Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37362e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          ji5clVhbg7v3UJRqOt9bj3bY160er5Fwc2iW6IQNYoM=
Subject key identifier:   27:41:F3:04:2E:C7:C9:DB:98:D6:5B:4C:B6:1A:22:95:A8:ED:D6:F2
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       435E06C4ADE2B5B9A41586EE99515783B68209A3
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:20 +0000
ROA not before:           Tue 04 Feb 2025 18:11:20 +0000
ROA not after:            Tue 03 Feb 2026 18:16:20 +0000
asID:                     52328
IP address blocks:        190.211.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5e:06:c4:ad:e2:b5:b9:a4:15:86:ee:99:51:57:83:b6:82:09:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:20 2025 GMT
            Not After : Feb  3 18:16:20 2026 GMT
        Subject: CN=2741F3042EC7C9DB98D65B4CB61A2295A8EDD6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:ff:56:0c:21:9f:d3:4b:a0:80:32:86:b7:
                    54:f2:06:c2:b9:18:7c:34:4f:f0:a5:33:4b:fc:e1:
                    a4:e1:9d:12:31:64:53:2e:ea:c9:25:35:df:31:28:
                    8c:8d:cb:a7:89:9b:6a:99:04:7e:ba:e4:ed:ff:4a:
                    d9:7d:f1:8b:a9:71:5c:56:4c:4c:84:a0:70:71:df:
                    f8:d9:92:f4:9c:3a:f4:ce:46:20:d6:bd:df:1a:9c:
                    1b:9f:b9:d1:08:f1:e6:0f:84:76:54:56:30:7c:2f:
                    a5:14:da:a4:ad:2e:ac:fb:c1:93:50:48:4a:df:25:
                    0a:b9:62:23:a6:b6:c1:2c:9d:f6:a3:57:ba:99:c4:
                    0b:db:e8:1f:01:dd:81:83:67:0f:a4:97:13:ca:56:
                    74:5f:a7:79:53:e7:bb:f3:03:5e:a6:89:82:ba:d2:
                    01:13:14:85:80:16:78:24:9b:11:b2:e5:d3:ae:78:
                    7b:38:76:ef:b9:e5:aa:e1:84:5d:94:25:ed:a0:ed:
                    c9:63:41:84:c8:1c:f0:17:44:ed:fa:76:19:df:f6:
                    56:6b:c3:78:9c:ec:31:48:63:f7:40:b0:d2:15:16:
                    3e:59:d8:0c:da:4a:24:fa:35:06:cd:cc:b1:69:6b:
                    fc:8d:67:b6:cc:71:1d:4c:f8:54:03:66:5f:79:e7:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:41:F3:04:2E:C7:C9:DB:98:D6:5B:4C:B6:1A:22:95:A8:ED:D6:F2
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:c1:18:eb:2a:66:e0:46:05:0c:f4:d0:09:5a:53:98:ed:
         9b:42:a4:c3:7a:41:b0:58:72:b0:03:e1:8d:74:b2:ca:50:f5:
         29:5f:9c:c0:82:53:e6:76:5a:b5:4c:e1:fe:ff:8d:02:b3:0b:
         b5:75:47:27:be:07:67:cb:62:7b:49:ba:69:e6:65:92:c2:57:
         31:c4:59:9b:85:75:a3:05:21:60:60:32:eb:6d:c4:96:d9:2e:
         4b:f2:1a:8d:6f:6c:57:6d:28:40:e0:90:51:83:c9:a3:61:b4:
         76:39:1f:4a:ce:14:20:48:c8:3f:73:e8:54:db:05:54:1e:f1:
         ff:c8:f4:d1:bd:3d:83:48:5f:56:78:2b:40:f9:6f:e4:9f:16:
         0a:70:f9:06:fe:de:49:6c:ac:38:00:13:a3:59:48:93:6c:70:
         13:d9:0a:d5:04:03:01:7a:f8:55:99:c1:6e:6d:00:d3:94:f4:
         6c:28:56:20:36:df:cf:28:ae:4b:2e:3b:e0:84:ce:0d:5f:0e:
         5d:3e:30:57:d6:36:e7:2a:86:3b:16:fb:c0:ab:91:ec:e0:81:
         87:01:99:8f:39:14:eb:b3:0f:1e:fb:76:8e:1c:2f:66:bf:85:
         d3:6d:2e:2f:d0:cd:df:bd:40:40:d0:69:08:73:39:9b:e6:46:
         57:76:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:42 2025 by rpki-client