Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37382e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          TIEH9s3htWXn/DHLBKDcA0C5+OzG8rqymRe1gTbKPM8=
Subject key identifier:   D4:BA:3B:0B:97:A1:9C:60:DD:8F:E5:14:BB:F7:EF:93:3B:A4:D3:C0
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       5623E36B9AC467B81FDE1752CDEBB11FC1B0A056
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:20 +0000
ROA not before:           Tue 04 Feb 2025 18:11:20 +0000
ROA not after:            Tue 03 Feb 2026 18:16:20 +0000
asID:                     52328
IP address blocks:        190.211.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:23:e3:6b:9a:c4:67:b8:1f:de:17:52:cd:eb:b1:1f:c1:b0:a0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:20 2025 GMT
            Not After : Feb  3 18:16:20 2026 GMT
        Subject: CN=D4BA3B0B97A19C60DD8FE514BBF7EF933BA4D3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:eb:68:23:d8:c6:f7:24:04:b8:88:af:c1:
                    4f:9d:b7:91:1a:f3:93:ee:6a:e4:0f:0f:2a:90:e8:
                    23:b1:3d:87:8e:35:67:e6:73:cb:3c:92:7c:d7:b2:
                    a5:54:c3:10:a0:c1:93:2e:58:d2:e1:99:41:be:85:
                    19:7b:9e:27:93:79:83:7b:86:de:40:21:8c:68:3e:
                    9f:bb:ed:b9:81:fc:4f:f2:26:2e:1e:8d:b0:22:db:
                    25:27:4e:cd:12:33:5b:bb:2a:34:a1:9d:e4:42:7e:
                    f7:ae:ee:8e:05:f8:f7:65:b1:85:1c:9c:2d:05:b2:
                    f5:19:21:d3:94:8d:2d:78:42:12:02:49:75:0c:a2:
                    38:2c:9b:91:19:0e:49:89:3e:5a:c8:0d:2c:e5:d8:
                    c8:d1:e0:e1:59:76:08:82:93:74:ee:77:8b:76:df:
                    5a:bd:b4:52:e2:3d:74:89:06:61:d5:37:7e:de:d8:
                    04:39:50:95:55:86:a9:69:2e:63:63:d5:97:16:e8:
                    65:eb:d5:05:78:3d:a1:eb:c1:ff:b6:02:9e:14:5d:
                    46:81:86:52:ed:43:7b:89:e7:4a:cb:34:20:e4:16:
                    b9:26:20:d6:48:4b:82:45:8a:6b:10:a7:dc:6b:83:
                    f0:46:c2:ec:53:29:01:52:6d:a3:17:86:33:19:44:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:3B:0B:97:A1:9C:60:DD:8F:E5:14:BB:F7:EF:93:3B:A4:D3:C0
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:5f:f6:63:cb:4c:9c:3e:44:52:12:f4:5a:80:d8:ab:a4:
         8f:e4:d3:d3:11:5b:3d:2d:25:ff:9d:0c:81:9c:c6:1f:2e:17:
         36:06:e6:a5:45:61:0d:3c:98:30:da:32:81:56:26:16:ca:d6:
         ef:7c:6a:cd:02:3b:be:5a:6a:63:f2:00:ed:43:fd:b4:c9:4a:
         de:ef:46:8a:00:10:9d:4f:c6:b3:d5:00:20:76:fb:2e:a1:4d:
         5c:c4:28:f1:28:d3:b1:58:ff:87:fa:37:b7:9e:db:7d:00:18:
         77:d9:ba:76:9c:17:03:cb:05:9d:7d:e3:ce:70:90:36:db:42:
         ef:b0:9d:21:ac:a0:25:3b:11:8d:75:e9:4e:32:f9:41:e6:60:
         e1:7c:54:0d:ff:91:41:db:9d:2b:c0:08:d9:00:07:2f:cb:39:
         50:a6:a0:fb:b4:b3:7d:54:a2:0a:22:a2:ef:af:81:b6:a1:ac:
         a2:4e:0e:5a:96:d3:e6:99:41:09:38:24:23:00:c9:a8:d8:4e:
         cb:78:a7:63:46:7a:fe:aa:71:61:c3:71:3c:3e:64:a4:64:48:
         50:96:a0:a6:63:6f:28:9d:f7:59:39:43:72:5e:ad:eb:97:83:
         f2:2b:d3:05:33:f5:46:fc:c5:e2:1f:3a:ce:d7:d5:d2:9f:23:
         87:fc:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:44 2025 by rpki-client