Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          w6F/goUP3ryv9Il23qJ9AB4uDgIvA0K10GpNeWIAwIA=
Subject key identifier:   62:9D:9B:E6:DF:A3:A1:7A:62:B5:A2:DF:82:E2:B8:19:A4:EF:B0:8F
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       20E94FAC734B4E5ECB9D3B739D8032E4618C2FDA
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:23 +0000
ROA not before:           Tue 04 Feb 2025 18:32:23 +0000
ROA not after:            Tue 03 Feb 2026 18:37:23 +0000
asID:                     264688
IP address blocks:        190.107.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:4f:ac:73:4b:4e:5e:cb:9d:3b:73:9d:80:32:e4:61:8c:2f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:23 2025 GMT
            Not After : Feb  3 18:37:23 2026 GMT
        Subject: CN=629D9BE6DFA3A17A62B5A2DF82E2B819A4EFB08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:75:07:6c:5f:c0:37:99:a2:6f:52:5a:df:
                    80:3f:b7:9f:be:e9:7f:fe:68:12:bc:c5:1e:06:a3:
                    a9:74:cc:16:f7:12:1e:08:f7:cd:f7:44:3a:c4:e3:
                    4a:06:53:e6:6a:9e:44:d9:b6:a2:97:6c:ae:00:7a:
                    b9:3c:4e:98:70:22:08:8c:d5:3d:a4:71:e1:46:1d:
                    27:8c:05:38:89:fd:95:c0:42:85:4b:67:96:29:c2:
                    a0:60:44:d4:c2:4a:ee:c0:35:d0:0c:ce:65:f8:09:
                    39:c5:14:c0:07:61:f8:e9:6b:a8:7b:ec:e2:84:96:
                    26:8e:eb:b4:15:61:eb:60:23:71:c5:87:14:93:a1:
                    91:22:d7:5b:a4:4e:6f:02:92:08:e8:99:00:e4:dd:
                    f6:bb:3c:45:83:31:bb:90:29:fc:84:b4:dc:2b:dc:
                    fe:6f:21:82:1e:16:36:1c:24:7e:79:16:7d:88:00:
                    b1:3f:df:fc:00:55:8a:1c:da:f9:61:71:b2:da:fc:
                    0f:36:a3:7c:6c:f4:30:f3:62:01:15:6a:82:8e:b1:
                    d8:98:61:e1:5a:12:24:e5:63:8b:7b:2d:ee:85:17:
                    89:a3:8e:cf:43:99:43:2f:f5:dd:50:5d:b2:2a:76:
                    5a:16:7c:ae:96:a3:39:05:05:e7:32:1f:e5:a3:1e:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9D:9B:E6:DF:A3:A1:7A:62:B5:A2:DF:82:E2:B8:19:A4:EF:B0:8F
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:61:4f:74:f6:95:48:ed:c8:34:f2:d4:bd:38:e7:7b:ed:
         b8:62:80:ce:98:57:56:59:40:d4:19:4f:16:89:d7:7d:60:f1:
         53:8c:4c:74:b9:4a:5a:11:1c:6e:80:42:dc:d9:6a:35:8f:cf:
         6c:4c:0d:53:97:c9:4b:5b:06:bd:e0:a8:ce:32:2b:19:65:96:
         32:fe:78:7a:1a:dd:cf:08:6c:96:13:3c:ba:f7:55:8f:97:25:
         30:16:3d:12:d0:67:ec:38:7e:4d:f7:42:38:aa:a9:ae:2b:be:
         3f:ac:a7:a8:03:49:38:77:6f:f4:6d:a2:de:7d:c6:a9:b0:a7:
         d6:31:cb:14:cf:b6:f6:f3:4e:09:ed:55:67:91:87:f5:b1:89:
         f7:72:14:3f:b8:68:eb:6d:db:f7:77:e0:2a:bb:e3:76:4f:8e:
         95:27:53:ae:9f:72:0e:89:2b:8d:36:af:f3:d4:86:72:64:ce:
         7e:2c:d9:91:a3:d5:e2:eb:91:fc:15:b3:ce:81:1d:4d:cb:60:
         67:19:4e:f1:bd:59:ca:b9:6a:05:65:86:d9:ff:ed:d8:a1:59:
         c5:a4:70:2c:19:7f:9a:80:ce:db:e7:b5:4e:07:bb:bf:a0:22:
         36:0f:de:ef:5a:a9:97:b0:bd:99:09:c4:bb:3f:9f:30:4f:e1:
         67:41:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:13 2025 by rpki-client