Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234382e302f32342d3234203d3e203237383839.roa
File:                     3139302e37362e3234382e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier:          aaB5iJPdYhdHKbH8axtH62EthSlNtb48XdpdBgWKZCk=
Subject key identifier:   E2:8A:9B:62:D7:F0:98:7C:48:C5:FB:8B:15:6A:A1:8F:B0:49:AC:BD
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       51DCC6D8322C727BD8B45AD355CE329E28E53D1C
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234382e302f32342d3234203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:55:34 +0000
ROA not before:           Tue 04 Feb 2025 18:50:34 +0000
ROA not after:            Tue 03 Feb 2026 18:55:34 +0000
asID:                     27889
IP address blocks:        190.76.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dc:c6:d8:32:2c:72:7b:d8:b4:5a:d3:55:ce:32:9e:28:e5:3d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Feb  4 18:50:34 2025 GMT
            Not After : Feb  3 18:55:34 2026 GMT
        Subject: CN=E28A9B62D7F0987C48C5FB8B156AA18FB049ACBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:9c:bb:79:43:08:de:3e:42:5d:4c:b5:82:
                    50:e1:dc:e9:fa:eb:15:d3:84:6d:0e:c4:1a:10:32:
                    ec:44:4a:db:b8:94:09:5e:90:0f:70:7f:cf:6d:78:
                    6d:69:c3:d2:7a:d3:e9:44:f0:9a:26:85:75:6c:15:
                    ea:98:17:1a:5c:72:b9:5c:9f:ea:c4:67:67:52:54:
                    38:5c:cf:83:d2:2d:61:a4:34:8f:d4:fa:b5:12:34:
                    90:84:8d:61:be:b8:ff:72:27:5b:51:ac:07:d2:06:
                    f3:a1:0d:5e:13:3c:25:bb:1b:e7:76:f6:d8:7c:61:
                    a2:6f:fd:50:00:a9:83:fd:36:43:f4:0a:ac:43:52:
                    33:26:23:a4:36:60:28:ca:ab:50:d2:37:da:32:1d:
                    e1:05:1d:6e:2d:bd:65:ec:59:be:6d:21:49:d7:b0:
                    1d:ae:d9:21:07:17:c1:d7:ee:60:48:9a:17:18:68:
                    04:00:a1:a0:c9:4b:7b:76:0e:8f:5c:d2:c5:27:35:
                    f6:ba:fa:d3:ad:54:2f:32:e9:d8:58:91:92:8c:c0:
                    f1:80:a0:62:04:0c:61:9e:4a:cd:93:ad:af:e1:3f:
                    bf:c8:e9:5c:96:0a:df:b2:a5:a1:ba:96:31:ba:7d:
                    68:da:35:65:02:f5:3f:3f:54:81:2a:5b:c2:39:c6:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8A:9B:62:D7:F0:98:7C:48:C5:FB:8B:15:6A:A1:8F:B0:49:AC:BD
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234382e302f32342d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:60:e2:89:7a:2b:0c:32:9d:23:70:82:0a:92:c8:9e:99:
         37:fa:22:28:3d:09:fb:01:ed:19:f2:88:b9:a9:5f:c5:2c:94:
         ad:28:a5:35:26:b1:13:4b:34:79:78:fd:4f:9d:b5:c7:bf:8d:
         80:03:c4:8d:d1:cd:15:3d:28:c7:4f:5f:ab:49:0c:c5:06:d7:
         32:9f:da:2b:f3:ca:0a:5f:11:1f:f7:02:e9:57:1b:50:f6:d4:
         de:24:3b:a8:24:e2:27:73:b9:73:6c:87:6a:18:bf:b6:f3:29:
         ed:46:9e:c1:11:6d:31:d8:d8:3b:f1:db:ad:dd:13:b4:b6:80:
         0a:be:7f:38:2a:cd:ed:4a:a5:87:de:ce:ea:13:28:4c:15:ee:
         b4:84:21:5e:43:96:29:23:17:76:f6:18:67:69:54:89:f7:06:
         07:3e:9e:0a:81:4d:d8:68:81:da:87:10:f8:3d:4e:83:cb:14:
         28:3f:7b:de:cd:f1:ba:71:01:0f:d1:ab:6a:bb:c1:07:d4:f8:
         42:20:c0:3d:14:76:54:5b:1a:21:26:5e:56:d5:49:1c:9a:ae:
         53:b9:2c:80:d4:d8:20:0b:de:0f:a9:71:61:75:11:c1:c9:d3:
         f3:d7:31:e9:43:f1:10:b0:26:0d:46:b4:6b:63:b1:cc:88:fd:
         c2:fc:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:23 2025 by rpki-client