Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          PXMohQmOSDNP8eINzWI2oW+tbzDnSrVij3FCD1BOGps=
Subject key identifier:   D1:80:36:25:B3:F1:EC:20:E3:EA:8C:F7:2B:53:4A:B2:55:BE:32:40
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       6A0B0A0039030F26AA73FF391E200C4C6B88FEEA
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:39 +0000
ROA not before:           Tue 04 Feb 2025 17:55:39 +0000
ROA not after:            Tue 03 Feb 2026 18:00:39 +0000
asID:                     262171
IP address blocks:        190.93.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:0a:00:39:03:0f:26:aa:73:ff:39:1e:20:0c:4c:6b:88:fe:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:39 2025 GMT
            Not After : Feb  3 18:00:39 2026 GMT
        Subject: CN=D1803625B3F1EC20E3EA8CF72B534AB255BE3240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:e0:94:66:cf:e9:98:79:c2:9a:28:b2:62:
                    d6:ea:d9:52:87:1b:4d:51:e4:81:ce:e1:e9:47:53:
                    ca:fb:db:cd:ab:53:3f:38:e9:92:b1:d3:1d:e1:fb:
                    e3:21:ff:f3:18:c4:be:21:b2:41:26:c8:17:cf:a9:
                    b3:8b:0a:85:40:2f:b5:8b:61:93:c8:81:59:3e:a5:
                    20:45:1f:cb:bc:b0:d2:9a:db:c5:cc:13:c1:77:d9:
                    2d:c8:18:4a:1e:7a:a9:6b:d9:fa:fb:a6:6c:30:79:
                    12:2e:f3:d0:4f:9a:60:bb:eb:62:ef:54:87:0a:ce:
                    a0:a2:6f:08:42:d6:03:e6:d3:2d:5f:57:59:db:57:
                    89:c4:5a:0a:a5:b4:45:75:c7:d3:5e:93:36:29:f4:
                    83:15:fd:77:a8:06:aa:1e:9b:75:88:58:9b:54:88:
                    0c:01:92:ab:d0:00:c0:84:43:16:97:d2:fa:c0:6b:
                    0d:fc:1f:bc:c4:05:05:ea:e4:e4:ab:b8:94:22:39:
                    c3:db:c3:5e:2f:b8:50:4d:fd:7c:35:32:86:80:78:
                    58:03:e5:f2:c1:36:33:56:c5:65:7b:df:9d:69:35:
                    fc:ce:f8:12:8d:f8:a6:89:22:da:ba:6e:26:40:5c:
                    2e:42:1d:2c:70:84:a7:e4:bc:2f:f7:19:9c:70:ce:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:80:36:25:B3:F1:EC:20:E3:EA:8C:F7:2B:53:4A:B2:55:BE:32:40
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:96:ea:9c:04:c7:f4:41:6d:a5:c1:2e:a8:89:a4:a1:05:19:
         82:0d:a2:af:a3:48:80:78:b9:0b:b1:dc:32:74:da:42:f1:22:
         ef:07:b6:24:28:63:41:46:16:30:dc:9f:83:30:49:61:0a:b4:
         d1:9d:3e:35:ba:fe:74:36:54:59:02:2d:be:9f:44:bc:e4:45:
         67:1d:7f:68:27:b7:92:a0:a2:6a:03:46:3d:40:75:da:e2:14:
         48:9f:67:2f:76:f5:c2:18:45:e6:81:62:f4:33:d8:f1:3f:07:
         b3:34:6e:27:17:a2:a3:d6:00:8b:af:30:c7:33:b2:95:a6:d8:
         2f:9a:4e:fc:c2:c7:ff:32:18:06:95:f9:f9:94:9c:78:27:39:
         0e:50:91:06:96:70:f8:10:7b:7a:c2:a6:ed:77:2d:d1:14:44:
         3b:47:3d:a9:aa:8a:4b:51:e9:74:91:39:2d:10:a0:f3:ad:02:
         26:26:1d:0d:b4:74:92:33:dc:d0:b0:86:d3:ff:06:12:93:71:
         13:fd:0b:46:21:71:92:f8:ee:35:04:57:95:02:8c:8f:7f:85:
         e2:95:bb:2f:9e:7e:1f:88:5a:75:cb:b3:d7:22:6e:78:56:66:
         31:fb:45:95:e0:ac:77:f2:94:08:9b:b9:41:c2:9b:e1:fa:ab:
         df:e3:49:6e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUagsKADkDDyaqc/85HiAMTGuI/uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ4QTdDQzVGRkQ4RDE2NThBOTEwODJGNjM5Njg4RDY4
REE5Mzg5OTAeFw0yNTAyMDQxNzU1MzlaFw0yNjAyMDMxODAwMzlaMDMxMTAvBgNV
BAMTKEQxODAzNjI1QjNGMUVDMjBFM0VBOENGNzJCNTM0QUIyNTVCRTMyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9uCUZs/pmHnCmiiyYtbq2VKH
G01R5IHO4elHU8r7282rUz846ZKx0x3h++Mh//MYxL4hskEmyBfPqbOLCoVAL7WL
YZPIgVk+pSBFH8u8sNKa28XME8F32S3IGEoeeqlr2fr7pmwweRIu89BPmmC762Lv
VIcKzqCibwhC1gPm0y1fV1nbV4nEWgqltEV1x9NekzYp9IMV/XeoBqoem3WIWJtU
iAwBkqvQAMCEQxaX0vrAaw38H7zEBQXq5OSruJQiOcPbw14vuFBN/Xw1MoaAeFgD
5fLBNjNWxWV7351pNfzO+BKN+KaJItq6biZAXC5CHSxwhKfkvC/3GZxwzu8jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0YA2JbPx7CDj6oz3K1NKslW+MkAwHwYDVR0j
BBgwFoAUjYp8xf/Y0WWKkQgvY5aI1o2pOJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjAzNTJENUQ1Qjc5REZFNTVCNUFDMkEwNzMwRDU4Qzgw
NTVBQ0NBM0FDNjREN0ExODNFQzY1NEZFNDc5QjUwLzAvOEQ4QTdDQzVGRkQ4RDE2
NThBOTEwODJGNjM5Njg4RDY4REE5Mzg5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDhBN0NDNUZGRDhEMTY1OEE5
MTA4MkY2Mzk2ODhENjhEQTkzODk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YwMzUyRDVENUI3OURGRTU1QjVBQzJBMDczMEQ1OEM4MDU1QUNDQTNB
QzY0RDdBMTgzRUM2NTRGRTQ3OUI1MC8wLzMxMzkzMDJlMzkzMzJlMzEzNjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl2g
MA0GCSqGSIb3DQEBCwUAA4IBAQBJluqcBMf0QW2lwS6oiaShBRmCDaKvo0iAeLkL
sdwydNpC8SLvB7YkKGNBRhYw3J+DMElhCrTRnT41uv50NlRZAi2+n0S85EVnHX9o
J7eSoKJqA0Y9QHXa4hRIn2cvdvXCGEXmgWL0M9jxPwezNG4nF6Kj1gCLrzDHM7KV
ptgvmk78wsf/MhgGlfn5lJx4JzkOUJEGlnD4EHt6wqbtdy3RFEQ7Rz2pqopLUel0
kTktEKDzrQImJh0NtHSSM9zQsIbT/wYSk3ET/QtGIXGS+O41BFeVAoyPf4Xilbsv
nn4fiFp1y7PXIm54VmYx+0WV4Kx38pQIm7lBwpvh+qvf40lu
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:40 2025 by rpki-client