Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/3139302e3130372e3137362e302f32322d3234203d3e20323635373033.roa
File:                     3139302e3130372e3137362e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          KDR0wF3ikFcEQufl8sKiy6f67HnTwS8vYrIqjC5gxxM=
Subject key identifier:   AD:13:25:CC:2D:87:52:27:0F:53:A3:EE:6C:39:74:F7:21:4E:10:60
Certificate issuer:       /CN=B3A46BC24267EDFAF47C68E3B569F05EF63B4B14
Certificate serial:       2FAA458123EA7B2BF334F5BB617EAB6876EC98EF
Authority key identifier: B3:A4:6B:C2:42:67:ED:FA:F4:7C:68:E3:B5:69:F0:5E:F6:3B:4B:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/3139302e3130372e3137362e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 04 Feb 2025 18:36:44 +0000
ROA not before:           Tue 04 Feb 2025 18:31:44 +0000
ROA not after:            Tue 03 Feb 2026 18:36:44 +0000
asID:                     265703
IP address blocks:        190.107.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:45:81:23:ea:7b:2b:f3:34:f5:bb:61:7e:ab:68:76:ec:98:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A46BC24267EDFAF47C68E3B569F05EF63B4B14
        Validity
            Not Before: Feb  4 18:31:44 2025 GMT
            Not After : Feb  3 18:36:44 2026 GMT
        Subject: CN=AD1325CC2D8752270F53A3EE6C3974F7214E1060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:63:0c:22:ce:c1:f5:24:fa:8b:49:7e:c4:
                    fc:cd:d6:7d:ae:9b:3e:92:17:66:a8:4d:13:f3:14:
                    5f:c9:df:6d:b4:3e:21:dc:9f:0e:82:b3:9e:82:03:
                    29:cd:01:f0:5f:e0:12:b5:f4:6d:aa:fb:46:6e:76:
                    3f:72:b0:57:42:c9:3d:26:d3:e8:d3:3c:51:25:d7:
                    5e:49:a6:70:2f:b5:f3:ac:df:32:31:75:bb:9d:4f:
                    c4:75:c1:6b:3e:c0:b3:a2:8c:f2:d9:22:0d:b4:ae:
                    98:08:70:e2:b4:64:13:8b:55:0f:10:aa:98:f9:94:
                    2e:fb:90:cd:55:35:4f:b7:a1:f3:60:af:c3:49:a2:
                    b5:d6:1d:40:8f:48:37:58:a5:cb:33:f1:f0:5b:68:
                    3b:08:2d:ba:d4:63:df:e7:3d:41:43:98:47:ce:34:
                    0a:3d:5f:35:1d:7c:54:a9:f3:89:7e:dd:19:e3:7e:
                    66:85:39:a9:9e:c7:dc:48:12:9f:da:55:ec:3c:5c:
                    41:5b:c2:7c:3e:8d:2f:c5:4c:f0:cb:76:53:c5:17:
                    da:f5:e8:4a:e0:4b:05:58:e7:a5:b7:c2:06:f8:fe:
                    ee:5a:ef:81:4b:57:ac:d3:32:b5:cc:5d:cf:20:19:
                    67:c1:4e:5e:d8:5e:c0:0a:08:80:a7:9e:ce:66:37:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:13:25:CC:2D:87:52:27:0F:53:A3:EE:6C:39:74:F7:21:4E:10:60
            X509v3 Authority Key Identifier:
                keyid:B3:A4:6B:C2:42:67:ED:FA:F4:7C:68:E3:B5:69:F0:5E:F6:3B:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/3139302e3130372e3137362e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:40:35:43:bf:95:ce:2c:d3:26:1c:50:16:2e:a8:9d:7f:
         22:cb:37:6b:a7:85:11:0d:2c:8c:2c:a0:99:b9:5e:89:43:18:
         a3:66:85:9d:7c:43:e5:31:20:2d:e2:a9:af:c2:ab:12:5f:26:
         55:0b:7b:87:1c:76:41:9b:5f:b1:fc:b9:a7:ba:5c:9b:07:b8:
         5f:aa:ee:57:59:f7:f6:ef:d2:65:18:f5:6d:1d:b9:2c:b5:a5:
         4f:bc:2f:77:78:04:9a:ef:d8:1c:62:b8:9e:cd:5d:e8:df:62:
         39:db:78:c0:36:f4:3b:92:26:52:93:80:b9:fa:b4:81:48:88:
         f4:a2:1b:87:e7:de:4b:72:0a:c5:ad:80:45:81:c4:b7:8b:01:
         a1:4a:9a:de:e0:26:96:81:9e:67:f7:f2:6e:0e:bd:0e:99:3e:
         a8:96:ff:45:3b:95:9c:03:89:7a:79:86:56:7d:15:cf:00:eb:
         91:ef:88:59:15:42:24:09:07:68:e0:c3:e7:22:02:b1:d2:f9:
         69:e7:96:a6:bb:c5:4c:2d:3e:a4:83:9b:d6:92:cd:aa:26:b3:
         50:16:84:9d:a7:fb:d4:e4:3e:14:73:b0:4c:6c:f0:0c:dd:24:
         a0:15:e3:fb:4c:88:7d:e9:77:aa:36:77:0b:00:80:93:89:03:
         6a:f2:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:16 2025 by rpki-client