Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32362e302f32332d3234203d3e203236363137.roa
File:                     3139302e3131312e32362e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          62SQ87d9rwZvW0ge33mn+ymQhTwmsgtqhCRZPRCRQ9g=
Subject key identifier:   88:EB:6A:DE:E4:3B:AF:AC:60:46:C1:00:A1:05:71:18:66:08:69:84
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       655BE8E392D442D2C59370EC54ADD837A8861695
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32362e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:19 +0000
ROA not before:           Tue 04 Feb 2025 18:10:19 +0000
ROA not after:            Tue 03 Feb 2026 18:15:19 +0000
asID:                     26617
IP address blocks:        190.111.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5b:e8:e3:92:d4:42:d2:c5:93:70:ec:54:ad:d8:37:a8:86:16:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:19 2025 GMT
            Not After : Feb  3 18:15:19 2026 GMT
        Subject: CN=88EB6ADEE43BAFAC6046C100A105711866086984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:13:1f:f7:8d:61:9f:d4:3e:c4:bc:9a:c1:
                    5a:1e:cd:66:7d:86:f9:fa:23:c6:3f:0b:48:15:35:
                    d9:fd:ae:30:b1:c6:b6:22:61:8b:83:63:63:de:0b:
                    f7:50:b9:26:f8:2d:cf:4e:a5:20:ae:c1:6a:7b:74:
                    51:97:a5:9c:79:df:be:81:37:50:8f:bd:95:bd:0e:
                    5e:64:a8:dc:9e:94:ba:75:f9:9c:2b:d7:d6:63:9f:
                    09:00:24:06:40:41:f2:a3:d0:59:4b:86:4a:94:6f:
                    ca:cc:83:d8:d0:57:57:ac:77:cf:47:1b:0d:a9:8b:
                    c4:84:eb:70:66:40:73:aa:03:13:01:af:5d:a9:9c:
                    06:ad:5a:ef:25:54:65:9c:76:e6:17:58:9c:d7:fb:
                    b8:0b:5d:23:72:9b:84:ef:82:94:17:da:f5:a2:29:
                    06:c8:1d:21:16:be:0c:ba:48:d1:71:cf:53:bf:5c:
                    f3:07:42:60:a9:6f:c0:28:6a:91:f5:43:07:4b:c9:
                    b6:24:f7:5d:ef:ec:ff:a4:ad:1f:79:0b:a8:16:5b:
                    c6:38:74:2b:01:bc:c0:8f:00:35:d8:c7:43:5d:ee:
                    a3:00:dd:7c:08:93:9d:73:95:7f:da:ba:80:1d:6d:
                    49:3e:9c:9b:87:f6:a7:12:9a:53:b5:18:03:20:59:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EB:6A:DE:E4:3B:AF:AC:60:46:C1:00:A1:05:71:18:66:08:69:84
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32362e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:11:0f:7e:44:07:5c:ea:69:b0:9a:a4:89:a0:f8:9e:37:3c:
         7e:17:f8:67:6c:d0:d9:87:3c:fc:9d:d5:d4:85:a3:94:0b:93:
         20:58:95:f0:36:38:f5:de:a6:5c:bc:ce:57:39:64:3d:b0:03:
         f9:c8:16:8a:d3:4a:5c:f5:62:76:22:5b:4c:5d:1c:a3:0d:2c:
         07:65:b9:02:dd:c7:b1:57:da:92:8f:ea:2e:e6:16:3d:28:4b:
         c9:28:49:4e:9e:db:ea:c8:bf:b8:9f:ee:67:4e:e8:c8:9b:74:
         67:66:0b:9e:e1:2a:a6:95:eb:4a:ca:45:d7:0d:aa:c5:38:1e:
         3c:64:0c:3e:b6:89:33:e9:9b:54:e0:55:6b:31:89:42:53:e0:
         df:10:e4:f5:46:75:7a:6f:46:2d:c5:c1:48:a9:99:fc:ed:99:
         e7:93:54:ad:85:bd:77:6c:60:fd:05:88:6f:af:32:f4:fb:cc:
         1d:58:5a:0b:0c:fc:66:81:2c:3f:4e:2b:e5:70:b3:9b:25:38:
         25:0c:63:1d:31:d6:20:4d:6b:55:2f:d2:1a:86:a1:35:8b:3a:
         67:12:01:f7:f8:46:11:ff:0f:28:85:53:45:41:9b:01:8e:94:
         a0:83:c4:ef:67:35:38:ce:30:ee:cb:e5:b9:08:3f:3b:fe:2d:
         d8:68:d7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:04 2025 by rpki-client