Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36352e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e36352e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          uDN/7g7ZMowJyoh2+R5ZQL8cq/kDCSojpgWnDGocfrw=
Subject key identifier:   0D:B0:18:3A:B1:08:39:1E:AE:F8:F5:C0:23:02:95:02:0D:5D:83:2C
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       3EA72F37BE0CC47A467C7AE73C3B5D963508E284
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36352e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:21 +0000
ROA not before:           Tue 04 Feb 2025 18:11:21 +0000
ROA not after:            Tue 03 Feb 2026 18:16:21 +0000
asID:                     52328
IP address blocks:        190.211.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a7:2f:37:be:0c:c4:7a:46:7c:7a:e7:3c:3b:5d:96:35:08:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:21 2025 GMT
            Not After : Feb  3 18:16:21 2026 GMT
        Subject: CN=0DB0183AB108391EAEF8F5C0230295020D5D832C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:a4:bc:61:67:5b:13:be:80:7b:70:2d:92:
                    b2:3b:fc:01:6e:ec:9d:fd:78:b4:f3:8f:7c:d0:68:
                    20:33:5f:72:95:59:63:46:7d:e2:7a:36:e9:8b:a8:
                    ab:1d:a9:6b:e2:b6:c8:a2:71:d0:43:23:7b:cf:c3:
                    de:96:8e:59:ff:97:dc:05:8d:b9:f3:37:04:60:ae:
                    98:04:85:cf:0b:90:08:b5:70:3f:9b:be:95:d1:dd:
                    43:57:dd:07:a9:dd:66:91:09:d0:f1:f4:2c:63:bb:
                    a1:9e:bd:22:7d:97:bf:aa:cb:f1:43:ee:f7:c6:7c:
                    46:01:90:68:ce:52:fe:b0:8f:1a:60:1e:58:8d:f2:
                    61:22:71:33:58:5b:6c:b5:ca:04:49:06:1d:e0:af:
                    37:c0:27:86:b6:40:2d:e5:22:ee:2d:86:6b:08:a6:
                    9c:c6:a6:5a:0c:1c:51:63:47:30:b4:64:fd:1f:4a:
                    de:8d:dc:f0:7d:0b:8d:fa:fd:79:22:e6:32:52:63:
                    59:db:64:be:53:1a:63:ff:9e:40:1e:99:90:ad:2e:
                    97:90:cc:72:c8:5d:84:e1:ee:3c:68:47:2e:48:e3:
                    9e:4a:66:42:cc:9c:4f:29:ce:76:2d:97:0b:ed:db:
                    44:2e:08:e2:ad:5f:e8:b2:81:1f:38:22:89:d3:61:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:18:3A:B1:08:39:1E:AE:F8:F5:C0:23:02:95:02:0D:5D:83:2C
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36352e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:77:e0:e8:cb:fe:56:ba:5a:27:41:6b:3f:a9:f6:3b:24:
         95:c2:c8:06:76:55:a7:2a:15:b6:76:93:a5:7f:28:5e:8e:3a:
         19:aa:1d:17:8f:3b:79:28:d4:83:79:03:ea:0e:93:fe:ea:16:
         fe:06:34:d4:03:ec:81:83:00:fd:b0:5c:15:28:e4:eb:0a:75:
         23:45:2e:eb:bf:7a:89:3e:4d:69:45:3e:97:fe:69:a9:1a:6c:
         21:96:aa:5e:da:2b:ca:03:01:3e:91:bd:99:3c:33:7b:89:e1:
         d4:d0:51:ee:cc:e2:d6:04:bd:11:c2:e4:e3:91:1e:57:df:0d:
         49:b1:80:13:36:0a:19:9b:c5:1d:6e:7a:4e:e5:d0:36:40:08:
         dd:38:26:d7:41:07:f7:0a:58:8c:10:21:39:79:9b:1b:23:8d:
         b3:8e:f9:18:36:af:f2:c5:98:44:87:62:19:5b:46:13:1d:47:
         34:17:9f:a6:82:e2:c1:10:a0:b1:74:35:99:0b:21:35:d3:53:
         e7:02:f3:0e:82:65:2a:e9:c9:4c:5c:b6:b9:c8:2b:4a:40:e2:
         cb:9f:ad:ef:d2:3d:bc:8f:1f:16:07:64:a1:72:af:5a:17:24:
         37:21:9c:0a:40:99:9d:34:6a:79:52:8e:14:2d:dc:03:52:f2:
         43:88:68:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPqcvN74MxHpGfHrnPDtdljUI4oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNTAyMDQxODExMjFaFw0yNjAyMDMxODE2MjFaMDMxMTAvBgNV
BAMTKDBEQjAxODNBQjEwODM5MUVBRUY4RjVDMDIzMDI5NTAyMEQ1RDgzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCto6S8YWdbE76Ae3AtkrI7/AFu
7J39eLTzj3zQaCAzX3KVWWNGfeJ6NumLqKsdqWvitsiicdBDI3vPw96Wjln/l9wF
jbnzNwRgrpgEhc8LkAi1cD+bvpXR3UNX3Qep3WaRCdDx9Cxju6GevSJ9l7+qy/FD
7vfGfEYBkGjOUv6wjxpgHliN8mEicTNYW2y1ygRJBh3grzfAJ4a2QC3lIu4thmsI
ppzGploMHFFjRzC0ZP0fSt6N3PB9C436/Xki5jJSY1nbZL5TGmP/nkAemZCtLpeQ
zHLIXYTh7jxoRy5I455KZkLMnE8pznYtlwvt20QuCOKtX+iygR84IonTYVQtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDbAYOrEIOR6u+PXAIwKVAg1dgywwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7TQTAN
BgkqhkiG9w0BAQsFAAOCAQEAfrV34OjL/la6WidBaz+p9jsklcLIBnZVpyoVtnaT
pX8oXo46GaodF487eSjUg3kD6g6T/uoW/gY01APsgYMA/bBcFSjk6wp1I0Uu6796
iT5NaUU+l/5pqRpsIZaqXtorygMBPpG9mTwze4nh1NBR7szi1gS9EcLk45EeV98N
SbGAEzYKGZvFHW56TuXQNkAI3Tgm10EH9wpYjBAhOXmbGyONs475GDav8sWYRIdi
GVtGEx1HNBefpoLiwRCgsXQ1mQshNdNT5wLzDoJlKunJTFy2ucgrSkDiy5+t79I9
vI8fFgdkoXKvWhckNyGcCkCZnTRqeVKOFC3cA1LyQ4hobw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:22 2025 by rpki-client