Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          BFiQYA14v2OjJTSpnvCoTa3KdMKR6Baq2E5HxBZflZY=
Subject key identifier:   24:E7:8E:3F:9C:4F:12:1B:C7:C7:10:93:BD:CA:20:02:7A:9E:38:0B
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       7683936145DC2B4BAAECB497FC3BE4B1BC9D5461
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:20 +0000
ROA not before:           Tue 04 Feb 2025 18:32:20 +0000
ROA not after:            Tue 03 Feb 2026 18:37:20 +0000
asID:                     264688
IP address blocks:        190.196.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:93:61:45:dc:2b:4b:aa:ec:b4:97:fc:3b:e4:b1:bc:9d:54:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:20 2025 GMT
            Not After : Feb  3 18:37:20 2026 GMT
        Subject: CN=24E78E3F9C4F121BC7C71093BDCA20027A9E380B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:b0:a1:7e:2e:71:db:0c:be:f1:aa:5b:63:
                    0f:f8:b5:01:75:fd:b1:f0:c1:4f:1d:19:19:42:6a:
                    a4:0c:f0:d3:da:79:cb:d6:7f:b0:b4:d3:da:e3:4f:
                    82:0e:7e:f8:dd:78:01:cb:e2:b5:bf:01:3f:08:7f:
                    60:b1:dc:ca:51:d3:54:2a:8d:a0:9d:95:b3:a9:7d:
                    6d:bf:3f:ce:ef:e1:fb:99:f1:78:cd:f7:38:dd:9c:
                    c5:a8:9c:14:33:1e:1d:75:84:21:0c:dc:b2:51:82:
                    f8:b6:13:e5:f0:6f:54:cc:c8:b9:da:b4:6e:4b:b5:
                    35:f7:19:29:bc:12:62:a5:20:7c:d9:21:76:94:90:
                    44:58:18:52:b3:71:33:68:01:4f:91:ac:c3:9f:c5:
                    c4:c5:bf:9f:98:76:ef:ba:03:7d:72:67:42:ca:f5:
                    b8:45:aa:9a:8b:9f:b4:4f:75:41:ad:6d:38:d3:44:
                    c3:22:11:de:cd:08:c2:53:0f:13:5d:3d:5b:a5:2d:
                    27:a3:85:5b:e3:b5:43:97:19:7e:58:c5:75:f7:f9:
                    db:02:d4:e7:d8:d3:ba:00:8a:ae:7f:ce:a3:e2:de:
                    7d:d3:d6:58:25:90:10:6e:83:9d:27:bb:d5:59:78:
                    01:12:e4:e4:b2:cb:7a:73:b8:cc:76:aa:ce:05:7e:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:8E:3F:9C:4F:12:1B:C7:C7:10:93:BD:CA:20:02:7A:9E:38:0B
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:a4:7c:be:d4:fe:74:94:e2:f7:e8:11:af:49:dd:a3:33:
         2e:57:1f:39:e1:5d:50:2a:05:18:8d:51:1b:0b:bd:77:c7:00:
         2c:42:da:74:c2:f6:45:2a:27:84:a9:4d:e6:a3:82:35:89:1b:
         0a:3b:84:d4:3f:50:d8:ff:b0:f3:fc:bb:d4:22:76:c7:9e:5a:
         0c:c5:3e:ca:03:71:d9:e9:dc:a4:4d:db:5b:49:2b:b2:bf:ac:
         cf:2d:59:9c:82:99:40:cc:f5:41:83:02:73:62:a9:4b:56:8f:
         56:1d:f7:84:5d:d7:bd:86:a4:cc:4b:3a:ed:1b:ca:71:31:ac:
         aa:d1:09:79:72:6f:56:4c:78:a1:a7:4c:2b:d8:ac:89:8a:9f:
         de:83:ec:fc:24:c0:cf:41:ae:98:da:0d:12:ef:ed:b9:8b:81:
         2e:5d:f4:10:3e:13:59:bb:0d:aa:27:32:3d:8f:bc:83:e6:60:
         a8:6f:88:c5:b2:1b:47:58:90:37:2f:55:fb:66:49:6e:ea:9d:
         44:61:60:26:78:be:8b:de:0d:97:2a:c6:c7:fc:27:9b:7c:d3:
         27:b0:49:6e:02:36:d2:d8:26:20:25:c1:e9:7d:ae:fa:e7:69:
         e1:bc:79:06:4e:19:f3:68:ad:ef:72:1f:ee:16:aa:7a:44:e6:
         8d:0f:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:05 2025 by rpki-client