Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36372e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e36372e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          lASdDzyVZVtNN29GU1dFKTyvUKxU+GQkNDGi69WSKKY=
Subject key identifier:   C1:86:C2:47:1B:AD:9B:38:55:88:5E:D1:28:7F:C0:B9:4B:09:69:FF
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       2F51F7D1FCF506D701D0F45F465A7C088E73576E
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36372e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:27 +0000
ROA not before:           Tue 04 Feb 2025 18:11:27 +0000
ROA not after:            Tue 03 Feb 2026 18:16:27 +0000
asID:                     52328
IP address blocks:        190.211.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:51:f7:d1:fc:f5:06:d7:01:d0:f4:5f:46:5a:7c:08:8e:73:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:27 2025 GMT
            Not After : Feb  3 18:16:27 2026 GMT
        Subject: CN=C186C2471BAD9B3855885ED1287FC0B94B0969FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:ea:1a:de:36:ad:ed:9f:8a:57:db:ac:29:
                    52:51:31:e2:22:ba:40:84:eb:dd:9f:8f:a1:37:70:
                    7c:1d:49:62:51:13:dd:88:6f:07:ec:48:ce:4b:76:
                    05:ad:4f:00:b6:4f:1d:93:29:3a:ba:f9:c6:ed:ff:
                    68:f4:60:ec:7c:c8:49:b2:3e:9d:38:03:04:fd:5f:
                    94:48:28:f5:22:1c:99:9a:04:68:76:03:5a:3e:e5:
                    73:74:0a:11:5a:ce:e8:49:38:5d:5e:8b:01:4c:cc:
                    43:2f:7a:00:fd:93:11:5a:87:79:d9:c4:5f:aa:82:
                    c9:83:23:0b:a7:2d:a0:17:8b:9a:b2:18:fb:26:19:
                    b8:a4:d0:82:25:8b:b0:87:5b:80:74:47:8b:3f:56:
                    e4:51:20:e4:43:a8:71:ac:29:36:c1:90:05:42:0f:
                    a1:e8:da:4d:56:fd:f0:74:33:80:62:df:65:82:5e:
                    68:84:80:cb:23:c1:e1:5b:08:05:65:42:d4:f2:81:
                    fa:3d:b8:62:d2:fc:1b:52:02:9a:41:b1:fe:94:ba:
                    ce:27:e8:e8:83:9f:ab:36:1d:06:02:b0:16:f6:a3:
                    31:1d:a5:9e:61:43:88:34:cd:69:e2:62:80:48:ef:
                    ba:2b:dd:28:62:22:a2:97:61:03:0f:21:9b:b1:b7:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:86:C2:47:1B:AD:9B:38:55:88:5E:D1:28:7F:C0:B9:4B:09:69:FF
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36372e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:b3:2c:ff:9d:f3:50:c9:7f:f5:37:9c:a8:93:b4:50:7e:
         50:3c:25:27:f7:e8:45:3e:03:46:ec:54:d8:47:e0:67:86:27:
         1e:18:4a:8d:21:5a:ed:bf:62:80:6b:59:47:f6:e6:71:72:c5:
         e3:1a:f3:f8:61:88:cd:71:d6:c6:d8:ae:c4:8c:03:5a:0d:ff:
         1a:e4:a4:5a:dc:da:87:8f:84:a2:29:aa:11:48:54:a1:1b:f0:
         ef:c2:1f:28:a1:06:58:6b:7e:16:ba:9e:26:f6:54:0d:ff:0b:
         7e:4c:41:43:3a:0c:2d:92:08:e1:e1:ef:32:f5:23:96:db:de:
         18:8e:d4:80:e0:0b:fc:bb:c2:0b:98:0a:d8:b3:ba:1a:df:f9:
         df:b4:08:db:ec:1f:aa:59:22:d6:78:8f:7f:ea:02:88:bc:35:
         a2:12:14:98:61:53:76:d2:ac:66:03:34:63:ee:25:0f:67:3b:
         72:7f:24:72:11:b8:13:60:31:0d:25:17:1b:1b:eb:d0:08:63:
         f5:13:01:ac:99:a9:82:1c:36:a6:b9:ff:be:8e:c7:a2:2d:de:
         15:6e:8c:67:25:3a:ad:c9:db:7f:8e:a6:8d:04:a3:90:1c:92:
         c1:10:f9:1a:c9:ce:1f:07:be:3b:6b:6d:ca:1c:04:28:31:9f:
         61:12:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:48 2025 by rpki-client