Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137352e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3137352e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          6hTqMK31fG3EExRvqIR8HyTaZCc+nym3LbaD9UvCkXk=
Subject key identifier:   8C:B4:DE:BB:93:3F:F5:67:4A:CA:FA:01:78:FA:02:F2:33:46:55:64
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       344BB6210EF508253BCD4D5DAA217B65D6286F0D
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137352e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:40 +0000
ROA not before:           Tue 04 Feb 2025 17:55:40 +0000
ROA not after:            Tue 03 Feb 2026 18:00:40 +0000
asID:                     262171
IP address blocks:        190.93.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4b:b6:21:0e:f5:08:25:3b:cd:4d:5d:aa:21:7b:65:d6:28:6f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:40 2025 GMT
            Not After : Feb  3 18:00:40 2026 GMT
        Subject: CN=8CB4DEBB933FF5674ACAFA0178FA02F233465564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:46:f6:b2:f2:f3:ee:92:f1:49:6f:a1:75:
                    e6:7e:2d:ff:75:5f:77:ad:88:53:63:51:fa:c0:c0:
                    e3:24:9e:c3:c7:1b:ac:65:16:af:4c:04:04:b8:9c:
                    2a:72:7a:dd:f0:16:76:35:59:ba:1d:a5:db:03:75:
                    73:f6:db:a9:8b:99:b6:8a:f3:28:d9:c6:5c:9a:c2:
                    90:34:30:ba:da:3f:ff:b2:a9:c0:24:a3:cc:c9:f8:
                    7e:b8:02:9c:21:de:1b:96:b1:57:24:d6:9b:cd:5c:
                    7a:18:ce:f7:89:79:c9:3d:61:f9:9b:63:55:d0:57:
                    70:83:bb:02:8e:a4:06:35:96:47:7b:cf:e2:f6:1e:
                    fb:90:93:e4:d2:f8:63:ea:46:15:7a:9a:0f:a3:9e:
                    83:17:97:4a:7e:64:fa:0a:ce:17:f4:e9:78:5d:5f:
                    9e:c0:47:61:e2:91:21:3a:cc:75:3f:61:c6:aa:3e:
                    42:13:4f:a5:58:c6:f4:2d:cd:53:c4:2e:02:dc:01:
                    a8:b8:e3:b6:22:81:22:af:53:59:05:0d:34:5f:76:
                    db:08:57:29:72:de:73:b1:86:40:e9:d2:98:44:24:
                    a1:d3:c5:94:a5:de:11:ec:5c:7e:45:30:99:8d:07:
                    f8:9b:4a:d5:12:73:35:d3:0c:bb:c0:43:4f:41:f9:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:DE:BB:93:3F:F5:67:4A:CA:FA:01:78:FA:02:F2:33:46:55:64
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137352e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:7f:a6:2d:67:fc:08:bf:63:62:86:dd:c1:7a:d9:7a:6a:
         06:b0:13:7e:d5:10:81:0b:e6:f2:99:32:dc:3c:9f:aa:99:4e:
         56:c8:93:dd:81:1c:a4:9d:24:88:b4:43:a3:21:12:d0:8e:5a:
         85:fe:c0:8b:24:1e:4c:82:ad:37:b6:1e:30:b8:f1:48:2f:58:
         13:0a:01:9d:ca:55:3a:35:11:86:33:4f:01:55:1b:8f:96:d9:
         4b:d0:e3:f4:a1:10:a7:7a:54:dd:c0:05:49:23:b6:d0:4c:58:
         b8:27:f0:c1:54:37:c7:f7:8b:5c:8e:9e:9d:98:81:65:72:73:
         d8:72:4e:07:df:38:99:f6:39:c7:ba:a6:ea:aa:30:3e:26:4a:
         58:9a:12:5a:ae:34:92:c7:d7:16:64:10:d9:42:66:a6:70:c7:
         80:f4:e2:05:5e:49:e6:b9:31:db:39:2f:12:25:c0:82:cf:9a:
         76:17:2c:b7:40:3d:ff:de:47:39:78:df:09:37:24:a3:fc:0a:
         4f:fa:fc:b9:b0:18:81:bb:c3:ff:e9:54:03:a6:42:ee:ab:7c:
         ad:8e:f7:7f:d7:06:ce:fd:66:d9:35:c1:08:e7:75:c9:0f:e4:
         1e:7d:23:01:e1:28:37:b0:92:26:3f:d6:a5:81:ce:65:85:db:
         cd:31:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:06:50 2025 by rpki-client