Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa
File:                     3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          +da+IksgSe9GCjRU/0K9ugsIazmFP3Vj33xxCKi073Q=
Subject key identifier:   8A:E9:D3:44:C7:E5:96:78:80:42:A6:1F:7A:F5:5D:86:ED:79:F4:53
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       1464D89FCA274DAF7D686B605FBD7C6E75289929
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa
Signing time:             Tue 04 Feb 2025 18:30:43 +0000
ROA not before:           Tue 04 Feb 2025 18:25:43 +0000
ROA not after:            Tue 03 Feb 2026 18:30:43 +0000
asID:                     272843
IP address blocks:        190.185.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:64:d8:9f:ca:27:4d:af:7d:68:6b:60:5f:bd:7c:6e:75:28:99:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:43 2025 GMT
            Not After : Feb  3 18:30:43 2026 GMT
        Subject: CN=8AE9D344C7E596788042A61F7AF55D86ED79F453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:96:f8:ef:5c:05:1a:ce:51:b0:1a:66:58:
                    c1:88:a6:22:eb:a8:fa:8a:90:1e:22:9a:b9:a3:48:
                    d2:cc:0c:b4:12:a9:2d:81:7a:fd:24:cf:ba:b0:df:
                    6c:0a:0a:96:60:8b:73:4e:15:70:ed:65:fa:8d:03:
                    91:55:4c:db:80:0b:f2:f0:10:54:71:31:a6:cc:99:
                    6f:da:40:ec:fb:08:4a:e0:d2:2e:6d:e3:8d:4a:bd:
                    8d:c0:79:b6:57:91:5b:d3:a5:8b:65:31:17:81:a4:
                    c8:c7:76:1f:00:8e:62:2d:0f:39:09:bd:d1:86:60:
                    42:45:61:44:3d:fa:5d:9c:bf:f0:5e:93:28:e4:ed:
                    87:01:13:0d:5d:9e:af:31:fc:d5:30:47:b3:9f:77:
                    6a:5b:5b:fe:49:75:80:01:4a:50:36:fa:9d:0e:13:
                    10:af:06:1a:96:80:5b:63:30:c3:a1:44:7a:57:76:
                    9c:1d:3c:63:1a:df:af:92:54:af:63:40:2b:a2:ee:
                    71:fa:d3:cf:bb:b4:f7:b6:92:42:cb:e9:fa:c5:e7:
                    e9:fc:ba:df:90:f5:ac:e9:d0:e7:f7:76:80:2e:20:
                    e3:5f:3f:34:35:55:eb:62:be:cc:f9:2f:e5:36:4e:
                    7f:67:95:3f:30:fc:a4:77:11:39:1d:89:9c:9c:d7:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E9:D3:44:C7:E5:96:78:80:42:A6:1F:7A:F5:5D:86:ED:79:F4:53
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:1c:e0:3c:2f:d0:33:ac:17:e6:41:ea:a1:60:8e:78:94:90:
         70:67:df:cc:d2:29:48:f6:e4:9b:68:54:08:46:75:4b:63:ea:
         7d:94:a6:8e:e7:b8:9d:dc:e4:28:5d:2a:46:27:5b:fc:37:63:
         4d:d7:cb:b7:8b:6f:af:cb:33:53:d0:d6:f4:d4:ff:47:34:6e:
         af:4d:0c:27:64:da:f5:0c:f1:54:68:be:ec:b2:d4:04:3d:bd:
         5b:5e:86:6f:a5:3f:b9:ce:1e:bb:c7:86:a7:2f:18:cd:df:77:
         62:89:97:47:75:df:b3:56:3d:bf:71:59:13:df:dd:e7:a9:5c:
         26:03:fd:07:44:07:4c:b5:48:0c:cc:da:8d:c7:52:e1:42:47:
         39:9f:56:a6:39:08:c3:f9:e7:ec:cc:2a:a1:c6:e4:2d:7f:e2:
         a5:8a:45:b2:60:ea:eb:ba:94:bf:65:03:b7:ce:e7:6f:a3:9e:
         86:81:0f:84:68:a7:08:e6:92:56:2c:d6:e5:23:76:13:29:e7:
         8d:72:ac:73:10:ee:53:8f:4c:5f:85:32:d7:8c:d2:eb:55:d3:
         36:4e:90:b8:f6:96:cf:eb:9f:c4:0b:c0:8d:1b:8a:a2:2c:33:
         93:9c:a4:04:c5:bd:3d:56:0b:cf:08:84:9b:cd:0b:0a:5c:45:
         64:8d:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:38:59 2025 by rpki-client