Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa
File:                     3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          88xkhWLxdl3/2IOWgdtfFl6VMFVQGjpdnQw8T/Ebrx4=
Subject key identifier:   D5:5C:8C:D0:E7:CB:DC:7A:3F:CE:81:D5:D7:CC:A6:D3:35:BE:E9:CD
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       79E48C37A3B43F9E2727D8B0926F5DF5F3AA9975
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 04 Feb 2025 18:00:49 +0000
ROA not before:           Tue 04 Feb 2025 17:55:49 +0000
ROA not after:            Tue 03 Feb 2026 18:00:49 +0000
asID:                     22411
IP address blocks:        190.107.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e4:8c:37:a3:b4:3f:9e:27:27:d8:b0:92:6f:5d:f5:f3:aa:99:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Feb  4 17:55:49 2025 GMT
            Not After : Feb  3 18:00:49 2026 GMT
        Subject: CN=D55C8CD0E7CBDC7A3FCE81D5D7CCA6D335BEE9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:8d:9e:8d:cf:1b:bc:ed:99:20:a6:29:94:
                    05:9f:7b:eb:b1:32:3b:4c:d6:26:79:b4:c8:73:e2:
                    c2:c0:db:0b:2c:28:88:92:c2:ce:06:fc:07:7c:a1:
                    4b:82:b0:06:30:cd:b3:52:44:21:0a:c7:f3:06:a3:
                    95:20:b2:86:19:4c:f5:53:51:e4:77:ec:50:88:b4:
                    5d:af:6d:31:a7:c1:7b:82:e1:f0:18:c1:dd:8e:f3:
                    fc:7b:03:54:e3:c3:3f:03:d9:65:60:b0:c3:2f:72:
                    ee:99:13:72:c5:c3:a5:7c:03:12:c0:88:21:85:8f:
                    ba:35:82:d7:93:49:95:a1:e0:3a:49:6f:27:ad:76:
                    dc:89:42:b7:3b:95:1c:fa:d8:50:32:e5:62:d0:b8:
                    a8:46:4d:56:f7:ab:fd:43:01:4c:a2:f7:aa:23:e3:
                    e6:1f:4d:df:51:7a:16:88:c6:63:e8:4d:78:98:cd:
                    dc:fd:58:47:03:ea:0f:bd:be:7e:60:79:b7:3f:03:
                    f1:bf:0f:fa:8c:d4:de:cc:87:53:33:01:b4:6b:60:
                    7c:e3:f3:8f:41:05:1a:30:ba:11:b9:e2:ed:c1:c8:
                    2f:ed:8f:87:25:93:4f:5e:58:97:9f:7f:c7:e9:d9:
                    0b:c4:7a:07:2a:9f:d0:38:e2:56:7f:01:0d:a0:58:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5C:8C:D0:E7:CB:DC:7A:3F:CE:81:D5:D7:CC:A6:D3:35:BE:E9:CD
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:84:47:b4:43:ca:cb:4a:8d:80:93:ba:bb:d5:ef:89:a6:f4:
         72:cf:c3:25:d7:52:53:90:2b:77:04:24:3c:fb:3c:ff:9e:a2:
         0a:45:62:1e:88:13:12:8b:7b:1e:dd:7c:9c:fe:32:d1:1e:35:
         b2:97:61:e3:38:9f:a3:d7:93:8f:68:59:92:cd:0e:d1:94:3d:
         d3:58:21:7a:65:fb:67:0a:91:43:ab:cb:d5:e3:2e:ea:cb:5b:
         c6:94:80:12:bf:40:1e:b5:69:21:89:28:6c:2a:01:5d:3b:6f:
         9b:6a:76:b6:db:da:36:b5:95:3a:bb:62:1b:56:68:9b:d9:2e:
         39:3e:2b:8a:69:48:4d:0e:20:28:38:bf:41:93:8a:6e:bb:f0:
         91:21:7b:08:c3:f2:15:bc:6f:8f:22:6e:dc:83:48:2a:5f:88:
         ee:f5:42:c9:84:19:26:5a:9a:1d:48:f6:f4:4e:19:6f:68:48:
         2a:c2:21:42:a9:1e:23:ab:1a:bc:f6:1a:3e:af:3e:77:4b:5d:
         cf:39:d2:93:7d:71:ae:55:74:a8:fa:4d:c9:37:6e:f4:67:51:
         f0:32:bb:6d:cd:84:ee:fd:7d:aa:93:84:5d:2c:b9:ed:73:b2:
         2c:07:85:b2:93:76:0c:2b:83:83:b2:c0:7e:9a:29:1b:33:23:
         79:37:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:49:12 2025 by rpki-client