Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          bm8WRq+0YRhpYyl4w5y+ZKmzsNDaGQrrJNSGynlyyjo=
Subject key identifier:   1D:08:24:A3:84:78:96:CF:CD:9B:60:AB:34:2A:E9:4F:68:47:27:F0
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       0B9D6B2CCD717B3529475F1573218633EB052333
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:43 +0000
ROA not before:           Tue 04 Feb 2025 18:23:43 +0000
ROA not after:            Tue 03 Feb 2026 18:28:43 +0000
asID:                     52253
IP address blocks:        190.108.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9d:6b:2c:cd:71:7b:35:29:47:5f:15:73:21:86:33:eb:05:23:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:43 2025 GMT
            Not After : Feb  3 18:28:43 2026 GMT
        Subject: CN=1D0824A3847896CFCD9B60AB342AE94F684727F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:5b:fd:f6:17:da:1b:fe:33:ab:7f:a0:79:
                    2c:4d:11:80:bf:c3:c4:fe:62:c4:1d:23:09:e7:fd:
                    0a:a9:d6:53:82:08:5b:20:44:31:35:80:f9:53:eb:
                    5d:a4:2b:85:14:33:a6:ba:cc:0f:ec:25:d2:d3:cf:
                    fe:c4:40:f4:fd:b8:a9:6b:5f:b1:70:d8:33:c1:b7:
                    61:91:7b:d7:98:12:8c:19:55:f9:fb:aa:48:e5:2a:
                    ef:fb:56:15:ce:79:22:24:57:43:e6:67:e5:37:53:
                    0b:ca:3a:58:67:ce:8e:8d:f9:6c:9d:b7:43:d2:27:
                    56:2a:e1:23:02:fd:b4:90:8c:32:6a:41:9f:e3:3a:
                    55:ef:cb:ba:ff:c8:87:57:fb:0f:60:ee:7c:8d:b7:
                    d6:6d:34:c4:fe:d5:3b:cd:33:93:c4:9b:d7:9a:66:
                    4d:1a:65:8a:78:8e:6f:72:af:07:52:6b:ab:33:7a:
                    e4:82:c8:d2:41:a5:fc:19:0e:b0:34:f8:16:15:b5:
                    cc:39:f9:79:c7:4a:1d:88:a9:d3:84:83:d8:ed:2e:
                    16:85:5d:5b:5b:a1:93:a8:27:b8:36:a2:84:8a:a3:
                    dc:c7:f4:f9:a1:ad:8c:47:4d:15:16:b6:9b:3c:69:
                    fe:c9:dd:cf:3c:61:8d:01:db:be:47:c9:99:db:b8:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:24:A3:84:78:96:CF:CD:9B:60:AB:34:2A:E9:4F:68:47:27:F0
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:85:75:65:d9:ee:a6:58:68:1c:d3:0f:32:0a:ca:84:0e:
         38:74:22:2b:c1:e9:96:f2:37:1e:21:77:4c:4b:0f:f1:c6:8a:
         13:c3:1a:b7:b6:cc:d7:ee:a0:10:b0:3b:1c:bc:39:60:3e:1b:
         6c:a5:99:80:92:2c:8f:cd:e7:a8:0c:83:33:c6:fc:32:1f:48:
         cb:1b:f4:98:26:db:c4:8b:89:ac:fd:db:5f:ea:5d:4d:c7:9b:
         2c:39:93:a1:3c:fd:b8:14:c2:01:53:3d:b2:a5:e3:68:5f:3e:
         55:3a:e5:11:c7:61:de:e3:42:77:52:19:eb:26:d3:3c:d0:70:
         0d:3f:b6:fc:02:e2:fb:2e:3e:e8:27:da:ac:14:6f:b8:0f:fd:
         b9:81:a1:0f:09:54:b4:41:1f:a6:3e:79:4b:e0:e8:fd:50:d7:
         82:b9:c6:f2:56:ab:d9:1b:fe:91:92:ff:b9:2b:1d:81:bd:65:
         d9:80:f7:f7:af:58:5c:8a:4b:34:c7:61:18:45:5e:78:82:aa:
         ce:a1:e3:f8:6a:9a:37:33:68:53:7b:bf:d9:f0:36:38:3b:ff:
         f7:18:59:58:8b:d8:f4:b4:d7:e1:5d:e1:b1:b1:fe:1f:2e:06:
         3b:f4:20:b5:fc:af:e0:4c:d0:0a:04:64:e6:27:39:71:3f:19:
         c8:b1:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:49 2025 by rpki-client