Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231362e302f32332d3234203d3e203233323433.roa
File:                     3139302e3130362e3231362e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          hpLtIVRTabaZRMRELdwDlTCYFhXyVt5bAmrsmHSNVw8=
Subject key identifier:   29:1E:DD:41:17:79:CE:F6:B4:7E:F2:A6:AC:F3:A4:AC:5C:24:A3:07
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       7166048885A4B2B562944F0A770F28101E5C21D2
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231362e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:42 +0000
ROA not before:           Tue 04 Feb 2025 18:20:42 +0000
ROA not after:            Tue 03 Feb 2026 18:25:42 +0000
asID:                     23243
IP address blocks:        190.106.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:66:04:88:85:a4:b2:b5:62:94:4f:0a:77:0f:28:10:1e:5c:21:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:42 2025 GMT
            Not After : Feb  3 18:25:42 2026 GMT
        Subject: CN=291EDD411779CEF6B47EF2A6ACF3A4AC5C24A307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:40:26:92:f3:15:14:95:7f:fa:12:03:ae:
                    a2:87:92:09:cd:7f:e1:2d:17:68:93:3b:92:da:75:
                    be:4f:14:ab:4a:8e:ba:f3:e1:91:6b:90:39:43:70:
                    56:45:6c:b1:9c:e1:ca:92:a4:46:a1:99:e3:e4:b6:
                    e3:92:6f:5b:37:a1:51:4b:51:24:0d:95:df:f2:a6:
                    fd:b2:ee:c5:3b:bf:d9:4e:d7:dd:0b:9f:cc:1c:76:
                    19:7c:43:22:86:be:57:93:5a:63:f9:0c:50:18:5d:
                    4f:23:79:3f:4b:10:9b:eb:5f:fe:95:9e:8c:40:b5:
                    a4:fe:7c:fe:4f:b2:69:4d:10:63:33:30:5f:eb:0e:
                    3f:80:e4:37:45:6f:25:61:eb:22:03:e0:95:db:11:
                    8c:c8:db:d7:47:1f:6d:b8:91:38:d5:c3:10:13:32:
                    2c:86:a0:29:e3:7d:2a:14:86:73:82:41:96:00:92:
                    88:12:c2:0e:60:b0:4f:55:d1:68:48:28:23:df:d2:
                    0c:e9:db:83:a7:fc:c3:37:7a:c5:c9:ec:7f:9f:65:
                    2f:70:94:49:df:fc:7c:d3:69:ed:b5:bb:fc:f4:c9:
                    77:a5:d9:c2:c9:0d:ca:e4:0c:2f:35:60:e9:16:bc:
                    d7:7d:53:d9:d2:ed:5f:e3:7a:3b:94:20:c1:04:f4:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1E:DD:41:17:79:CE:F6:B4:7E:F2:A6:AC:F3:A4:AC:5C:24:A3:07
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231362e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:64:11:94:dc:1c:ee:d5:80:f5:bb:13:0f:54:4b:37:d8:
         42:bf:ca:67:e7:9e:1f:19:d9:ab:82:fa:c5:ee:7a:96:7f:34:
         e3:00:74:1f:e3:6f:17:56:8c:b1:46:dc:40:91:18:f4:cc:74:
         d3:e0:b5:bf:30:7e:39:52:2b:f8:c8:2f:41:12:d4:7d:c3:21:
         cd:dc:73:cb:da:14:b9:e2:58:b2:0b:0e:82:ff:50:22:ea:c6:
         6b:bd:40:16:00:db:9a:e8:cd:5f:3f:ee:34:0d:38:8c:08:ae:
         85:09:49:47:28:82:97:00:e8:7b:75:31:39:6c:4f:9a:99:40:
         fc:20:3a:66:72:6b:2e:97:b9:e6:f1:ac:b1:cf:ab:91:ee:68:
         cb:fd:52:5d:30:74:c0:d5:b2:a0:d2:86:18:25:f4:d3:39:9a:
         6a:2c:52:2e:cb:f4:f0:dd:c6:45:ad:fd:73:e8:17:4b:9c:11:
         6e:e2:c3:e0:f4:76:21:e4:1b:31:1f:11:32:06:ba:3c:45:8d:
         db:dd:70:a1:f4:c2:07:bb:ba:e5:9c:1b:5d:56:f2:ef:5d:11:
         90:fd:ff:e7:26:0c:9e:25:f6:aa:42:df:27:69:65:0f:94:2a:
         32:8f:15:bf:7e:5b:23:02:31:52:f8:ab:ae:cf:c6:c3:e9:5f:
         07:45:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:37 2025 by rpki-client