Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          CuAh7iL82bSCj1ZceeIWWnBDqr9tIYKgMYI6apRLkIs=
Subject key identifier:   0C:92:3D:2B:15:7A:85:6C:B4:AD:EB:85:ED:8F:93:FF:37:4C:28:DB
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       1D0F12DCC3CC61847683D27E1628B3A7123E580F
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:42 +0000
ROA not before:           Tue 04 Feb 2025 18:05:42 +0000
ROA not after:            Tue 03 Feb 2026 18:10:42 +0000
asID:                     262237
IP address blocks:        190.196.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 19:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0f:12:dc:c3:cc:61:84:76:83:d2:7e:16:28:b3:a7:12:3e:58:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:42 2025 GMT
            Not After : Feb  3 18:10:42 2026 GMT
        Subject: CN=0C923D2B157A856CB4ADEB85ED8F93FF374C28DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:13:8d:fe:38:7b:b1:6b:58:4f:4d:16:60:
                    a6:9e:93:31:89:f3:c1:4b:15:ef:1e:10:c1:02:ea:
                    fc:10:42:be:93:8d:e9:16:f0:db:a2:85:3c:44:5c:
                    15:4c:d0:de:8a:11:52:37:ec:56:5c:46:a0:21:ab:
                    0c:c5:cb:55:4d:ae:c5:b1:4b:35:d2:bf:b0:45:6c:
                    c4:28:81:08:de:5e:e7:bd:14:8a:78:62:71:ed:78:
                    e9:f0:17:b3:cd:b3:18:62:4c:6d:a2:c7:f9:32:97:
                    87:b1:07:b7:7a:d3:6c:66:6e:88:a5:77:23:27:f8:
                    76:7a:ee:1d:04:f8:7d:1d:a1:28:d3:0f:4f:61:91:
                    a8:1b:0a:41:07:de:58:60:4e:bd:20:c8:f0:9e:f9:
                    81:3a:9a:c4:4c:62:a7:0e:a8:0e:3c:46:5e:ba:01:
                    db:b8:42:8c:f4:53:7f:b0:fc:94:a8:87:48:cf:8d:
                    53:12:26:b2:da:69:b7:dc:1d:5c:84:3c:b1:52:f7:
                    bc:57:9b:54:b6:c8:cf:0b:16:a1:94:b6:e4:a0:b7:
                    e7:bd:c3:09:53:33:f7:80:b9:c0:a3:25:7b:3e:06:
                    ae:20:87:61:45:69:d7:6d:29:12:cf:7b:5c:36:1f:
                    30:12:1f:b3:f9:2a:a3:12:ae:74:73:61:f4:67:4a:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:92:3D:2B:15:7A:85:6C:B4:AD:EB:85:ED:8F:93:FF:37:4C:28:DB
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:38:a4:6e:e6:f3:0a:db:6e:00:fa:95:ac:f2:1e:79:a4:31:
         05:51:a1:a6:9f:1d:f7:c2:4d:13:52:96:53:46:32:78:52:62:
         e6:fc:57:62:3c:9c:58:9d:65:9f:c2:33:26:4b:b9:b8:5e:aa:
         e7:f7:d1:92:53:d1:7c:91:56:dc:1d:5a:21:9f:54:51:f9:25:
         d6:8a:87:e5:46:a3:3d:a7:59:4a:b8:7e:ad:27:46:e2:50:fe:
         12:3b:9c:62:ad:64:ea:87:6e:d2:cf:bc:7a:e6:90:c8:ac:92:
         b0:32:83:ab:98:5c:66:88:92:7b:69:b6:8a:c2:fb:44:cc:fd:
         45:d6:1d:2a:89:89:36:89:e9:11:b8:ba:6a:9a:60:ee:a5:9a:
         96:9c:fd:f5:5f:b0:78:d6:e5:b2:d4:49:76:a8:48:89:71:f4:
         77:b5:07:cb:73:c4:f8:f1:64:ef:af:69:0b:07:e5:f6:73:5a:
         5b:aa:8b:61:05:c3:64:85:fb:02:12:d8:d5:c0:8f:5f:4d:e5:
         d0:0d:2b:87:4e:36:ca:d8:f5:48:db:b2:d4:0f:5a:72:d3:f6:
         93:07:90:65:e3:6f:9a:7e:16:fb:c5:2f:d1:d3:98:3e:33:93:
         a0:4d:00:9d:d0:5b:8c:88:11:4f:cc:b2:13:e2:63:bd:08:ca:
         bb:e7:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:45 2025 by rpki-client