Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3230382e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3230382e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          QhTGpidqsv5T82X8pz7M75nPn2WxfJDID6n9F84zjKI=
Subject key identifier:   AB:31:17:3E:09:4E:01:F2:9F:04:D6:DC:33:92:59:B7:A6:F3:60:71
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       4EDFEB86401F6BC66FFB8BF7E7A490EDE8FBE109
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3230382e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:42 +0000
ROA not before:           Tue 04 Feb 2025 18:05:42 +0000
ROA not after:            Tue 03 Feb 2026 18:10:42 +0000
asID:                     262237
IP address blocks:        190.196.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:df:eb:86:40:1f:6b:c6:6f:fb:8b:f7:e7:a4:90:ed:e8:fb:e1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:42 2025 GMT
            Not After : Feb  3 18:10:42 2026 GMT
        Subject: CN=AB31173E094E01F29F04D6DC339259B7A6F36071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:d8:cd:dc:1a:1d:19:a4:97:35:8f:cc:0f:
                    12:70:b0:84:d8:ef:80:f8:6e:3b:38:ec:86:a5:ce:
                    8b:20:fc:fb:da:15:a6:80:ae:0a:8f:9d:5d:f7:1f:
                    ef:db:00:42:26:81:9a:07:17:1f:dc:4a:ca:5b:62:
                    81:28:9f:a7:9d:1d:b6:d3:71:48:ff:5b:6b:40:71:
                    13:13:26:c2:2d:a8:1c:57:15:02:66:d9:f6:a2:65:
                    29:e7:4a:c7:3a:a0:76:b2:09:60:26:52:db:82:f5:
                    0b:41:6e:62:69:3e:f2:a2:2c:8c:0b:79:cd:c8:cd:
                    06:ea:50:68:a5:b8:2c:04:ca:60:34:08:35:1b:c1:
                    63:42:7d:84:ae:6e:41:75:4a:52:41:5e:15:bf:64:
                    f4:89:65:96:b3:1c:4e:1d:ed:59:07:0f:c7:44:4a:
                    f7:ac:64:a0:8c:b2:e9:88:ff:11:f6:76:21:aa:40:
                    35:7a:b6:7e:a0:5c:6f:13:03:12:0f:4c:ec:d9:9d:
                    f3:4a:8d:3c:f6:38:f6:8e:f5:60:57:25:87:ec:eb:
                    dc:83:24:01:2e:f9:50:3b:ad:ac:ba:6f:76:be:43:
                    3d:1a:f8:59:dd:54:a7:84:48:61:2b:e9:2c:10:f0:
                    76:a8:de:60:a9:d1:5f:52:61:ca:4d:37:0d:25:17:
                    fe:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:31:17:3E:09:4E:01:F2:9F:04:D6:DC:33:92:59:B7:A6:F3:60:71
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3230382e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:84:b6:2c:95:83:40:2b:c3:53:13:9d:39:51:fe:e9:8b:
         d7:bc:f1:42:82:95:c9:87:02:78:2c:ef:45:79:28:08:00:09:
         88:ee:cc:eb:c4:ed:f8:1c:5f:30:84:e2:6c:f0:76:8a:42:02:
         4a:cd:d1:e6:50:68:82:9f:a6:df:d1:0f:90:e1:51:bb:2b:c9:
         e3:10:c4:b1:9e:c5:05:9c:b3:95:65:2f:f5:bc:34:eb:71:92:
         4e:74:20:4a:34:4f:c7:59:c5:79:b7:ad:e4:42:a5:5a:09:b4:
         af:80:b1:70:7a:40:f0:23:f7:3e:82:f4:f6:94:7a:5b:6f:2d:
         13:d3:ac:4c:6f:0e:b8:68:9a:0e:bd:36:74:ba:0f:09:b6:34:
         73:62:59:86:59:bb:ff:40:ca:6d:a7:d5:4e:bf:0e:e6:7d:7e:
         72:8b:76:2e:20:2f:ea:05:a4:be:60:3a:94:94:3c:7c:ba:db:
         5b:77:ba:9e:06:a6:9d:9d:57:d5:77:df:4e:4f:69:20:51:68:
         5f:94:db:7d:17:1a:fa:c2:58:64:26:ed:16:15:cc:43:fe:18:
         0c:1a:18:0b:8b:24:c9:36:d4:fb:4b:12:12:89:4b:ae:c9:b9:
         f1:da:8b:5c:6b:b8:9e:87:dc:0c:a6:bc:98:22:4b:06:19:73:
         2c:69:2f:e0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTt/rhkAfa8Zv+4v356SQ7ej74QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMDcxNkM2ODc4MTNEMEYxMDk0QkM1NTY3NEIyNkE2
OEFGOTBERjAeFw0yNTAyMDQxODA1NDJaFw0yNjAyMDMxODEwNDJaMDMxMTAvBgNV
BAMTKEFCMzExNzNFMDk0RTAxRjI5RjA0RDZEQzMzOTI1OUI3QTZGMzYwNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZdjN3BodGaSXNY/MDxJwsITY
74D4bjs47Ialzosg/PvaFaaArgqPnV33H+/bAEImgZoHFx/cSspbYoEon6edHbbT
cUj/W2tAcRMTJsItqBxXFQJm2faiZSnnSsc6oHayCWAmUtuC9QtBbmJpPvKiLIwL
ec3IzQbqUGiluCwEymA0CDUbwWNCfYSubkF1SlJBXhW/ZPSJZZazHE4d7VkHD8dE
SvesZKCMsumI/xH2diGqQDV6tn6gXG8TAxIPTOzZnfNKjTz2OPaO9WBXJYfs69yD
JAEu+VA7ray6b3a+Qz0a+FndVKeESGEr6SwQ8Hao3mCp0V9SYcpNNw0lF/6tAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUqzEXPglOAfKfBNbcM5JZt6bzYHEwHwYDVR0j
BBgwFoAUR6BxbGh4E9DxCUvFVnSyamivkN8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUNDNUI4MkZCRDBFOEUwOUVDNDQyN0MwQTg4OEY2MTBC
M0NCMzgxRjdBMTAyQjAxQzI1RDQ5RTY2M0U1NkVBLzAvNDdBMDcxNkM2ODc4MTNE
MEYxMDk0QkM1NTY3NEIyNkE2OEFGOTBERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80N0EwNzE2QzY4NzgxM0QwRjEw
OTRCQzU1Njc0QjI2QTY4QUY5MERGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlDQzVCODJGQkQwRThFMDlFQzQ0MjdDMEE4ODhGNjEwQjNDQjM4MUY3
QTEwMkIwMUMyNUQ0OUU2NjNFNTZFQS8wLzMxMzkzMDJlMzEzOTM2MmUzMjMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMzMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xNAwDQYJKoZIhvcNAQELBQADggEBAJwshLYslYNAK8NTE505Uf7pi9e88UKClcmH
Angs70V5KAgACYjuzOvE7fgcXzCE4mzwdopCAkrN0eZQaIKfpt/RD5DhUbsryeMQ
xLGexQWcs5VlL/W8NOtxkk50IEo0T8dZxXm3reRCpVoJtK+AsXB6QPAj9z6C9PaU
eltvLRPTrExvDrhomg69NnS6Dwm2NHNiWYZZu/9Aym2n1U6/DuZ9fnKLdi4gL+oF
pL5gOpSUPHy621t3up4Gpp2dV9V3305PaSBRaF+U230XGvrCWGQm7RYVzEP+GAwa
GAuLJMk21PtLEhKJS67JufHai1xruJ6H3AymvJgiSwYZcyxpL+A=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:38:27 2025 by rpki-client