Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          cD9LXuzFSJ2oTzbP0NfoKkxzEaZn8dDCVM4/TScf+Cg=
Subject key identifier:   EE:0A:C1:69:E4:C9:4C:8D:B8:88:C0:BB:29:0E:2D:30:DB:19:88:C8
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       76092FDD421AB8734F64B3150FC50E141E7E36CF
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:22 +0000
ROA not before:           Tue 04 Feb 2025 18:32:22 +0000
ROA not after:            Tue 03 Feb 2026 18:37:22 +0000
asID:                     264688
IP address blocks:        190.107.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:2f:dd:42:1a:b8:73:4f:64:b3:15:0f:c5:0e:14:1e:7e:36:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:22 2025 GMT
            Not After : Feb  3 18:37:22 2026 GMT
        Subject: CN=EE0AC169E4C94C8DB888C0BB290E2D30DB1988C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:a8:a4:0b:d7:ec:01:a9:62:59:62:2b:69:
                    74:e8:35:5f:b1:e1:4c:c0:dc:19:77:fc:bf:4a:af:
                    5d:f4:52:fd:f7:b1:e4:29:9f:05:74:13:09:8c:3c:
                    c1:9e:ab:a0:1a:9c:c8:dc:a2:47:de:5c:92:6c:fc:
                    30:91:03:7d:3a:1d:09:73:80:34:8a:52:93:31:61:
                    4a:ed:5e:1e:b8:7f:87:0d:c2:ae:ea:91:d9:2e:9f:
                    32:65:5e:a8:d5:16:4b:d9:bf:87:da:f5:ab:87:69:
                    60:49:d1:b5:0b:a3:07:2a:98:11:7c:0b:28:6d:53:
                    79:08:b3:a2:d0:6f:64:2a:90:2c:53:0e:82:ff:ff:
                    e5:f7:2c:65:4d:a2:44:fa:59:6b:7c:1e:46:ac:e6:
                    20:ad:7a:bb:7e:7b:5f:f6:18:3a:89:40:bf:51:27:
                    a9:ed:90:90:fc:4e:28:32:01:0a:c6:41:c5:1c:0c:
                    bd:26:4b:b6:5e:53:a3:a1:85:07:17:30:17:d2:2f:
                    b3:b8:65:db:66:13:46:eb:c0:2a:5f:6f:b2:78:b2:
                    d0:2a:55:e9:be:3c:45:96:14:99:ea:08:47:8b:bc:
                    80:6e:ee:a3:a5:51:65:59:45:74:88:12:7c:69:d1:
                    c1:0a:3e:63:f5:b4:fb:ff:12:d9:6f:ae:b5:9f:ca:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0A:C1:69:E4:C9:4C:8D:B8:88:C0:BB:29:0E:2D:30:DB:19:88:C8
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:cf:42:5b:92:cd:a5:fa:a2:01:77:e5:0a:2e:74:bd:64:
         9e:5a:48:f3:03:96:a7:d5:de:82:58:13:cf:55:99:4c:e8:9d:
         eb:c5:57:60:f6:85:35:4a:39:c7:c6:23:a0:7c:8d:b4:37:bd:
         4d:8e:dc:d7:59:0a:c0:59:6c:8d:10:e4:81:8c:c2:64:2f:04:
         98:85:fb:3d:2d:e1:89:86:8d:9a:c7:da:ea:32:0c:6f:ee:63:
         9b:36:14:e1:76:7f:f9:b0:f2:38:2c:2e:84:26:64:3d:20:69:
         6b:b9:8a:b6:d9:cb:a1:eb:98:81:93:56:92:76:05:be:3e:44:
         53:51:f3:b8:b3:56:06:d4:33:61:78:f2:2b:04:3a:a8:3e:b3:
         65:ad:ca:fb:ce:b6:a0:fd:1d:16:55:f4:9b:a6:13:20:0b:63:
         f4:51:b3:c3:03:63:37:4b:62:e2:27:f9:87:b2:e3:72:8b:79:
         4d:83:60:36:a1:aa:9b:16:ff:e7:09:15:95:a1:d9:7a:70:42:
         e9:7d:b8:f9:87:ad:5c:c1:37:da:1a:95:f2:e4:2f:a3:78:62:
         f0:b8:c3:22:77:01:a8:68:de:3b:e0:b0:fa:e8:3b:3e:97:db:
         3a:82:03:21:a0:0b:67:22:84:b9:33:bf:bc:c5:9d:15:31:16:
         3d:50:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:04 2025 by rpki-client