Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          Kda5YUOvvoTLfwR6WoxpVf9fEhgVwBUSpqzBkxGItZk=
Subject key identifier:   F0:6D:B3:CA:70:F8:B5:85:E3:2D:19:CF:36:E5:6A:D8:ED:CC:AE:2A
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       3C3ABE03B8117A140AC50C8B5FD9E692D9AD6C11
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:23 +0000
ROA not before:           Tue 04 Feb 2025 18:32:23 +0000
ROA not after:            Tue 03 Feb 2026 18:37:23 +0000
asID:                     264688
IP address blocks:        190.196.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3a:be:03:b8:11:7a:14:0a:c5:0c:8b:5f:d9:e6:92:d9:ad:6c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:23 2025 GMT
            Not After : Feb  3 18:37:23 2026 GMT
        Subject: CN=F06DB3CA70F8B585E32D19CF36E56AD8EDCCAE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:1e:e2:21:9b:c6:77:f4:be:42:01:13:e6:
                    0f:87:66:cc:af:d3:04:c6:dd:c3:9c:fc:87:6c:ff:
                    a6:59:c0:4c:f0:e8:bf:44:b6:1b:72:d0:b2:0d:11:
                    21:7b:7f:fd:d9:89:c2:88:5b:88:be:f5:78:10:3a:
                    e2:12:66:df:66:5f:bc:d2:20:99:84:86:f2:e7:7d:
                    29:56:92:b4:a5:f0:a1:aa:90:90:ca:60:6c:8f:5a:
                    80:f1:e4:fc:99:1d:05:09:9f:08:de:2c:37:7b:71:
                    6d:c5:6d:8f:8d:28:0c:2e:8f:b3:cf:2e:07:3a:37:
                    7b:4f:19:8c:01:a1:e7:e5:72:14:15:1f:bb:49:86:
                    5a:0d:1c:5c:cc:e0:b5:ec:5c:21:74:9c:2c:dd:99:
                    57:8a:90:ac:5c:1a:9f:af:83:f4:e7:4f:1b:64:3e:
                    26:f8:ce:16:42:f0:2d:62:2b:a2:88:60:6b:71:6b:
                    cc:82:70:e8:cb:f6:49:24:da:27:49:b5:9d:32:47:
                    e3:b4:b8:b1:2b:41:37:54:a5:6a:88:93:51:fd:0b:
                    79:6b:88:d4:a4:6f:7b:af:04:1f:18:5c:b9:79:cf:
                    b3:6f:31:01:5a:c8:17:2f:02:bc:a5:0e:20:15:09:
                    89:75:f8:0a:28:8d:65:69:8c:b2:d8:17:c0:20:ab:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6D:B3:CA:70:F8:B5:85:E3:2D:19:CF:36:E5:6A:D8:ED:CC:AE:2A
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:64:71:0d:03:1a:94:86:9f:5f:9f:ff:00:25:3b:00:21:
         b0:29:ee:78:45:15:ca:ba:a8:d7:ae:48:bc:57:71:fd:c0:5b:
         12:b9:a2:8b:26:f9:7d:58:5f:06:cb:35:5f:92:5a:98:17:72:
         e6:ed:d8:05:0e:b1:61:61:60:c7:9a:71:68:7d:07:f4:0d:49:
         32:f8:d7:7b:82:ec:35:32:a2:0f:0c:b9:82:e4:7e:2d:3c:e0:
         79:78:1e:49:e5:94:63:d9:4b:7e:b9:98:43:7f:c0:0f:64:1d:
         2c:b7:23:db:b7:01:c9:ba:c6:23:fe:99:48:2b:3d:fb:60:9b:
         75:ea:d2:65:18:98:4e:4a:8e:e0:62:ab:29:b4:13:48:28:09:
         a9:db:48:d7:16:8e:ec:b1:50:2b:41:c2:58:e6:cf:31:a1:c1:
         3c:2f:dc:35:db:fa:f4:da:5f:e1:02:66:ac:8d:0d:93:63:42:
         fe:d0:80:e1:24:47:ef:33:23:b5:27:ad:d0:cc:67:69:ec:02:
         76:1b:7f:9a:43:c4:82:56:54:dc:94:ea:c9:7a:27:25:73:f7:
         97:17:42:ad:92:5c:8a:d3:24:1b:cf:da:83:3c:ea:6b:70:43:
         dd:9c:6c:6a:13:5d:6d:2c:0d:27:c7:5c:d2:ea:e7:13:28:56:
         5d:10:1e:16
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUPDq+A7gRehQKxQyLX9nmktmtbBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNTAyMDQxODMyMjNaFw0yNjAyMDMxODM3MjNaMDMxMTAvBgNV
BAMTKEYwNkRCM0NBNzBGOEI1ODVFMzJEMTlDRjM2RTU2QUQ4RURDQ0FFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIKh7iIZvGd/S+QgET5g+HZsyv
0wTG3cOc/Ids/6ZZwEzw6L9Ethty0LINESF7f/3ZicKIW4i+9XgQOuISZt9mX7zS
IJmEhvLnfSlWkrSl8KGqkJDKYGyPWoDx5PyZHQUJnwjeLDd7cW3FbY+NKAwuj7PP
Lgc6N3tPGYwBoeflchQVH7tJhloNHFzM4LXsXCF0nCzdmVeKkKxcGp+vg/TnTxtk
Pib4zhZC8C1iK6KIYGtxa8yCcOjL9kkk2idJtZ0yR+O0uLErQTdUpWqIk1H9C3lr
iNSkb3uvBB8YXLl5z7NvMQFayBcvArylDiAVCYl1+AoojWVpjLLYF8Agq83PAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8G2zynD4tYXjLRnPNuVq2O3MriowHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzOTM2MmUzMjMyMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xOMwDQYJKoZIhvcNAQELBQADggEBAED7ZHENAxqUhp9fn/8AJTsAIbAp7nhFFcq6
qNeuSLxXcf3AWxK5oosm+X1YXwbLNV+SWpgXcubt2AUOsWFhYMeacWh9B/QNSTL4
13uC7DUyog8MuYLkfi084Hl4HknllGPZS365mEN/wA9kHSy3I9u3Acm6xiP+mUgr
Pftgm3Xq0mUYmE5KjuBiqym0E0goCanbSNcWjuyxUCtBwljmzzGhwTwv3DXb+vTa
X+ECZqyNDZNjQv7QgOEkR+8zI7UnrdDMZ2nsAnYbf5pDxIJWVNyU6sl6JyVz95cX
Qq2SXIrTJBvP2oM86mtwQ92cbGoTXW0sDSfHXNLq5xMoVl0QHhY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:06 2025 by rpki-client