2:94:f5:6f:5a:fa:40:1b:98:d7:
         1a:4a:ff:09:ec:e0:d2:f8:35:9d:13:bd:b0:87:5a:a3:b6:63:
         e5:62:cc:84:78:c2:62:80:b2:ec:fc:e5:1e:a9:6a:20:31:2a:
         3f:22:02:b2:53:60:49:09:d8:49:0c:37:3c:e9:57:7b:aa:27:
         c7:44:bc:b7:73:30:2c:0e:a8:81:69:2d:eb:ab:c8:e6:64:01:
         a1:98:ee:95:dc:66:d8:57:4b:6b:bf:9f:7f:3a:1c:f8:4f:e0:
         28:78:c8:04:2c:06:07:bc:24:22:04:bd:f8:86:53:ec:30:9e:
         d9:0d:46:06:8d:5d:f5:f8:7a:5f:33:db:bf:db:94:90:2b:34:
         7b:e3:96:26:37:31:0c:7f:cf:c3:22:d5:07:7d:83:01:67:a1:
         38:af:c8:b6:e9:04:11:2c:7b:c2:d1:85:f3:34:98:79:09:08:
         35:e9:6d:c9:d9:bc:67:23:d9:61:ce:fc:82:82:2a:ed:08:33:
         e4:c8:53:33:b8:44:21:28:7b:52:89:48:ef:25:18:68:1e:25:
         56:4d:a6:2b:8a:6b:47:6c:d3:de:0e:32:86:c1:f4:5d:c3:f5:
         e4:d3:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:45 2025 by rpki-client