Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          IqPS4MrJVGW6l/WA05Xy9OH0QPvoHTmV0/2rMw4CDwQ=
Subject key identifier:   76:2B:E1:AD:AB:EE:44:7A:B1:51:DB:2F:7A:E2:6D:8F:BA:79:45:B5
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3C40DC0D7F5142997E044E8DFB852846977A2C0F
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:18 +0000
ROA not before:           Tue 04 Feb 2025 19:57:18 +0000
ROA not after:            Tue 03 Feb 2026 20:02:18 +0000
asID:                     27773
IP address blocks:        190.150.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:40:dc:0d:7f:51:42:99:7e:04:4e:8d:fb:85:28:46:97:7a:2c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:18 2025 GMT
            Not After : Feb  3 20:02:18 2026 GMT
        Subject: CN=762BE1ADABEE447AB151DB2F7AE26D8FBA7945B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:77:5e:ea:8c:2c:b4:47:10:e4:c9:f6:51:
                    4d:c4:60:45:be:52:4d:3d:72:45:a9:90:da:ae:1b:
                    89:44:64:90:79:f4:56:27:49:f8:24:af:87:e6:05:
                    80:6d:fe:e3:76:37:7f:82:99:dd:88:64:1d:eb:fd:
                    44:ef:4f:d7:b1:7f:9c:35:5f:5c:27:19:e4:b8:5e:
                    b9:3c:bc:58:0b:6f:75:46:28:23:8f:40:fc:96:3e:
                    0b:1d:c6:fc:6e:0f:7e:02:a5:c7:f3:31:50:6b:22:
                    97:2d:5e:c5:77:d7:dc:ae:c5:0a:ba:cd:cb:bb:84:
                    8d:b3:96:29:a5:df:3f:b4:23:ec:56:b9:66:34:6d:
                    29:c5:cb:c4:ae:3c:93:1d:d2:51:6c:a9:c6:ae:de:
                    97:dd:b4:03:7c:48:77:28:04:30:af:54:fc:7c:c4:
                    ba:20:4f:20:cb:1c:98:95:d8:e4:16:9a:32:f8:7b:
                    4f:58:8a:8d:d3:18:76:cc:8f:9f:2c:51:bb:1c:00:
                    c5:50:b7:12:68:0f:53:d8:01:89:f2:6e:d5:82:e3:
                    89:98:6a:cc:7b:10:b4:a6:2d:d7:6e:a9:1a:09:db:
                    a8:7d:4f:70:23:53:8b:4e:04:18:e2:6c:37:7a:93:
                    9f:77:66:22:1d:06:bc:8e:29:58:44:90:32:24:cd:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:E1:AD:AB:EE:44:7A:B1:51:DB:2F:7A:E2:6D:8F:BA:79:45:B5
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:58:da:75:14:d9:5c:18:ad:38:60:78:28:5b:fb:48:10:
         fb:01:b7:66:7e:69:55:39:79:56:72:f8:a8:40:0d:d6:cf:d1:
         9b:a0:45:a1:7a:87:44:87:28:c4:f4:c7:c5:46:49:5b:3a:20:
         b7:e5:73:03:4b:98:e6:91:16:43:f8:0a:88:55:0c:ac:84:f5:
         e0:82:74:36:43:b2:fb:87:1c:4f:a6:4f:2b:60:0d:a9:a6:00:
         eb:51:cf:67:2a:68:46:ba:64:4d:3a:db:91:19:e1:b3:c1:10:
         17:38:6f:6e:70:91:95:96:1e:f6:25:38:5b:e0:b8:37:ae:c6:
         61:d2:03:5d:78:69:da:74:85:18:24:6c:bd:98:ee:38:ff:ec:
         13:d4:e0:09:20:e7:c0:a7:9f:a1:22:5e:a2:24:a0:d9:38:06:
         17:7b:54:0c:ac:60:e1:db:78:dd:5c:23:6b:dd:61:84:c6:81:
         9c:54:36:a8:68:98:c8:44:75:c9:bd:29:57:5d:c7:16:6c:a2:
         af:99:42:f7:55:5c:c8:85:b2:ea:8b:bb:7b:9b:fa:0c:4e:46:
         a2:71:8d:64:c1:a1:58:37:1c:0b:20:a3:32:fa:c1:39:d4:60:
         1b:52:c0:76:88:9b:16:e9:c1:ad:b8:45:af:95:6b:5e:48:26:
         bd:83:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:06 2025 by rpki-client