Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa
File:                     3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier:          7yc3KqrN2xS/nnzYfbyCfDuZ/aKHHWnKRoImouYK+5w=
Subject key identifier:   60:AF:59:21:93:B3:9E:CC:39:43:45:12:6A:98:41:A3:43:3B:8B:F7
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       36624BC9375F47E57C4870823DEEEE820CFF77FA
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:03 +0000
ROA not before:           Tue 04 Feb 2025 19:57:03 +0000
ROA not after:            Tue 03 Feb 2026 20:02:03 +0000
asID:                     27773
IP address blocks:        190.150.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:62:4b:c9:37:5f:47:e5:7c:48:70:82:3d:ee:ee:82:0c:ff:77:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:03 2025 GMT
            Not After : Feb  3 20:02:03 2026 GMT
        Subject: CN=60AF592193B39ECC394345126A9841A3433B8BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:7c:20:98:4c:a1:15:2d:7c:36:a1:74:f0:
                    f5:f3:ca:d0:97:00:54:5e:ea:55:a0:6e:72:58:b2:
                    c7:1e:ac:5a:ee:e2:17:41:c7:be:a8:d6:cc:14:68:
                    60:70:fa:45:2e:6a:44:a3:a3:e5:18:6c:15:f8:56:
                    3b:97:30:ee:61:f5:98:e1:cc:09:e7:4a:d5:95:cc:
                    e2:68:cf:17:0b:e5:28:da:a1:3e:46:2e:07:6f:2a:
                    3f:67:68:ad:78:e2:fa:75:cf:c3:cf:bf:1a:db:03:
                    29:13:0f:fd:57:92:c1:ca:c2:46:f5:17:a4:c8:42:
                    e3:39:cd:1f:c4:01:bc:81:cd:97:79:48:57:62:27:
                    56:ed:95:92:d2:6a:cd:2a:d0:76:86:96:df:f7:8b:
                    ad:90:1f:90:89:87:68:26:9f:82:ec:18:40:32:ae:
                    f0:1c:a2:be:0a:f8:71:c9:a1:89:a5:cf:d3:1f:10:
                    31:59:85:82:17:24:b2:29:f2:f8:99:a1:be:74:4d:
                    6a:75:46:dd:8a:06:7d:a3:da:13:45:f7:e2:20:40:
                    d3:c8:8d:e6:e4:be:4f:a4:27:26:06:91:7e:bb:48:
                    ac:65:f6:f2:19:01:41:15:83:35:25:1f:76:cc:a4:
                    c5:10:01:b9:5a:fc:72:88:57:9d:90:b5:30:d6:87:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AF:59:21:93:B3:9E:CC:39:43:45:12:6A:98:41:A3:43:3B:8B:F7
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:a9:52:7d:a8:ed:b0:8c:88:60:ce:47:83:b5:fc:69:34:
         5c:18:61:a1:e2:c6:dc:ee:20:0a:20:29:9f:fb:44:96:ea:f6:
         14:b4:70:60:95:8a:da:98:1c:33:c1:ff:d0:82:60:83:e2:0b:
         d0:3f:61:be:82:14:94:c7:d4:56:b3:2a:b0:32:ec:6b:db:e6:
         b1:09:4c:bb:5f:44:f9:d9:78:b3:4d:aa:58:36:07:ed:03:b2:
         bf:de:3d:f3:aa:cf:40:a6:27:64:6a:9e:df:32:d6:88:c4:ce:
         a8:c2:89:40:5d:57:1c:90:8a:06:bb:3f:04:0d:d6:5b:4d:02:
         c1:ab:e9:7b:76:05:3a:04:3b:ab:12:6e:0d:51:46:f7:b6:57:
         1d:77:f6:40:a2:ab:3e:61:66:63:21:54:3b:5c:35:09:cb:6c:
         34:c4:18:c6:12:d0:93:b0:be:36:57:e1:6e:6b:40:89:e5:f6:
         ef:ba:02:74:30:ee:79:ef:cd:00:45:f6:77:ba:69:4e:4f:d2:
         b3:ed:a7:37:52:0e:d1:b7:5d:a1:45:46:5d:60:e6:87:bd:17:
         d4:d3:77:a9:b0:55:9f:c1:ea:b4:08:71:cb:a8:2f:69:10:9e:
         b6:a6:56:bc:fa:28:97:43:bb:9a:7b:ea:34:a0:3b:e4:0a:4a:
         35:f0:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:54 2025 by rpki-client