Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          fClFJzqIqZe9CvDTpU/S7nWXGvUX49emXNHEJ3uRTBs=
Subject key identifier:   2B:37:22:3C:BB:F7:9A:2F:5A:3C:FD:78:BB:42:3A:A5:25:F3:16:1D
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       14AA6B3778DF680D0E168A0E4E75CF7D1685AC63
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:42 +0000
ROA not before:           Tue 04 Feb 2025 17:55:42 +0000
ROA not after:            Tue 03 Feb 2026 18:00:42 +0000
asID:                     262171
IP address blocks:        190.93.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:aa:6b:37:78:df:68:0d:0e:16:8a:0e:4e:75:cf:7d:16:85:ac:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:42 2025 GMT
            Not After : Feb  3 18:00:42 2026 GMT
        Subject: CN=2B37223CBBF79A2F5A3CFD78BB423AA525F3161D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:20:0f:d8:18:6d:e6:d5:39:9b:bd:2e:b2:
                    11:77:02:83:ec:47:18:74:19:9a:41:4d:cf:bc:64:
                    a4:6b:b8:a2:6e:17:b8:6d:e6:96:d6:76:f9:ba:57:
                    9d:e8:23:b7:72:96:3f:84:ed:a3:4b:80:0e:d7:2a:
                    04:df:51:97:e7:82:c6:ce:42:3e:57:cf:17:c1:4b:
                    7b:2c:40:2f:49:59:17:69:54:d6:17:4a:38:9b:d5:
                    56:55:42:1e:d3:01:bb:48:3f:3d:67:2f:52:01:9c:
                    73:68:b6:d9:6d:c7:9c:7c:b4:77:c9:75:e8:89:7e:
                    d2:8f:bd:2f:24:3d:d8:b1:e7:81:be:dc:cf:ad:a4:
                    08:05:a9:4e:69:c0:92:6d:4c:f2:8e:52:e2:ba:11:
                    9f:f7:c8:8b:a3:71:c3:a7:73:b9:3d:b3:20:de:27:
                    2b:91:15:e7:0f:b3:06:e1:08:61:e2:c7:3e:63:7f:
                    d0:a6:6e:a7:54:31:d9:7a:da:56:3a:15:d6:da:a9:
                    71:13:75:7a:b1:3f:0c:3b:17:14:66:ad:f6:70:eb:
                    bf:f6:2e:c1:e3:11:41:fa:08:b1:e3:aa:0e:6d:11:
                    36:83:2c:13:a4:86:54:55:cc:38:7b:92:0a:83:7a:
                    86:9b:a2:1f:a8:89:aa:a8:8d:77:a3:9e:b4:92:71:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:37:22:3C:BB:F7:9A:2F:5A:3C:FD:78:BB:42:3A:A5:25:F3:16:1D
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:84:75:2e:16:15:4e:1d:92:2d:33:59:dc:f9:9f:93:e3:
         98:ae:b1:48:a8:a6:d0:87:43:22:6e:57:7d:da:b5:3e:c3:43:
         2f:80:83:1a:01:93:87:d8:94:2f:75:1b:75:1f:5b:08:09:c7:
         39:1d:ab:2d:49:1b:9c:ae:ad:9f:ae:19:bc:66:08:b9:e2:eb:
         9d:05:1c:d5:4b:02:58:5e:04:f8:fb:f4:58:c4:11:dc:84:ea:
         00:15:9e:cb:6f:e0:5d:c3:f5:d6:66:a9:da:63:71:ba:ad:d2:
         90:36:da:b4:5f:18:14:c3:14:21:bd:51:6b:ef:18:90:34:53:
         ac:31:70:84:7e:3e:b0:96:de:58:df:4e:5a:83:4d:2c:58:fc:
         03:4f:4b:d5:05:f2:ca:bf:9f:5f:83:fa:bc:0d:c7:8a:0c:d3:
         23:c0:11:61:16:20:6f:02:42:00:52:90:58:00:ea:e6:20:1c:
         91:97:e8:ea:f7:58:f5:4a:6a:f6:15:ca:5c:13:24:da:96:da:
         5e:46:7a:ef:3b:63:5a:c9:b9:7f:85:c0:7e:43:76:9a:eb:eb:
         90:f8:65:6f:8f:d2:9a:99:b3:bd:67:cd:4d:68:ec:1a:18:41:
         f8:20:e6:2b:28:00:53:90:a6:cc:ff:30:73:ad:c2:c6:d2:4a:
         72:04:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:42 2025 by rpki-client