Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa
File:                     3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa (raw, json)
Hash identifier:          s41yCZrRhzNO7DJxxu4EkCKFG5cm/G6emvOI6g62P/g=
Subject key identifier:   33:54:AC:8E:D7:44:AB:8F:43:5E:99:B3:24:1C:11:EE:A8:80:F3:2F
Certificate issuer:       /CN=822238317AA58BF50F02E72654D92F5AAF15F921
Certificate serial:       5BC086082AF23D021076F1F52849792BDA9E2B21
Authority key identifier: 82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa
Signing time:             Tue 04 Feb 2025 18:10:23 +0000
ROA not before:           Tue 04 Feb 2025 18:05:23 +0000
ROA not after:            Tue 03 Feb 2026 18:10:23 +0000
asID:                     270058
IP address blocks:        190.115.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c0:86:08:2a:f2:3d:02:10:76:f1:f5:28:49:79:2b:da:9e:2b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822238317AA58BF50F02E72654D92F5AAF15F921
        Validity
            Not Before: Feb  4 18:05:23 2025 GMT
            Not After : Feb  3 18:10:23 2026 GMT
        Subject: CN=3354AC8ED744AB8F435E99B3241C11EEA880F32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:b7:77:80:eb:d0:b6:e7:07:59:28:99:be:
                    05:2e:ff:b0:4b:7c:7b:57:2d:1c:26:74:c7:49:e2:
                    c8:c7:0a:06:44:67:5d:95:2e:78:5a:a8:55:af:a7:
                    5c:94:18:ad:73:ba:63:98:0d:bd:0c:c9:7f:08:2d:
                    20:c1:25:87:8e:86:ee:5b:b3:aa:27:6e:c4:65:e2:
                    2b:55:26:46:ec:1a:a6:16:de:f7:4c:5a:4c:df:19:
                    f6:80:07:0d:25:64:b4:a1:38:fb:19:9e:28:ff:b3:
                    38:2a:b2:22:cb:93:c0:72:98:56:87:8c:12:43:2a:
                    81:22:1c:f6:3c:c3:ea:e2:4a:70:b5:3e:8b:ef:98:
                    3e:7d:c9:61:f5:13:e8:3e:83:f6:ce:bc:81:39:8f:
                    d1:cd:4b:14:3b:5f:58:4d:60:6e:6b:45:6c:3a:ae:
                    1f:8e:8d:0c:78:16:a7:15:f6:a1:20:71:7b:0d:0e:
                    39:26:a7:96:05:57:f8:c3:28:b8:33:9a:f3:4f:32:
                    ef:1d:6d:b2:7a:20:46:d1:b8:95:78:84:2a:5a:c3:
                    14:be:0c:5f:18:2c:0a:c9:e0:22:38:e7:13:d1:55:
                    0f:9d:73:42:89:15:94:03:27:96:8f:8a:9a:c3:4d:
                    20:ae:33:7c:6d:52:21:89:75:3e:b5:52:9e:42:b6:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:AC:8E:D7:44:AB:8F:43:5E:99:B3:24:1C:11:EE:A8:80:F3:2F
            X509v3 Authority Key Identifier:
                keyid:82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:8d:02:a9:93:46:49:01:8b:53:35:97:bf:e5:be:56:3b:
         df:b8:3c:73:27:a0:4c:97:e8:79:2f:d9:85:4a:fa:2f:24:31:
         91:c2:73:c9:e2:34:11:a4:0e:67:30:b2:55:8c:b8:68:8e:5e:
         de:ec:93:d2:b2:6e:b4:85:b1:9e:f6:b2:d2:23:ff:9e:d3:31:
         46:c1:3d:75:8e:cb:eb:44:52:08:c9:24:bf:d9:36:83:24:64:
         c8:33:b4:b3:7b:09:52:b1:e2:73:10:2e:d8:2d:ec:fa:fc:ee:
         af:a8:a7:96:73:e8:76:dc:5f:81:2f:f0:22:24:23:dc:cf:19:
         26:13:a2:e2:be:02:95:03:cf:50:1b:56:9e:3d:26:d8:5e:d1:
         9b:fc:34:ad:e0:6d:88:3b:cb:db:bf:14:ab:33:32:f5:a8:a7:
         31:b9:32:f8:05:70:9f:09:ac:3a:36:b3:a7:1b:39:1a:bb:c5:
         2d:21:0d:ef:73:e5:49:fe:af:ac:83:01:ed:95:c4:27:fa:e5:
         61:24:fd:76:1a:0d:f3:33:3e:e9:0e:c8:74:ca:a2:d1:0e:94:
         2e:65:2b:d3:fd:d6:8b:87:83:70:3f:74:dc:1a:9e:cc:c6:a0:
         94:60:fd:bc:e0:16:35:ac:37:e0:04:16:6c:b9:2e:23:b7:ab:
         a5:83:f6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:17 2025 by rpki-client