Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa
File:                     3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          3BuJOXf5iRHEyo5gsumD2keREr374/s0y6RAumndiYM=
Subject key identifier:   58:D7:DE:E6:B4:20:53:17:97:8E:CE:D9:4E:3A:53:0C:C5:2D:1C:B7
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       2FE610AC470552E852F2F765E588196CD144B38B
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa
Signing time:             Tue 04 Feb 2025 18:30:39 +0000
ROA not before:           Tue 04 Feb 2025 18:25:39 +0000
ROA not after:            Tue 03 Feb 2026 18:30:39 +0000
asID:                     263822
IP address blocks:        190.103.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e6:10:ac:47:05:52:e8:52:f2:f7:65:e5:88:19:6c:d1:44:b3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:39 2025 GMT
            Not After : Feb  3 18:30:39 2026 GMT
        Subject: CN=58D7DEE6B4205317978ECED94E3A530CC52D1CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:2a:e9:3b:d1:1a:01:c2:96:81:6a:f4:7b:
                    b3:58:ae:e6:0f:55:ff:0a:c6:a4:23:5c:b1:af:a5:
                    4c:a3:95:55:70:6b:d0:61:3f:fb:d8:a5:0f:17:bf:
                    df:0d:6e:21:b5:78:ea:4a:8e:69:63:41:cc:38:d4:
                    c2:82:b5:d0:3e:4c:ca:1b:13:c0:55:02:82:25:eb:
                    d9:1b:99:97:d7:52:ae:4d:2b:12:10:3e:38:bb:3f:
                    5c:bd:ce:40:78:5f:c3:b1:50:67:ce:46:d1:fb:bd:
                    7d:b6:34:26:1c:12:f4:1f:3f:a4:6e:a3:77:0d:c8:
                    ab:3d:f0:c9:6c:d7:52:d6:80:20:5f:24:62:00:17:
                    19:43:8e:61:75:2e:03:75:ee:70:62:7d:70:5b:0d:
                    42:9f:81:da:c9:30:3e:0e:e9:07:b1:fb:a1:6e:b3:
                    7c:e2:3e:98:ff:82:c5:51:38:5e:38:2a:c2:77:3c:
                    a7:e1:2f:87:a5:bb:31:71:e6:cc:b5:68:09:33:15:
                    1e:e8:38:15:3a:ca:21:8a:05:79:a9:03:6b:c8:38:
                    4a:33:08:33:5e:74:25:06:99:c4:53:13:16:bc:28:
                    b8:22:0d:09:1e:bd:cc:04:60:78:bb:a1:2a:8b:e5:
                    40:b0:37:96:ba:9c:13:b6:fa:b7:b9:9a:c2:c5:de:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:DE:E6:B4:20:53:17:97:8E:CE:D9:4E:3A:53:0C:C5:2D:1C:B7
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:9d:4c:1c:4e:23:06:e7:37:e1:64:3f:f7:e0:28:fb:a5:b5:
         77:3b:47:07:96:6c:76:08:15:33:3a:d2:4b:00:ff:7f:4d:84:
         c8:06:20:67:63:48:58:44:14:c0:f2:45:ea:a4:17:8b:50:6c:
         c8:77:28:a8:fc:8d:8e:44:78:d6:02:c1:e8:9b:56:c6:c0:26:
         46:9c:ce:df:7a:b3:5e:99:b1:4a:ed:f1:11:31:47:d7:48:83:
         bf:2b:31:f3:bd:9e:9b:f2:57:f8:50:04:7f:fd:b8:83:36:34:
         68:e3:8f:1b:a4:85:e5:a3:51:6c:1f:35:ed:6f:fd:d4:c5:df:
         4c:97:75:04:c7:3c:5a:04:78:3f:ac:a0:07:88:8b:e9:62:66:
         8a:c0:38:c8:cb:46:42:23:fa:7c:bd:45:6f:6a:92:17:56:e9:
         9f:92:6d:e7:63:d0:5b:d3:bc:e5:b8:d2:43:4e:d7:32:2c:da:
         8e:c8:12:d8:66:1f:7e:2b:50:75:9b:60:8c:7a:41:c5:62:6c:
         f4:46:43:62:31:fb:e3:8f:f3:5c:3f:e4:3f:e7:f7:fe:da:7a:
         3f:e1:5a:ca:d9:1e:ab:fe:cc:1d:cf:c4:aa:00:e8:cd:33:ae:
         b8:c7:c6:4e:ca:32:bf:f1:ba:57:e5:d3:34:52:9d:f4:7c:1b:
         ae:64:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:29:38 2025 by rpki-client