Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa
File:                     3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa (raw, json)
Hash identifier:          7JMqrxN23q8r4NHl24VkjXFvPdoJueXkrpzS7VsmzyA=
Subject key identifier:   8B:EF:12:5E:A9:C2:BE:49:E1:3E:BD:07:87:D1:E5:9D:B3:D4:45:74
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       20DBEF376C2F25A2698DD294EFAB0CFD8D8DF066
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa
Signing time:             Tue 04 Feb 2025 18:38:18 +0000
ROA not before:           Tue 04 Feb 2025 18:33:18 +0000
ROA not after:            Tue 03 Feb 2026 18:38:18 +0000
asID:                     28007
IP address blocks:        190.114.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:db:ef:37:6c:2f:25:a2:69:8d:d2:94:ef:ab:0c:fd:8d:8d:f0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Feb  4 18:33:18 2025 GMT
            Not After : Feb  3 18:38:18 2026 GMT
        Subject: CN=8BEF125EA9C2BE49E13EBD0787D1E59DB3D44574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:42:a6:f3:67:39:58:75:af:31:62:84:25:
                    65:d2:ae:d0:95:23:91:61:41:83:e1:58:a4:d8:79:
                    a1:da:dd:02:28:7e:49:cc:22:58:d2:fe:fc:48:33:
                    52:5c:a6:37:94:71:d2:33:d0:2b:e1:ff:07:8b:35:
                    ed:6a:60:64:80:6c:c5:9e:9a:bd:1f:5f:6a:65:b8:
                    bf:55:46:e0:85:77:8e:50:ca:98:7a:fe:30:e5:17:
                    dc:f7:09:20:2a:b9:d2:81:57:54:9b:7b:fa:d3:e1:
                    f2:04:63:12:a3:16:33:51:3f:6c:49:90:64:8e:aa:
                    97:9b:8e:b8:51:18:ed:d7:09:fb:34:80:f2:d2:7a:
                    ff:30:60:3f:92:0d:c4:53:45:c1:49:36:29:a8:e7:
                    90:ed:aa:01:63:4a:60:6a:b7:7d:b9:90:f6:e4:a5:
                    4b:93:35:c2:26:ff:f4:7d:b2:e4:71:dd:b5:48:53:
                    bf:f6:aa:9d:d7:87:fb:56:fb:b2:89:98:bc:32:d7:
                    32:ec:bf:63:cf:a6:fe:5b:7c:3b:35:81:0a:57:22:
                    69:8f:78:93:a7:cd:f6:97:e4:f8:81:e2:a7:3e:d1:
                    ce:8d:be:f6:c0:3d:a8:de:d2:c2:ae:62:21:17:30:
                    ca:5d:55:88:1e:f2:a8:ea:6b:c6:b1:b3:cb:f1:e8:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:12:5E:A9:C2:BE:49:E1:3E:BD:07:87:D1:E5:9D:B3:D4:45:74
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:c2:53:a8:87:45:49:ec:76:54:7b:7b:dc:01:d9:3c:55:
         88:73:c7:ea:a9:15:06:8d:4d:b1:0e:b4:48:7f:fe:59:1e:47:
         7b:92:1c:8d:ec:fa:93:46:fa:54:c8:ba:1b:93:78:16:e6:1b:
         ba:85:06:4e:4a:e0:d7:7c:e9:74:71:0e:05:3f:e5:95:3e:f2:
