Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa
File:                     3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa (raw, json)
Hash identifier:          Q2ciXMHKd3tRjymoqTK3+2+mNwV+kca7OsMss5+MDxM=
Subject key identifier:   70:92:0F:66:B4:8A:B6:74:D0:16:DB:EB:9E:0A:22:51:07:E2:4A:11
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       54029C6EC3A8CDD8BE0BB196E6FE00B4007C69EC
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa
Signing time:             Tue 04 Feb 2025 18:30:34 +0000
ROA not before:           Tue 04 Feb 2025 18:25:34 +0000
ROA not after:            Tue 03 Feb 2026 18:30:34 +0000
asID:                     265683
IP address blocks:        190.185.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:02:9c:6e:c3:a8:cd:d8:be:0b:b1:96:e6:fe:00:b4:00:7c:69:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:34 2025 GMT
            Not After : Feb  3 18:30:34 2026 GMT
        Subject: CN=70920F66B48AB674D016DBEB9E0A225107E24A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:d5:25:03:55:b1:f5:82:96:a7:f9:74:50:
                    10:82:d0:07:0a:c6:d8:7f:f9:66:a9:9f:9a:f3:d8:
                    ed:6b:fe:6d:1d:e5:32:a9:da:22:69:08:b1:0e:86:
                    f0:be:33:f8:52:77:15:ce:79:c8:c5:e5:49:1e:09:
                    5c:e0:5f:2a:c6:14:a9:97:f2:eb:ab:26:51:67:ea:
                    4b:7d:6c:56:99:e9:2d:27:b1:25:1d:11:79:c3:22:
                    b1:3e:9a:cd:14:87:45:2b:67:f6:98:77:8d:60:7e:
                    8c:53:0c:f9:ef:f0:6e:67:dc:8e:af:da:97:b1:a5:
                    65:fc:dd:ed:4d:3f:97:13:5d:2b:b5:12:7e:e7:01:
                    5a:d4:76:35:40:1f:95:60:a9:88:4b:72:b4:01:f9:
                    c3:98:ce:29:47:f5:75:0a:33:cb:65:95:d0:b3:d1:
                    60:34:51:41:b8:ac:66:5d:f0:a1:8b:ee:33:ef:fc:
                    aa:ca:73:36:f6:5b:52:6d:6c:cf:57:e0:6b:78:d9:
                    38:e5:cb:b8:21:b9:5e:93:e3:26:c6:e2:ee:5c:b2:
                    cd:b4:2a:a3:1b:83:0d:de:7e:b5:a3:7c:cc:fa:2f:
                    12:60:5c:4f:32:ef:19:1a:8d:76:37:56:94:17:3c:
                    8c:a4:a0:8f:ac:21:62:85:d7:8f:e6:ac:b1:0c:f0:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:92:0F:66:B4:8A:B6:74:D0:16:DB:EB:9E:0A:22:51:07:E2:4A:11
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:ca:98:2b:d7:54:68:70:98:08:e9:4f:4b:4b:05:61:ad:ca:
         2a:f7:3d:25:41:91:c9:3a:4d:f9:3e:ef:8f:ee:8a:e5:15:e4:
         9b:f3:1b:6d:3e:a3:e3:0f:18:74:ea:93:29:6a:08:da:0a:d0:
         df:77:cd:e2:5d:70:52:6b:b6:72:47:71:00:68:0c:ea:50:c4:
         9a:1d:5a:6f:b0:33:2a:75:ef:bc:a7:2f:a1:f9:5e:42:11:4f:
         dd:1c:81:66:8c:3a:cb:eb:70:7c:5b:26:eb:7a:3f:39:e0:38:
         92:e1:83:20:fc:f3:f2:ab:76:23:f8:e6:c9:de:da:65:97:15:
         82:00:e6:9c:9e:0b:3b:12:a0:0e:4c:16:d2:c4:2b:84:54:2f:
         26:ae:41:74:e1:1e:47:0e:f0:f4:f7:64:47:c3:12:a5:9a:74:
         75:8e:d8:fd:8d:55:ed:82:84:cb:77:73:24:7d:5c:44:8d:dc:
         85:2c:32:da:f3:02:bf:13:37:67:12:d1:70:35:95:07:82:81:
         3a:f7:7f:ca:3b:8d:6f:9c:81:1f:a3:ee:84:b0:62:85:6f:05:
         59:24:7d:fa:e9:11:e1:55:df:ef:06:a8:37:9a:b5:1b:61:8a:
         42:b4:73:3a:64:fa:2b:3e:d2:20:53:d4:f8:a9:4d:c7:a7:76:
         34:24:13:9b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVAKcbsOozdi+C7GW5v4AtAB8aewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNTAyMDQxODI1MzRaFw0yNjAyMDMxODMwMzRaMDMxMTAvBgNV
BAMTKDcwOTIwRjY2QjQ4QUI2NzREMDE2REJFQjlFMEEyMjUxMDdFMjRBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQE9UlA1Wx9YKWp/l0UBCC0AcK
xth/+Wapn5rz2O1r/m0d5TKp2iJpCLEOhvC+M/hSdxXOecjF5UkeCVzgXyrGFKmX
8uurJlFn6kt9bFaZ6S0nsSUdEXnDIrE+ms0Uh0UrZ/aYd41gfoxTDPnv8G5n3I6v
2pexpWX83e1NP5cTXSu1En7nAVrUdjVAH5VgqYhLcrQB+cOYzilH9XUKM8tlldCz
0WA0UUG4rGZd8KGL7jPv/KrKczb2W1JtbM9X4Gt42Tjly7ghuV6T4ybG4u5css20
KqMbgw3efrWjfMz6LxJgXE8y7xkajXY3VpQXPIykoI+sIWKF14/mrLEM8JfhAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcJIPZrSKtnTQFtvrngoiUQfiShEwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzODM1MmUzMTM5MzQy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzNjM4MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
ucIwDQYJKoZIhvcNAQELBQADggEBAKfKmCvXVGhwmAjpT0tLBWGtyir3PSVBkck6
Tfk+74/uiuUV5JvzG20+o+MPGHTqkylqCNoK0N93zeJdcFJrtnJHcQBoDOpQxJod
Wm+wMyp177ynL6H5XkIRT90cgWaMOsvrcHxbJut6PzngOJLhgyD88/KrdiP45sne
2mWXFYIA5pyeCzsSoA5MFtLEK4RULyauQXThHkcO8PT3ZEfDEqWadHWO2P2NVe2C
hMt3cyR9XESN3IUsMtrzAr8TN2cS0XA1lQeCgTr3f8o7jW+cgR+j7oSwYoVvBVkk
ffrpEeFV3+8GqDeatRthikK0czpk+is+0iBT1PipTcendjQkE5s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:19 2025 by rpki-client