Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa
File:                     3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          M7eVp001XLq1wcCLHchX8OUqs17vzlnGvrgPwb2Lvk4=
Subject key identifier:   29:9A:39:16:90:29:E6:65:44:BA:BF:1A:E1:4E:61:60:F0:E8:FB:C1
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       4B6CD6FC84E69FE25CD62BA87CDC87F775DC6D15
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:38:19 +0000
ROA not before:           Tue 04 Feb 2025 18:33:19 +0000
ROA not after:            Tue 03 Feb 2026 18:38:19 +0000
asID:                     394684
IP address blocks:        190.114.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6c:d6:fc:84:e6:9f:e2:5c:d6:2b:a8:7c:dc:87:f7:75:dc:6d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Feb  4 18:33:19 2025 GMT
            Not After : Feb  3 18:38:19 2026 GMT
        Subject: CN=299A39169029E66544BABF1AE14E6160F0E8FBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:ea:34:2a:27:fe:90:0b:d4:bb:5b:fa:c9:
                    b7:20:b6:96:02:d5:89:96:bd:63:21:9f:98:52:b3:
                    50:0d:8a:06:d2:90:bf:3c:24:9d:ba:66:fb:e1:cc:
                    aa:3b:ea:11:c3:08:84:ed:7f:71:57:d0:8c:2c:6a:
                    7a:be:bb:01:23:73:82:b7:56:77:1c:d4:bf:ed:64:
                    9c:8b:c9:40:da:91:08:d0:ed:28:15:05:1f:18:3a:
                    b3:18:b3:30:e1:5e:09:21:25:2b:dc:69:45:84:cf:
                    73:95:83:8e:2d:7c:1c:e7:0f:ff:fd:1b:35:1b:b4:
                    60:c7:99:0a:43:3c:76:88:2e:3f:76:53:8a:21:56:
                    92:0e:6a:de:80:7f:f6:6a:1b:83:a0:c1:a4:45:97:
                    24:a6:e8:91:74:59:28:4d:1e:f7:5e:b3:b3:37:e6:
                    5c:3a:b3:fe:44:f2:ba:50:f4:3b:17:29:b5:a3:de:
                    d5:9c:5c:ad:99:e3:b2:41:4f:db:00:05:7d:95:a3:
                    7f:8c:9c:20:a0:a5:2b:ac:8b:92:7f:4d:08:b0:be:
                    7c:80:48:7e:2b:3c:1f:b1:03:81:80:b2:ec:5a:45:
                    4b:04:5e:5c:b9:2b:3a:51:8d:c4:7c:d7:38:22:3d:
                    c5:62:bb:e8:2e:b5:b6:5e:01:a3:98:0d:82:38:3f:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:39:16:90:29:E6:65:44:BA:BF:1A:E1:4E:61:60:F0:E8:FB:C1
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:40:8a:e4:60:f5:de:39:d1:04:ef:9b:1e:51:65:83:16:
         f2:19:f1:c0:a7:16:5a:85:d0:a6:81:7f:5e:db:6e:f8:e0:e6:
         07:7c:35:f7:77:bb:bb:25:6a:f8:7a:56:88:f2:12:74:72:98:
         d7:02:de:0f:cd:c4:09:33:61:91:be:7c:e0:9d:6c:93:61:2a:
         3e:d6:c3:e3:97:c2:26:8f:04:56:0f:5c:2c:ab:3f:9f:2f:d4:
         2a:1d:2c:1b:7c:1c:23:a9:a0:be:07:db:3a:9d:15:ab:7f:a3:
         2f:39:96:62:d0:d9:10:b7:b8:8c:e7:83:4f:27:76:68:64:6b:
         ed:10:60:6e:38:bf:e5:94:30:87:d9:87:9e:5e:e2:9d:c5:24:
         61:80:13:41:f4:e6:92:7f:de:8f:90:97:31:45:52:84:0e:39:
         10:9a:38:5c:00:bf:08:83:72:aa:ad:ab:1f:ab:45:fb:9c:3a:
         d7:7a:dd:70:5f:09:05:a3:0f:2f:fd:85:bd:ad:84:c8:76:82:
         98:11:ff:30:0b:4b:45:d8:98:f3:04:70:0e:b5:71:fb:92:41:
         9c:1e:4d:6e:5b:3d:c8:61:af:58:35:21:ad:84:50:9d:82:4b:
         fd:8c:92:74:89:69:c3:73:6c:be:d9:69:03:aa:30:56:19:e7:
         25:1e:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:22 2025 by rpki-client