Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          dwNE+n7bb1yq2/4r/hiHptnNP2+H759Fq434ABGhVkA=
Subject key identifier:   6C:02:A0:3D:EC:E5:52:AB:F0:EB:0F:FB:17:DD:74:DE:D2:C6:18:3F
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       77EF6F97AFED77D244231B8E92D6FEADCC1DFFA0
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:23 +0000
ROA not before:           Tue 04 Feb 2025 18:32:23 +0000
ROA not after:            Tue 03 Feb 2026 18:37:23 +0000
asID:                     264688
IP address blocks:        190.196.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ef:6f:97:af:ed:77:d2:44:23:1b:8e:92:d6:fe:ad:cc:1d:ff:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:23 2025 GMT
            Not After : Feb  3 18:37:23 2026 GMT
        Subject: CN=6C02A03DECE552ABF0EB0FFB17DD74DED2C6183F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:98:ae:ea:6a:cc:60:47:86:0c:c1:eb:38:
                    50:ef:d3:96:14:58:8f:ea:80:54:9f:96:40:c2:14:
                    4e:d4:e7:ac:9a:24:55:33:01:6d:ba:8a:ec:a9:d3:
                    c5:00:69:bb:5e:31:53:60:d1:77:7c:df:40:af:53:
                    99:c1:4b:c9:4b:10:20:c0:d4:a9:c5:45:1c:94:33:
                    6f:e3:ff:75:a2:36:9d:d2:27:3d:9c:94:dd:6f:93:
                    d4:32:d4:ff:b2:49:9e:9e:a1:7c:90:f8:52:e6:b2:
                    67:f8:88:7c:c7:4c:4b:f6:7d:60:ef:db:2d:3c:9c:
                    39:d4:d6:e9:e4:5f:8b:09:43:4e:6a:b1:7e:e6:38:
                    fe:37:d4:94:99:9b:3c:15:50:22:57:dd:11:5f:bf:
                    79:a7:b6:79:32:bf:0b:83:13:ae:a3:ef:08:28:83:
                    b2:e2:fa:b7:1a:b4:1a:eb:5f:fe:33:be:0e:c2:a3:
                    55:90:e3:0d:58:bf:e2:dd:5e:65:b0:4a:b5:9c:c3:
                    a4:88:a1:e3:d2:ea:63:d4:00:fe:ef:d7:70:97:02:
                    40:87:6d:ed:8c:6a:62:89:b7:be:20:27:a5:8b:bd:
                    6a:46:98:8c:51:d3:f7:67:6e:54:86:a2:01:55:a6:
                    39:ff:91:76:58:db:36:89:08:c2:62:24:6f:5b:5f:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:02:A0:3D:EC:E5:52:AB:F0:EB:0F:FB:17:DD:74:DE:D2:C6:18:3F
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:c5:96:48:60:6c:7f:65:39:3c:da:fe:f7:cd:1a:94:34:
         0d:8e:90:3a:a3:a8:2d:87:96:40:20:50:e3:66:47:32:fc:94:
         64:b8:1c:7d:bf:fb:1b:be:fa:21:37:92:91:83:94:84:78:16:
         20:60:16:c0:44:3d:cc:3a:9d:35:2e:f1:2b:21:a5:8b:8e:17:
         59:b7:09:e9:55:7d:82:56:fd:2f:23:21:34:0a:a6:14:4d:79:
         14:a8:cb:f2:b2:2f:b5:ee:bc:8d:cf:2e:bc:48:fb:99:b6:72:
         a7:76:42:b5:f4:fb:66:99:c8:d3:e7:e2:0e:8b:75:7a:cf:86:
         cc:0b:8d:f9:43:c4:88:59:04:55:48:4f:5e:ce:23:7c:bd:82:
         f1:59:8f:05:d2:62:2e:dd:ef:a4:3e:0d:8c:c1:ec:40:48:22:
         55:41:ce:2e:3a:84:90:99:ef:f4:ec:a4:c2:c6:d7:04:5d:88:
         e9:51:c7:57:de:04:3e:93:69:04:99:3e:a7:6a:a2:3c:3c:ca:
         bc:c2:4f:b5:19:e8:9a:de:d5:c6:db:52:86:0a:0d:9d:79:21:
         0a:d7:30:50:39:09:cb:f9:aa:a0:36:2c:1e:42:ba:a5:32:d7:
         43:1c:ea:38:33:d5:5d:35:22:d8:5c:1a:fa:3a:8d:af:2d:73:
         77:e5:db:a0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUd+9vl6/td9JEIxuOktb+rcwd/6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNTAyMDQxODMyMjNaFw0yNjAyMDMxODM3MjNaMDMxMTAvBgNV
BAMTKDZDMDJBMDNERUNFNTUyQUJGMEVCMEZGQjE3REQ3NERFRDJDNjE4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Lpiu6mrMYEeGDMHrOFDv05YU
WI/qgFSflkDCFE7U56yaJFUzAW26iuyp08UAabteMVNg0Xd830CvU5nBS8lLECDA
1KnFRRyUM2/j/3WiNp3SJz2clN1vk9Qy1P+ySZ6eoXyQ+FLmsmf4iHzHTEv2fWDv
2y08nDnU1unkX4sJQ05qsX7mOP431JSZmzwVUCJX3RFfv3mntnkyvwuDE66j7wgo
g7Li+rcatBrrX/4zvg7Co1WQ4w1Yv+LdXmWwSrWcw6SIoePS6mPUAP7v13CXAkCH
be2MamKJt74gJ6WLvWpGmIxR0/dnblSGogFVpjn/kXZY2zaJCMJiJG9bX22hAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUbAKgPezlUqvw6w/7F9103tLGGD8wHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzOTM2MmUzMjMzMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xOowDQYJKoZIhvcNAQELBQADggEBAB3kxZZIYGx/ZTk82v73zRqUNA2OkDqjqC2H
lkAgUONmRzL8lGS4HH2/+xu++iE3kpGDlIR4FiBgFsBEPcw6nTUu8SshpYuOF1m3
CelVfYJW/S8jITQKphRNeRSoy/KyL7XuvI3PLrxI+5m2cqd2QrX0+2aZyNPn4g6L
dXrPhswLjflDxIhZBFVIT17OI3y9gvFZjwXSYi7d76Q+DYzB7EBIIlVBzi46hJCZ
7/TspMLG1wRdiOlRx1feBD6TaQSZPqdqojw8yrzCT7UZ6Jre1cbbUoYKDZ15IQrX
MFA5Ccv5qqA2LB5CuqUy10Mc6jgz1V01IthcGvo6ja8tc3fl26A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:01 2025 by rpki-client