Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          ajGeAdxsYDvqLXPZZoKyZ1oKQYwzl+34sUDYcj0ba4A=
Subject key identifier:   C4:38:33:2D:EB:82:80:5C:D0:E0:2A:63:2E:18:12:BF:53:EE:9D:7B
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       4D08A9CD34588706AAE8E415BEE32A7548A7D63F
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 04 Feb 2025 18:09:06 +0000
ROA not before:           Tue 04 Feb 2025 18:04:06 +0000
ROA not after:            Tue 03 Feb 2026 18:09:06 +0000
asID:                     262234
IP address blocks:        190.124.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:08:a9:cd:34:58:87:06:aa:e8:e4:15:be:e3:2a:75:48:a7:d6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:06 2025 GMT
            Not After : Feb  3 18:09:06 2026 GMT
        Subject: CN=C438332DEB82805CD0E02A632E1812BF53EE9D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:a1:af:50:b7:88:5a:26:d9:1f:5e:b2:14:
                    95:2d:cd:5e:be:7c:35:c6:93:cb:a4:e2:2d:2b:67:
                    bc:0f:c4:6b:e9:d4:0b:a3:e7:ec:ce:dd:f8:95:92:
                    4d:ef:64:b2:33:0b:51:7c:9d:44:63:cb:94:cc:84:
                    5a:00:d7:89:4d:ab:c9:02:6f:1f:4c:46:72:16:e2:
                    37:af:6e:92:b8:f4:b3:72:3a:64:8f:64:2d:5d:95:
                    6d:3b:1a:79:7a:54:63:cd:f1:a5:79:e5:99:fa:1f:
                    ce:d9:1e:79:ea:15:f1:04:e6:00:83:a0:e1:23:27:
                    0e:01:b2:34:68:30:92:78:54:18:64:df:6d:06:ff:
                    1f:b0:c4:b1:db:a4:dd:65:7e:df:e8:80:11:ce:3b:
                    95:32:4f:f3:25:ad:44:e2:36:25:a1:11:b1:10:71:
                    05:3d:67:d6:0a:03:8b:09:53:6c:b5:89:98:68:93:
                    ca:75:fc:19:05:b3:11:81:b6:fd:e8:f2:0b:8b:d4:
                    ac:19:4a:a6:73:95:2f:8c:59:ef:3b:39:df:8a:60:
                    f6:31:89:3c:a1:e4:b1:99:0c:65:14:f7:ec:6d:bd:
                    05:e7:3c:8d:c9:01:74:a3:43:b0:db:56:70:0a:4d:
                    0f:85:55:20:07:3a:0d:db:90:cb:45:c1:d3:cd:0e:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:33:2D:EB:82:80:5C:D0:E0:2A:63:2E:18:12:BF:53:EE:9D:7B
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:3c:13:57:69:38:76:c6:30:62:33:c3:a6:57:da:5d:9f:e3:
         0d:e6:2b:70:96:c2:5f:b3:2d:6b:36:b6:7b:0f:33:e6:92:a2:
         14:97:1c:e6:f7:b6:85:a5:2c:83:5f:77:54:80:a0:ad:67:98:
         68:4c:9f:16:e0:45:6a:23:51:8a:c0:91:fe:16:2b:8d:54:98:
         24:6e:9e:0a:d0:0c:39:be:7a:fb:f5:aa:2f:a8:8e:1a:40:aa:
         61:23:9f:d9:10:e4:92:af:13:1c:27:9b:1d:99:fb:41:47:34:
         1e:4e:7e:0b:e5:2f:8b:00:6c:23:75:f1:3b:cf:6f:77:be:75:
         b5:ca:52:f9:61:fb:b2:6a:a2:dc:63:82:b6:47:63:ff:2e:a8:
         3f:ee:86:4e:6c:70:15:7b:94:5e:c3:3a:72:86:25:2e:89:ac:
         02:53:ba:99:4e:dd:09:17:a6:1f:fd:40:7d:3f:31:a3:ab:50:
         aa:35:b7:cf:90:96:0c:9a:4d:26:43:01:9b:fc:68:ae:93:13:
         03:58:7f:47:f5:44:92:cf:d1:e2:81:ba:08:d9:e0:e5:5e:de:
         67:9a:a0:81:67:a9:9f:77:9e:f1:df:1a:66:9a:0f:fd:40:dd:
         d8:88:af:39:7e:a1:a3:00:4e:7b:6d:90:f6:f5:03:05:60:25:
         6e:ae:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:20 2025 by rpki-client