Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          1j4uRf3L/kKfymd1EmQhNp+CY6krJ1DsWMrSkSCmzqY=
Subject key identifier:   D7:B7:A6:B0:57:9B:3A:D3:A9:5E:CB:4C:F1:9E:E4:6E:99:AA:B7:73
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       6EE60117CFE1A82CAE66F6406D7E95D21950FC7A
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:26 +0000
ROA not before:           Tue 04 Feb 2025 18:32:26 +0000
ROA not after:            Tue 03 Feb 2026 18:37:26 +0000
asID:                     264688
IP address blocks:        190.107.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e6:01:17:cf:e1:a8:2c:ae:66:f6:40:6d:7e:95:d2:19:50:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:26 2025 GMT
            Not After : Feb  3 18:37:26 2026 GMT
        Subject: CN=D7B7A6B0579B3AD3A95ECB4CF19EE46E99AAB773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:13:a4:26:cf:23:cd:4e:75:02:0b:61:d8:
                    4a:8f:ee:04:5c:75:24:c3:74:5e:3d:a3:a8:10:f2:
                    e9:e5:7f:fb:73:5e:7a:9c:d1:88:63:be:ae:1d:90:
                    b5:e6:bc:37:88:1c:b1:3c:a6:10:0e:28:34:2d:9a:
                    af:6b:c9:23:4b:01:ad:7c:e1:0c:90:f5:e0:71:27:
                    06:2b:4a:46:10:1d:4c:b6:e5:62:16:7f:0b:ca:71:
                    e4:66:99:99:64:fd:7b:32:a9:38:b7:2c:02:a5:df:
                    92:d4:27:86:79:9e:62:6e:db:ba:5c:80:c1:84:3c:
                    77:37:01:b4:d7:57:84:88:4e:ec:01:ec:28:f3:ae:
                    57:45:8c:c9:21:0f:6c:21:c1:82:08:a4:d3:91:67:
                    bc:c1:fd:4f:31:ee:2d:47:62:3e:2b:52:72:16:e6:
                    39:64:04:9c:19:b9:cc:32:f0:07:98:34:37:24:3d:
                    20:e8:94:bf:9c:8c:8c:00:6a:b4:b1:35:89:c8:48:
                    11:83:e7:65:2c:9e:d1:ab:78:c3:08:8e:07:a6:69:
                    4b:14:5f:5a:10:7a:55:2b:a1:6f:0c:8c:83:0f:5d:
                    a9:60:05:ea:aa:8b:12:f6:e6:03:27:1b:18:01:43:
                    8a:63:f7:82:ec:3a:ca:18:ab:df:d7:da:2e:42:b9:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B7:A6:B0:57:9B:3A:D3:A9:5E:CB:4C:F1:9E:E4:6E:99:AA:B7:73
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:07:0b:52:f7:9f:d2:c1:a1:13:ef:19:c2:58:4f:9e:6a:f4:
         97:42:5e:e4:22:94:5f:f7:fd:69:a6:f7:cd:b6:cc:2f:c2:d4:
         c0:04:58:f8:cb:02:64:12:3f:86:63:37:4e:b2:89:8d:74:91:
         93:07:b0:4b:29:f6:24:c8:cc:9a:df:0d:f7:8e:84:89:94:c2:
         b8:83:b8:8e:7d:eb:56:da:c1:67:73:fe:17:58:be:8b:d9:5a:
         d6:11:6a:47:a5:2f:92:30:0f:63:cc:c9:f5:b5:2b:cc:eb:d7:
         d7:d1:08:17:5b:7f:70:15:c0:57:fe:c5:c4:c9:02:ec:12:a3:
         1f:0b:b4:95:0b:c3:5a:fa:24:6e:5f:50:43:0d:c1:d4:32:7d:
         5d:b8:2d:2c:b8:92:f5:32:a6:ad:36:d1:45:48:64:6c:6c:d2:
         74:ad:37:f1:be:34:4b:d2:52:28:8e:dc:a7:95:0c:b3:41:fc:
         4e:da:9b:83:3c:18:f2:01:73:5b:34:5c:26:b5:f4:b0:b9:ba:
         6b:d6:6c:4a:88:95:40:fb:ab:41:90:71:b9:88:ff:90:2b:bd:
         6e:54:42:fb:e5:36:ec:90:95:51:29:43:10:4a:f4:d9:89:ca:
         0b:07:54:31:49:c3:af:56:da:e9:c3:96:a3:22:1c:a8:05:88:
         ce:83:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:02 2025 by rpki-client