Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa
File:                     3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa (raw, json)
Hash identifier:          8F82fnBJgOsHU8qM81b+oCMrAzXCujodI6FugO9yRmM=
Subject key identifier:   7C:26:3B:07:E4:4F:1E:2C:D6:D9:D9:0C:B7:67:7E:48:2B:16:21:88
Certificate issuer:       /CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
Certificate serial:       02A0B5596531B0CED22EC7250B941A456A65A64F
Authority key identifier: 36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa
Signing time:             Tue 04 Feb 2025 18:43:19 +0000
ROA not before:           Tue 04 Feb 2025 18:38:19 +0000
ROA not after:            Tue 03 Feb 2026 18:43:19 +0000
asID:                     266702
IP address blocks:        190.196.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:b5:59:65:31:b0:ce:d2:2e:c7:25:0b:94:1a:45:6a:65:a6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
        Validity
            Not Before: Feb  4 18:38:19 2025 GMT
            Not After : Feb  3 18:43:19 2026 GMT
        Subject: CN=7C263B07E44F1E2CD6D9D90CB7677E482B162188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:48:31:aa:96:33:a5:30:08:92:8a:04:07:
                    d2:48:c4:3c:98:71:ae:25:a9:00:1f:42:59:e2:b1:
                    1a:c9:16:23:6d:c5:0e:16:7d:57:86:fe:88:e2:f9:
                    ea:01:f0:56:90:50:3f:52:0f:e0:36:35:76:0d:a0:
                    24:05:7b:53:d1:9f:40:db:7a:ad:bc:58:84:16:5a:
                    09:23:0d:21:51:8b:44:58:c1:70:d0:ce:83:be:12:
                    9e:0d:b8:d0:66:43:35:9e:67:6c:b3:d3:28:c8:0c:
                    38:4e:a8:e1:4a:48:d1:27:8c:a8:e0:e0:13:55:6d:
                    31:db:c6:9a:38:1d:39:df:ca:6f:2c:27:6e:0f:7e:
                    27:62:97:d5:62:dd:e5:15:80:0f:94:06:34:da:4f:
                    45:b9:26:ea:74:fc:95:75:5c:7f:9b:ba:36:e5:f8:
                    55:7f:d0:a7:ec:61:93:f7:c6:9f:c6:a6:c0:a8:8c:
                    08:08:b5:eb:52:51:a4:b9:53:89:26:a4:90:d6:20:
                    6e:75:54:d7:30:b0:f9:19:88:d2:93:39:aa:c7:4f:
                    29:72:5a:af:fc:25:3c:55:e9:26:a6:79:fb:52:e9:
                    6d:a2:ef:a5:7c:bc:80:b2:12:7c:98:01:84:a3:1c:
                    cb:48:56:9c:87:07:5a:6f:2e:47:69:43:05:f5:7d:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:26:3B:07:E4:4F:1E:2C:D6:D9:D9:0C:B7:67:7E:48:2B:16:21:88
            X509v3 Authority Key Identifier:
                keyid:36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:21:1d:4e:46:65:fd:10:cf:00:d3:82:00:17:43:89:a4:
         2a:ad:57:fb:6b:e2:4b:b2:27:c1:ef:52:38:03:ac:63:aa:c3:
