Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3139302e3130362e38302e302f32312d3234203d3e20323633373634.roa
File:                     3139302e3130362e38302e302f32312d3234203d3e20323633373634.roa (raw, json)
Hash identifier:          Y9sV8cSZQFdQREOPS/GD58m9hAo2AMpMCUNGoa3gBqI=
Subject key identifier:   C7:FE:67:FF:16:F4:EA:FB:8F:75:60:A7:48:3D:EE:EE:79:9E:17:59
Certificate issuer:       /CN=9A074897DF26261B55AA7647F456CB204D8528E1
Certificate serial:       4FCA9AF06CFE103109771D73D67F6BDEBCFDA6ED
Authority key identifier: 9A:07:48:97:DF:26:26:1B:55:AA:76:47:F4:56:CB:20:4D:85:28:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3139302e3130362e38302e302f32312d3234203d3e20323633373634.roa
Signing time:             Tue 04 Feb 2025 18:37:04 +0000
ROA not before:           Tue 04 Feb 2025 18:32:04 +0000
ROA not after:            Tue 03 Feb 2026 18:37:04 +0000
asID:                     263764
IP address blocks:        190.106.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ca:9a:f0:6c:fe:10:31:09:77:1d:73:d6:7f:6b:de:bc:fd:a6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A074897DF26261B55AA7647F456CB204D8528E1
        Validity
            Not Before: Feb  4 18:32:04 2025 GMT
            Not After : Feb  3 18:37:04 2026 GMT
        Subject: CN=C7FE67FF16F4EAFB8F7560A7483DEEEE799E1759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:d8:1b:05:e7:05:1c:d1:50:a9:08:42:20:
                    18:65:0c:7f:87:d8:1f:59:45:ae:99:37:90:4b:0d:
                    99:3a:d2:d5:a0:47:d8:32:e5:ab:75:c5:26:ff:f1:
                    b2:23:a8:20:8d:14:95:19:7d:fc:09:8f:7f:36:d8:
                    e0:b2:99:61:a4:53:18:e6:b9:47:0c:67:95:f0:2b:
                    c2:90:ee:ea:b8:97:c6:4c:4a:96:ea:99:d9:67:65:
                    50:d1:22:27:f2:00:7b:95:8e:74:54:76:b3:71:47:
                    fc:72:54:12:97:e4:8b:5d:3e:64:02:53:39:7f:60:
                    c0:20:f6:80:19:7f:18:fd:4e:db:ad:1c:8c:1d:9e:
                    d6:79:a7:d6:3c:4e:9f:f5:a8:ab:2c:eb:4f:cb:fe:
                    56:d8:c1:53:84:47:60:16:57:e2:56:e6:d1:20:ab:
                    f2:aa:c3:15:e6:5d:9d:16:e6:72:4d:6c:23:f0:a3:
                    35:3f:1e:0d:f8:13:0c:41:1b:cb:6d:53:be:81:5f:
                    2d:1a:86:9c:6f:39:9a:b1:d2:44:70:17:86:73:8e:
                    f4:93:53:0b:37:1d:53:47:cf:ff:46:40:d7:f4:23:
                    89:2d:e6:30:95:29:6e:06:8a:59:63:77:42:fc:4e:
                    72:65:be:ca:10:aa:89:a3:a7:5b:6f:21:12:61:e3:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FE:67:FF:16:F4:EA:FB:8F:75:60:A7:48:3D:EE:EE:79:9E:17:59
            X509v3 Authority Key Identifier:
                keyid:9A:07:48:97:DF:26:26:1B:55:AA:76:47:F4:56:CB:20:4D:85:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3139302e3130362e38302e302f32312d3234203d3e20323633373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:10:4b:cd:cd:ef:44:d4:22:4c:22:4e:49:ec:00:2c:28:f5:
         eb:f5:94:75:de:13:58:73:d4:71:5c:71:4d:93:bb:3e:fd:de:
         01:30:ae:d0:82:36:66:3c:9d:bd:17:80:e1:f7:f7:00:21:30:
         11:bf:5a:f4:80:0a:1f:8a:14:a7:b4:d2:31:65:21:16:23:ea:
         fb:3b:1e:39:9c:89:8c:ae:24:6d:82:64:82:75:4e:e7:bf:2a:
         be:05:5d:ad:a0:45:35:94:41:c4:f7:4f:10:66:c9:98:92:c7:
         88:31:e7:9e:7a:73:6b:6f:d2:ce:fb:a1:df:b8:e7:52:60:b6:
         71:92:f5:a2:f5:0c:ba:07:5b:25:2f:56:47:02:7e:92:bb:b0:
         32:8c:b7:b4:6c:ab:70:38:e4:1d:7a:52:0f:22:97:e1:bb:fa:
         68:76:7b:24:b5:e9:3c:73:6b:87:a7:58:05:96:2e:15:32:14:
         91:ca:ad:1d:3e:7c:6e:a2:04:a5:ae:03:c8:ae:cb:04:2e:91:
         a5:74:c3:24:a5:14:81:f6:3f:de:d6:8a:5c:5e:b4:d8:60:0c:
         10:48:23:fd:90:83:f1:3c:d5:f8:d8:c8:41:67:e6:e9:2b:f9:
         13:06:af:20:8a:4f:74:6a:45:1c:cc:be:38:20:13:6e:01:61:
         68:27:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:01:59 2025 by rpki-client