Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          xLCMtq4ttdLTWGaV2ui90k3ddxSkoBe8qHF+eNnoF8Y=
Subject key identifier:   10:B1:4B:69:2D:58:FF:06:E9:40:49:3A:F8:9F:BE:CD:5B:C2:8B:0C
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       0403BA6E0F679742EB39B0C1E6A663C1DE7F627E
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:19 +0000
ROA not before:           Tue 04 Feb 2025 18:11:19 +0000
ROA not after:            Tue 03 Feb 2026 18:16:19 +0000
asID:                     52328
IP address blocks:        190.211.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:03:ba:6e:0f:67:97:42:eb:39:b0:c1:e6:a6:63:c1:de:7f:62:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:19 2025 GMT
            Not After : Feb  3 18:16:19 2026 GMT
        Subject: CN=10B14B692D58FF06E940493AF89FBECD5BC28B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:da:e1:3d:52:9c:15:5c:8d:70:1b:a8:77:
                    a7:68:44:8c:49:18:6b:e3:ae:ae:2f:b1:ad:28:20:
                    48:43:8a:d7:82:70:92:23:14:95:a0:2b:4b:41:01:
                    e4:85:c2:ed:28:08:14:3f:5d:0d:a6:4e:08:64:61:
                    c7:f5:de:52:c1:72:f9:74:b6:37:37:93:a0:74:7d:
                    3b:30:07:31:b4:4a:9c:ba:b8:64:e8:e9:11:12:9c:
                    30:bf:1b:9c:72:37:9d:6d:87:97:87:f9:ac:62:19:
                    22:9b:5c:77:b2:f3:88:c5:04:f1:53:de:9c:e4:20:
                    e6:fa:70:07:ea:84:4f:e7:92:35:ce:75:e6:45:71:
                    8b:60:00:d3:e6:b7:af:f5:3f:fb:2e:a9:80:0e:67:
                    01:5f:ca:aa:02:9a:59:5c:68:b0:38:ea:0e:dd:b2:
                    e7:96:f3:ff:f3:3a:a3:b9:75:f6:b7:8d:e7:43:66:
                    2e:ef:ed:6f:f1:4a:00:12:c7:98:f8:1e:97:95:4b:
                    02:e8:16:23:5b:be:a2:81:92:4c:e6:fd:c0:c1:20:
                    ce:6f:98:ed:df:3c:30:37:b0:d4:6b:ea:ff:b7:c0:
                    6f:80:ad:7d:5d:e7:1f:4c:f0:57:d9:aa:c9:a2:e3:
                    e9:ad:a8:f3:a3:ac:39:46:df:33:63:72:e8:63:07:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B1:4B:69:2D:58:FF:06:E9:40:49:3A:F8:9F:BE:CD:5B:C2:8B:0C
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:a2:47:2e:94:49:fd:be:1a:ef:22:d6:15:6d:0e:a6:91:
         d7:3c:26:5e:c0:1b:b8:65:e1:ad:cd:d5:60:6d:2e:f8:67:a4:
         71:0d:19:b2:1c:a6:34:18:1e:27:d1:ef:14:c7:39:f0:9e:c7:
         81:ce:2b:bd:ca:f2:d0:80:18:05:35:ab:56:52:d8:b5:15:27:
         7f:b7:35:5e:1a:ae:86:e0:7d:ce:d7:dd:1c:1f:3e:fc:a2:f4:
         37:77:3b:f6:1a:45:6a:9f:a0:16:bb:06:89:62:9b:4b:a1:de:
         fd:81:96:9d:bb:37:b7:5a:83:25:a4:b6:9b:4f:ed:f4:ac:5d:
         62:f9:aa:4a:13:9b:f9:10:f0:4e:eb:ee:87:9b:28:e0:7a:6b:
         f2:50:c9:bc:27:da:b5:03:23:9b:e2:6f:05:ca:bf:b8:1c:25:
         31:aa:ef:84:08:c1:8c:c6:bf:3c:c2:54:9e:63:19:39:2c:1a:
         0b:b2:74:2f:93:96:ec:4a:13:fd:36:d0:7e:70:fb:74:60:e0:
         08:1f:79:f3:ea:36:01:7a:9d:5d:9b:85:04:0d:a0:36:23:a9:
         be:21:d4:d5:53:b3:9b:0d:7c:cc:70:02:6d:3a:1b:1d:8e:bc:
         8b:76:07:68:e9:e3:73:dc:b7:9f:c8:4f:01:a4:2b:49:3f:3e:
         03:54:c5:40
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBAO6bg9nl0LrObDB5qZjwd5/Yn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNTAyMDQxODExMTlaFw0yNjAyMDMxODE2MTlaMDMxMTAvBgNV
BAMTKDEwQjE0QjY5MkQ1OEZGMDZFOTQwNDkzQUY4OUZCRUNENUJDMjhCMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnX9rhPVKcFVyNcBuod6doRIxJ
GGvjrq4vsa0oIEhDiteCcJIjFJWgK0tBAeSFwu0oCBQ/XQ2mTghkYcf13lLBcvl0
tjc3k6B0fTswBzG0Spy6uGTo6RESnDC/G5xyN51th5eH+axiGSKbXHey84jFBPFT
3pzkIOb6cAfqhE/nkjXOdeZFcYtgANPmt6/1P/suqYAOZwFfyqoCmllcaLA46g7d
sueW8//zOqO5dfa3jedDZi7v7W/xSgASx5j4HpeVSwLoFiNbvqKBkkzm/cDBIM5v
mO3fPDA3sNRr6v+3wG+ArX1d5x9M8FfZqsmi4+mtqPOjrDlG3zNjcuhjB1XBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUELFLaS1Y/wbpQEk6+J++zVvCiwwwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7TTDAN
BgkqhkiG9w0BAQsFAAOCAQEAJ9KiRy6USf2+Gu8i1hVtDqaR1zwmXsAbuGXhrc3V
YG0u+GekcQ0ZshymNBgeJ9HvFMc58J7Hgc4rvcry0IAYBTWrVlLYtRUnf7c1Xhqu
huB9ztfdHB8+/KL0N3c79hpFap+gFrsGiWKbS6He/YGWnbs3t1qDJaS2m0/t9Kxd
YvmqShOb+RDwTuvuh5so4Hpr8lDJvCfatQMjm+JvBcq/uBwlMarvhAjBjMa/PMJU
nmMZOSwaC7J0L5OW7EoT/TbQfnD7dGDgCB958+o2AXqdXZuFBA2gNiOpviHU1VOz
mw18zHACbTobHY68i3YHaOnjc9y3n8hPAaQrST8+A1TFQA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:52 2025 by rpki-client