         90:14:01:77:d8:85:65:81:7c:53:a7:db:26:6f:89:32:ea:0f:
         36:95:f1:9a:e6:46:f1:5c:ac:ca:d6:ec:07:81:cc:5c:bb:c7:
         33:29:30:fc:1f:cc:85:d9:8b:45:e5:9a:8d:33:6e:bb:67:c9:
         6d:9e:32:3b:55:b5:a7:8d:06:5c:67:e0:e6:91:55:95:a7:48:
         77:30:36:35:70:7a:ee:56:c2:ba:f3:ee:6a:b7:56:69:7b:c1:
         da:bb:24:ad:d8:7a:bb:38:1f:b0:2f:6e:23:ef:87:42:42:45:
         25:ab:29:38:51:d8:44:77:80:2e:0a:cd:ff:c3:39:1a:bb:6d:
         eb:4c:45:ab:b9:74:0a:b6:b6:c5:8c:c4:27:6f:a3:fc:59:41:
         e2:14:a9:81:4f:02:5b:9d:09:2f:28:77:31:e4:76:57:c7:61:
         84:b1:3e:95:6e:fd:f0:5d:20:ff:e1:bd:95:e2:00:b8:58:85:
         90:e6:98:84:ea:4d:c2:23:8b:fa:54:8b:2f:5f:e7:48:c2:75:
         4c:7f:39:bb:71:3b:f6:f2:1d:1c:3b:ac:d8:f2:00:d5:ab:bb:
         8c:36:6f:ad
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUAqC1WWUxsM7SLsclC5QaRWplpk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY1Nzk4MTY0QTdBN0RBMzBENUNDRjkxREJFN0E3RjQw
NDcyMTM0QjAeFw0yNTAyMDQxODM4MTlaFw0yNjAyMDMxODQzMTlaMDMxMTAvBgNV
BAMTKDdDMjYzQjA3RTQ0RjFFMkNENkQ5RDkwQ0I3Njc3RTQ4MkIxNjIxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi40gxqpYzpTAIkooEB9JIxDyY
ca4lqQAfQlnisRrJFiNtxQ4WfVeG/oji+eoB8FaQUD9SD+A2NXYNoCQFe1PRn0Db
eq28WIQWWgkjDSFRi0RYwXDQzoO+Ep4NuNBmQzWeZ2yz0yjIDDhOqOFKSNEnjKjg
4BNVbTHbxpo4HTnfym8sJ24Pfidil9Vi3eUVgA+UBjTaT0W5Jup0/JV1XH+bujbl
+FV/0KfsYZP3xp/GpsCojAgItetSUaS5U4kmpJDWIG51VNcwsPkZiNKTOarHTyly
Wq/8JTxV6SameftS6W2i76V8vICyEnyYAYSjHMtIVpyHB1pvLkdpQwX1fdDHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfCY7B+RPHizW2dkMt2d+SCsWIYgwHwYDVR0j
BBgwFoAUNleYFkp6faMNXM+R2+en9ARyE0swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RDJENDMwMkE1ODQzQTMxNUJDNEMzODhGQ0I0NTZCMTYz
OEY2NTNGQ0FFRkM1QkYzNjhDNDFDQUZGNThGQ0ZELzAvMzY1Nzk4MTY0QTdBN0RB
MzBENUNDRjkxREJFN0E3RjQwNDcyMTM0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjU3OTgxNjRBN0E3REEzMEQ1
Q0NGOTFEQkU3QTdGNDA0NzIxMzRCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEQyRDQzMDJBNTg0M0EzMTVCQzRDMzg4RkNCNDU2QjE2MzhGNjUzRkNB
RUZDNUJGMzY4QzQxQ0FGRjU4RkNGRC8wLzMxMzkzMDJlMzEzOTM2MmUzMjM0Mzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzYzNzMwMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
xPgwDQYJKoZIhvcNAQELBQADggEBAHMNIR1ORmX9EM8A04IAF0OJpCqtV/tr4kuy
J8HvUjgDrGOqw5AUAXfYhWWBfFOn2yZviTLqDzaV8ZrmRvFcrMrW7AeBzFy7xzMp
MPwfzIXZi0Xlmo0zbrtnyW2eMjtVtaeNBlxn4OaRVZWnSHcwNjVweu5Wwrrz7mq3
Vml7wdq7JK3Yers4H7AvbiPvh0JCRSWrKThR2ER3gC4Kzf/DORq7betMRau5dAq2
tsWMxCdvo/xZQeIUqYFPAludCS8odzHkdlfHYYSxPpVu/fBdIP/hvZXiALhYhZDm
mITqTcIji/pUiy9f50jCdUx/ObtxO/byHRw7rNjyANWru4w2b60=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:45 2025 by rpki-client