Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e36322e302f32342d3234203d3e203237383839.roa
File:                     3139302e37362e36322e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier:          ML+jLcBA1JWmUJBpRKykjm8GaEE8k/pS14U6D8YEhgU=
Subject key identifier:   DC:5D:43:C2:26:C0:8E:4B:DC:64:9D:23:0F:C4:15:6A:2A:F8:BC:3C
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       07EDF6AB5528711B7A4D8222D4FD95D75858CA39
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e36322e302f32342d3234203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:55:38 +0000
ROA not before:           Tue 04 Feb 2025 18:50:38 +0000
ROA not after:            Tue 03 Feb 2026 18:55:38 +0000
asID:                     27889
IP address blocks:        190.76.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:f6:ab:55:28:71:1b:7a:4d:82:22:d4:fd:95:d7:58:58:ca:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Feb  4 18:50:38 2025 GMT
            Not After : Feb  3 18:55:38 2026 GMT
        Subject: CN=DC5D43C226C08E4BDC649D230FC4156A2AF8BC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:6c:ea:62:1b:2c:c9:6d:1d:ca:02:51:01:
                    01:b4:a9:2c:c3:fb:9a:d7:d7:45:bc:1c:8c:0d:8e:
                    79:a3:d6:4f:09:ce:2b:37:dc:e3:e9:3c:c1:99:1d:
                    58:3e:51:6e:9c:d3:5e:39:a1:c2:78:e3:5c:c8:d1:
                    f0:4e:fa:bc:1f:67:70:e9:97:dc:b8:81:21:72:47:
                    74:8d:37:5c:34:e6:10:15:fe:e4:29:e5:52:56:f8:
                    b7:e4:be:6a:b8:97:18:e5:04:5e:2c:7e:cd:9a:49:
                    6b:07:33:f1:4b:63:9c:7b:88:f9:c0:9e:c2:e7:a4:
                    b9:e9:a1:67:a5:ad:da:db:55:c0:82:51:62:b3:fd:
                    72:52:6d:fa:3d:51:cd:d2:61:7b:c6:c2:78:62:a8:
                    f6:da:be:46:17:35:d3:69:5c:97:21:1c:f9:ce:cc:
                    bc:e9:61:60:50:cd:4f:a8:45:3a:7c:fb:45:95:34:
                    43:07:78:ae:52:61:2a:6c:b0:34:20:75:e3:9b:24:
                    d4:9a:62:33:9d:b7:93:a6:81:b6:87:8f:d2:9b:76:
                    61:80:8f:d7:a7:3c:37:ed:25:37:e0:1a:95:8d:28:
                    58:09:e4:dc:96:fa:f1:62:27:ba:90:b3:22:4b:c5:
                    19:9f:41:eb:c6:d2:0b:0f:c4:d9:51:08:1b:d4:b8:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5D:43:C2:26:C0:8E:4B:DC:64:9D:23:0F:C4:15:6A:2A:F8:BC:3C
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e36322e302f32342d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:6f:10:de:d0:6b:40:68:43:2f:6c:33:fe:31:6a:a1:b4:
         6e:fe:44:4d:75:1b:b5:37:07:07:1e:fe:2d:8e:1f:2e:0c:38:
         ac:8b:34:52:0e:97:2c:a3:e7:cb:ab:8c:ed:44:4d:ab:48:bd:
         34:89:9e:51:e0:f3:74:cc:fa:26:55:8f:4e:22:6e:87:49:db:
         10:ae:38:e3:78:e9:15:e7:74:a2:14:69:74:4a:0f:b8:64:e7:
         e8:5c:c7:34:3c:54:0e:3a:c6:bd:b5:37:a7:d7:50:aa:e7:a5:
         fe:80:28:c5:a0:e2:8a:f4:14:e3:45:f3:0c:09:c6:3b:78:d0:
         ed:bd:42:e7:53:d6:35:1c:ec:d6:cf:4e:24:8e:36:d6:29:59:
         80:c6:39:2c:90:f6:87:ca:4c:08:79:d8:17:4d:c8:cd:d3:fd:
         0b:1c:8c:12:19:ee:00:f6:b9:3d:9d:a3:97:43:b0:33:90:31:
         d0:0c:ae:85:32:da:7e:1c:e4:ac:86:28:02:3e:b4:28:f1:be:
         cb:ae:e6:ad:ce:3f:60:76:46:e0:90:c2:df:8e:bc:2e:aa:64:
         28:74:9f:d7:8d:15:92:54:37:3f:c3:e2:01:db:35:71:25:ef:
         d9:9d:6b:d5:94:2b:9d:e5:74:18:3c:d5:b4:27:05:6b:41:1b:
         68:c7:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:13 2025 by rpki-client