Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f32332d3234203d3e203532323432.roa
File:                     3139302e3138312e3132382e302f32332d3234203d3e203532323432.roa (raw, json)
Hash identifier:          GJcDGRI7PsRKtvk3QWYYrk9TTjyvoSYnNQU1tGg7bYY=
Subject key identifier:   9E:29:BC:E9:C9:6D:0F:88:E3:7B:FB:0D:92:A6:E0:12:67:4C:B7:29
Certificate issuer:       /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial:       561500C030FDCF85CC308113C204EB9237EDAF09
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f32332d3234203d3e203532323432.roa
Signing time:             Tue 04 Feb 2025 18:02:09 +0000
ROA not before:           Tue 04 Feb 2025 17:57:09 +0000
ROA not after:            Tue 03 Feb 2026 18:02:09 +0000
asID:                     52242
IP address blocks:        190.181.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:15:00:c0:30:fd:cf:85:cc:30:81:13:c2:04:eb:92:37:ed:af:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
        Validity
            Not Before: Feb  4 17:57:09 2025 GMT
            Not After : Feb  3 18:02:09 2026 GMT
        Subject: CN=9E29BCE9C96D0F88E37BFB0D92A6E012674CB729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:6f:95:42:33:86:fa:dd:83:8b:de:15:45:
                    06:60:50:38:02:97:90:b1:e9:b2:15:be:e3:24:7c:
                    41:d4:3f:24:8a:25:2c:ba:7f:21:b7:3e:aa:c2:d9:
                    ad:b6:b7:be:72:5a:ad:f3:02:7f:b8:f9:e8:84:36:
                    d5:20:36:d5:63:56:b6:94:9b:e4:3d:80:f8:f8:11:
                    1b:68:89:16:1f:f0:89:a2:54:d0:81:49:79:6d:08:
                    e9:a5:f7:b6:89:9f:ea:b5:1c:f8:c2:03:2d:e3:39:
                    bb:5f:03:36:36:42:f5:f2:be:a5:df:ae:b6:e9:3f:
                    dd:18:6f:e7:60:d3:92:1f:ce:c4:ae:12:dd:f6:73:
                    be:6b:b9:ce:12:10:92:60:71:c3:5a:9d:6f:76:3e:
                    c7:74:8a:5e:e2:01:6e:4c:76:7b:92:84:da:45:af:
                    ac:97:e0:29:7a:1c:ca:5f:1b:5d:17:44:73:08:74:
                    fb:1e:9b:4d:e6:51:d2:12:28:b6:55:e5:29:8c:f9:
                    97:0b:b6:09:70:5d:7f:54:a8:f9:04:da:5a:35:2a:
                    4d:94:36:0c:84:ba:24:15:f9:b0:3d:f1:e9:06:28:
                    07:43:44:e6:7d:4e:09:9f:52:4f:e2:15:ff:cd:fc:
                    de:9e:c2:fe:63:50:88:a7:67:79:97:01:db:22:c7:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:BC:E9:C9:6D:0F:88:E3:7B:FB:0D:92:A6:E0:12:67:4C:B7:29
            X509v3 Authority Key Identifier:
                keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f32332d3234203d3e203532323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:44:8c:da:72:ce:b6:eb:81:33:0e:5e:10:b0:34:91:4e:4f:
         19:0a:d6:27:e6:41:88:a9:9b:1b:67:b9:71:b5:9e:71:64:06:
         e3:f3:78:68:c8:e3:19:d8:3a:f1:3c:f5:a5:a2:70:56:87:1b:
         35:21:91:55:55:f4:00:d2:ac:c4:90:0b:4a:90:ce:85:13:39:
         ec:29:9a:c3:be:db:41:f0:13:bd:82:4c:1f:8f:05:aa:97:a7:
         3f:d2:65:4e:cc:91:3e:d2:20:e6:5e:05:12:a6:0f:a8:e1:94:
         51:c7:62:24:54:77:52:6c:b0:51:9d:47:c7:ca:b1:8b:15:3e:
         0d:3f:e8:a6:6a:ad:36:c4:b5:9c:e5:a9:74:4d:c7:35:a6:0f:
         c3:09:fe:7b:92:c5:e0:a2:ae:c3:9b:e4:91:ed:21:d8:92:b5:
         75:24:0d:73:4a:71:34:84:be:e5:97:b1:c3:43:bf:2e:2d:5c:
         f8:bc:75:a7:99:ac:18:38:68:aa:48:a0:77:b9:91:f9:96:5f:
         49:4d:2b:c7:7f:a8:b6:a9:a2:6f:a3:7b:73:1d:8c:63:b5:ea:
         b3:2b:b4:2b:c5:fe:8b:4b:df:b8:2d:e3:83:7b:98:e5:b1:bc:
         c7:3e:82:75:97:3a:c5:09:dd:72:78:a8:63:15:ff:41:44:4d:
         01:50:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:58:32 2025 by rpki-client