Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37322e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          G0MkKhIbMMM1hv+Vewz77U8LQ6M3ZtnKqUvO0yl1U/Q=
Subject key identifier:   48:6F:21:6C:7A:D2:7C:3E:77:91:E4:A6:90:62:67:23:93:50:DC:A6
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       074E6E3EF636D2ED961CCE9BFDD01BD4342F9F02
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:29 +0000
ROA not before:           Tue 04 Feb 2025 18:11:29 +0000
ROA not after:            Tue 03 Feb 2026 18:16:29 +0000
asID:                     52328
IP address blocks:        190.211.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4e:6e:3e:f6:36:d2:ed:96:1c:ce:9b:fd:d0:1b:d4:34:2f:9f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:29 2025 GMT
            Not After : Feb  3 18:16:29 2026 GMT
        Subject: CN=486F216C7AD27C3E7791E4A6906267239350DCA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:07:ec:55:e8:0b:ef:f5:13:0f:4d:83:b0:
                    59:86:6f:c1:86:d8:40:01:ba:b6:ec:30:6f:1c:55:
                    3b:d0:83:cb:af:df:3d:56:10:6c:2e:da:d2:ba:d4:
                    46:19:3b:f2:90:5d:c0:ca:f2:4c:8c:5d:41:35:b5:
                    9e:8a:4f:55:fa:d7:18:10:07:78:8e:30:dd:9a:2e:
                    77:63:a8:27:2a:be:41:cc:e8:8d:6a:df:c4:8b:c4:
                    d5:58:da:08:50:f3:d9:bd:7f:ad:e3:c2:d0:1d:1d:
                    c7:c5:6b:f4:ee:2f:ce:2c:38:27:f1:67:5b:a4:f1:
                    3c:b9:93:14:44:c0:c8:d1:f7:e6:ce:63:d4:57:5d:
                    58:c2:c1:b6:bb:e0:de:6e:38:a7:09:d1:02:d9:e8:
                    dc:db:74:f7:70:5e:f9:a5:e2:2a:73:2a:1c:d7:24:
                    a9:68:ed:bc:24:eb:df:56:23:dc:e1:40:40:12:f7:
                    01:83:93:d1:6c:47:69:a6:22:de:2a:a6:22:c6:eb:
                    6a:ba:11:66:c4:78:84:5d:87:3c:61:09:b4:f3:2e:
                    fd:64:20:74:78:35:5f:98:b5:9c:c6:75:27:74:ce:
                    29:5e:26:65:c5:14:38:88:d0:da:cc:4b:a9:4d:b7:
                    39:3c:75:ea:f3:f1:cc:24:0b:40:68:bd:95:ec:c3:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6F:21:6C:7A:D2:7C:3E:77:91:E4:A6:90:62:67:23:93:50:DC:A6
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:48:2b:88:ac:0a:ee:ae:04:63:1d:7b:42:85:a5:34:3c:
         b7:9c:93:94:1b:f7:cd:9e:b3:35:62:8c:22:11:25:72:bc:7f:
         d5:49:bd:74:9a:d5:30:8c:05:79:35:18:a3:7e:56:c6:aa:89:
         cf:2d:63:e0:a5:77:d5:63:df:c9:fe:d4:05:c4:cd:e2:b5:2d:
         c7:05:6e:c2:66:d6:4f:8e:af:f3:39:0c:eb:4d:d6:24:6e:18:
         f0:d6:a7:39:9b:dd:83:17:3a:cb:59:dc:49:e5:be:23:de:de:
         fa:1b:85:bd:44:a4:d9:6c:1a:18:b9:a8:c5:35:1b:4c:df:9c:
         df:a5:80:88:97:6d:9e:89:b0:e2:7c:a1:90:f0:f7:3b:ed:54:
         64:14:fe:4d:1b:49:36:96:81:7e:16:ab:fc:9e:41:80:cb:58:
         14:34:0a:3f:a5:25:5c:3a:e1:dc:4d:bb:72:77:0a:02:1a:ac:
         d0:cf:5f:57:e4:de:ab:5c:5f:8a:03:92:63:6a:bd:7e:39:8f:
         5a:1c:6c:7e:48:39:fa:74:4c:ac:1d:14:48:9f:cf:e0:ec:49:
         c2:1f:df:64:f2:31:51:e1:a2:b0:bf:27:06:a2:a9:80:66:05:
         fb:2e:b4:b6:b4:e3:14:2f:40:e4:2b:24:f2:4f:6c:ae:30:b2:
         fd:f3:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:56 2025 by rpki-client