Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35302e302f32332d3234203d3e203237373733.roa
File:                     3139302e3135302e35302e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          1y9TzHmfH1Zv//8L8aWxBsAGmT6frj4oR7ryLX6w260=
Subject key identifier:   6A:D2:38:C0:B0:E5:1C:4C:88:15:C4:DF:89:96:0E:77:EF:17:11:90
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       64B39F8FB3DE9D1EA9AB8125E2AE5E8501E7F3D9
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35302e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:20 +0000
ROA not before:           Tue 04 Feb 2025 19:57:20 +0000
ROA not after:            Tue 03 Feb 2026 20:02:20 +0000
asID:                     27773
IP address blocks:        190.150.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b3:9f:8f:b3:de:9d:1e:a9:ab:81:25:e2:ae:5e:85:01:e7:f3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:20 2025 GMT
            Not After : Feb  3 20:02:20 2026 GMT
        Subject: CN=6AD238C0B0E51C4C8815C4DF89960E77EF171190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:94:b8:a7:1e:ac:71:38:f7:73:ba:2e:4c:
                    33:05:74:d5:75:52:b0:57:be:00:41:44:40:09:92:
                    25:7c:67:35:b2:8a:a8:a5:54:41:f1:fd:d8:34:19:
                    2f:90:39:bc:2d:29:65:f7:5b:f4:01:c5:e1:ed:b0:
                    30:be:6f:71:c3:2b:29:48:d2:51:75:44:fe:2b:5f:
                    fb:fa:34:f1:56:0f:a0:19:07:d3:74:ea:ae:56:e8:
                    24:ea:3f:9a:2a:c2:b5:79:01:49:f8:96:b4:72:9d:
                    bf:f4:af:bf:25:62:9c:42:4a:f2:0c:c0:45:6e:24:
                    8f:45:94:ca:d1:61:f6:56:4b:32:d4:c0:51:52:0a:
                    17:9f:a8:ad:dd:e3:0b:3a:de:b4:3b:5e:d6:7c:83:
                    a4:11:88:c1:77:54:40:9a:d1:eb:0b:b0:e5:2d:b6:
                    75:cd:70:1c:a2:c0:14:48:b5:ae:6d:ac:6f:8a:2f:
                    90:b3:ba:dc:6c:cd:85:0c:6b:a5:65:02:21:95:27:
                    77:83:d8:e2:c2:8e:9e:42:46:79:77:87:cc:53:bc:
                    33:d0:5f:22:ed:00:da:51:bd:90:be:5e:e4:9f:44:
                    f3:2f:ca:ba:a0:51:2d:50:3d:f7:f6:d6:e0:2f:45:
                    64:9d:b0:d3:0e:4d:70:15:cc:3f:b4:31:90:33:74:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:38:C0:B0:E5:1C:4C:88:15:C4:DF:89:96:0E:77:EF:17:11:90
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35302e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:07:f3:ae:0b:65:49:b8:46:13:f7:c0:1a:83:88:b7:17:f8:
         c5:aa:3d:78:27:32:59:3b:b4:a3:e3:83:ea:84:7d:d1:73:bf:
         c5:99:3a:47:54:49:09:3e:d5:be:be:6c:3d:49:62:c6:6f:ef:
         d2:ca:c3:16:19:3b:97:c5:56:1a:cc:9e:43:86:ce:05:65:a7:
         74:22:a8:2e:ed:68:58:7c:51:06:cb:22:ee:d6:dd:3d:0d:c7:
         99:97:83:31:cd:7d:9f:8f:f2:f5:95:ae:03:89:92:80:c3:d5:
         86:31:f3:3c:05:87:02:d0:c0:2e:58:f4:0a:16:29:97:95:2a:
         26:74:1d:b1:f1:7e:49:b8:04:0b:c8:d7:f3:87:02:3a:ad:0f:
         3e:7c:da:2d:71:55:b5:ab:02:5a:c3:45:8f:64:73:c1:f6:b0:
         bd:1b:66:92:37:b8:f7:bf:43:9f:07:5b:8a:cd:7f:25:38:71:
         f9:bc:8f:c7:c6:96:1b:07:ab:14:b9:d8:c6:f6:a7:af:39:69:
         e7:12:54:77:7b:33:d7:8f:94:ca:22:1e:30:6e:19:ec:d0:36:
         2c:28:6d:bd:23:00:0a:77:83:3d:1a:d6:63:b1:a8:26:3b:30:
         05:b8:9a:bd:9b:de:b4:37:b5:6b:3c:8a:fc:c2:5d:34:60:88:
         d6:52:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:02 2025 by rpki-client