         9d:ea:fd:11:86:8b:fa:d2:5b:af:33:f7:b8:8a:6b:a0:dc:ba:
         87:a2:ce:48:79:bd:29:38:70:85:4b:37:70:d9:ee:a7:c7:a7:
         81:ae:67:1b:e9:54:5b:7b:6a:89:ea:69:a3:79:05:30:7b:69:
         9b:14:6c:6b:60:ac:af:ae:96:a1:5e:19:96:c1:21:78:3a:89:
         bd:58:d0:a2:87:de:72:14:ed:6e:d0:d9:bb:aa:02:c0:be:34:
         8b:20:8f:cb:31:15:21:1a:1c:23:37:3f:5f:a8:58:60:93:10:
         aa:ec:05:15:4b:86:12:e6:7a:e7:5d:52:04:70:19:96:00:9a:
         c8:e6:82:52:a2:5a:7f:24:7e:e3:b1:55:a7:6c:69:f1:33:f9:
         d1:1d:68:80:06:94:ad:eb:d4:d8:9a:69:3e:48:5c:bd:c4:34:
         48:df:f6:b8:ae:b8:12:27:bd:40:ef:f9:8e:2e:bc:c0:22:44:
         82:fd:cb:b9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUINvvN2wvJaJpjdKU76sM/Y2N8GYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDMEFDRDg2RjMzMUE5NUQyNjE5NTkxODBGNTBDQkND
ODJGNTJBQjAeFw0yNTAyMDQxODMzMThaFw0yNjAyMDMxODM4MThaMDMxMTAvBgNV
BAMTKDhCRUYxMjVFQTlDMkJFNDlFMTNFQkQwNzg3RDFFNTlEQjNENDQ1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRykKm82c5WHWvMWKEJWXSrtCV
I5FhQYPhWKTYeaHa3QIofknMIljS/vxIM1JcpjeUcdIz0Cvh/weLNe1qYGSAbMWe
mr0fX2pluL9VRuCFd45Qyph6/jDlF9z3CSAqudKBV1Sbe/rT4fIEYxKjFjNRP2xJ
kGSOqpebjrhRGO3XCfs0gPLSev8wYD+SDcRTRcFJNimo55DtqgFjSmBqt325kPbk
pUuTNcIm//R9suRx3bVIU7/2qp3Xh/tW+7KJmLwy1zLsv2PPpv5bfDs1gQpXImmP
eJOnzfaX5PiB4qc+0c6NvvbAPaje0sKuYiEXMMpdVYge8qjqa8axs8vx6BpFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUi+8SXqnCvknhPr0Hh9HlnbPURXQwHwYDVR0j
BBgwFoAUAMCs2G8zGpXSYZWRgPUMvMgvUqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODVFMTZGMjJCM0E1MTNCQjY5NzU3NjlDRjgxNUFBQjg1
M0E5MTEyN0Q0NDZEM0EwRTRDQzExNTYyRjhCQ0M5LzAvMDBDMEFDRDg2RjMzMUE5
NUQyNjE5NTkxODBGNTBDQkNDODJGNTJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEMwQUNEODZGMzMxQTk1RDI2
MTk1OTE4MEY1MENCQ0M4MkY1MkFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg1RTE2RjIyQjNBNTEzQkI2OTc1NzY5Q0Y4MTVBQUI4NTNBOTExMjdE
NDQ2RDNBMEU0Q0MxMTU2MkY4QkNDOS8wLzMxMzkzMDJlMzEzMTM0MmUzMjM0MzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzAzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvnLw
MA0GCSqGSIb3DQEBCwUAA4IBAQA9WcJTqIdFSex2VHt73AHZPFWIc8fqqRUGjU2x
DrRIf/5ZHkd7khyN7PqTRvpUyLobk3gW5hu6hQZOSuDXfOl0cQ4FP+WVPvKd6v0R
hov60luvM/e4imug3LqHos5Ieb0pOHCFSzdw2e6nx6eBrmcb6VRbe2qJ6mmjeQUw
e2mbFGxrYKyvrpahXhmWwSF4Oom9WNCih95yFO1u0Nm7qgLAvjSLII/LMRUhGhwj
Nz9fqFhgkxCq7AUVS4YS5nrnXVIEcBmWAJrI5oJSolp/JH7jsVWnbGnxM/nRHWiA
BpSt69TYmmk+SFy9xDRI3/a4rrgSJ71A7/mOLrzAIkSC/cu5
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:28 2025 by rpki-client