Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3235312e302f32342d3234203d3e203237383839.roa
File:                     3139302e37362e3235312e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier:          f54CH2Mp6dqHKdZ2/n/HIbfSMESzf1t09y63zFfb3q0=
Subject key identifier:   5B:86:EB:4A:C1:4D:E3:04:0D:2D:73:C4:3B:24:36:6E:86:37:A4:3F
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       0EF53A0A334E1880E7B0491BF41F2617F0800E51
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3235312e302f32342d3234203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:55:41 +0000
ROA not before:           Tue 04 Feb 2025 18:50:41 +0000
ROA not after:            Tue 03 Feb 2026 18:55:41 +0000
asID:                     27889
IP address blocks:        190.76.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f5:3a:0a:33:4e:18:80:e7:b0:49:1b:f4:1f:26:17:f0:80:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Feb  4 18:50:41 2025 GMT
            Not After : Feb  3 18:55:41 2026 GMT
        Subject: CN=5B86EB4AC14DE3040D2D73C43B24366E8637A43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:9b:6c:96:17:90:63:fd:e4:55:79:55:36:
                    28:17:f6:38:70:85:ae:d6:84:11:8e:ff:c9:11:5c:
                    ce:3a:16:6a:48:ee:ca:9f:27:8e:ab:84:a2:d9:b0:
                    08:13:15:cf:d8:ce:a4:cb:dd:42:62:65:c8:d8:51:
                    16:fd:23:76:58:0b:36:27:0d:4d:2c:c5:ad:04:22:
                    11:af:1c:de:b3:af:b1:69:e4:f1:56:7e:3f:53:d5:
                    f8:53:ef:9b:ee:66:0a:7a:dc:e9:81:3e:42:14:f7:
                    00:19:d1:00:3b:91:10:7e:5e:f8:73:80:52:a3:46:
                    65:ee:dd:c4:83:32:8e:fb:3d:0f:e8:d6:74:0d:12:
                    1e:c3:51:39:af:25:11:37:34:60:f5:2e:39:9a:e7:
                    84:a7:88:d4:7d:2f:58:e6:62:01:99:4a:4b:28:41:
                    bb:87:43:ea:b9:6d:e3:40:b3:70:47:79:61:06:aa:
                    e5:a2:8c:c5:34:dc:22:26:0e:f4:a7:c0:49:d6:b8:
                    f2:11:41:87:42:f9:53:a5:2e:58:65:4e:2e:94:69:
                    68:31:a1:6f:3b:a1:e3:59:3e:4a:92:64:6a:5b:30:
                    a9:72:7c:d3:87:49:a2:09:f0:de:15:f1:24:c3:6c:
                    18:97:78:f4:5f:72:8e:3c:5e:53:fe:00:34:26:88:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:EB:4A:C1:4D:E3:04:0D:2D:73:C4:3B:24:36:6E:86:37:A4:3F
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3235312e302f32342d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:62:d0:d4:b7:12:c3:51:5c:27:27:21:ee:43:ac:c8:0e:
         d8:f3:ca:76:55:1e:13:eb:48:00:e2:68:ee:d1:18:d5:cd:30:
         b6:6e:17:15:07:42:8c:9b:5d:f4:2f:d9:ea:3e:12:01:e8:c3:
         d2:31:67:49:e7:dc:ce:f7:ca:ee:29:d6:6b:b0:8e:06:ce:74:
         1b:20:da:0f:c8:15:4a:84:c0:20:b0:0b:c2:7a:85:a7:66:d7:
         5e:35:71:12:36:ce:17:eb:d4:99:8c:7b:b0:7a:86:d8:12:96:
         ef:6b:f5:16:8e:97:b8:77:35:22:ab:bd:d4:87:e8:45:c8:cf:
         d9:67:5e:5c:05:93:91:7e:89:9a:83:e2:aa:45:f7:78:bd:f5:
         ab:86:f0:79:06:e5:cd:3f:17:49:10:37:10:25:2c:6d:94:3d:
         49:9f:2d:9c:d4:c4:55:8a:70:b1:6e:c2:7f:a7:44:3e:cd:40:
         2b:6e:47:a4:e8:78:c4:5d:25:18:63:e9:2b:1d:f2:c0:3e:2f:
         eb:af:0b:cd:f0:35:da:c1:aa:f2:a7:42:c0:35:39:f2:82:94:
         ee:31:98:66:2b:91:39:44:a0:c1:e8:33:e8:24:6a:66:c8:40:
         d4:80:25:03:db:e9:6c:90:c4:f2:91:1d:32:4a:b7:5e:7f:ae:
         17:c8:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:13 2025 by rpki-client