Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38302e302f32302d3234203d3e203237393838.roa
File:                     3139302e3132322e38302e302f32302d3234203d3e203237393838.roa (raw, json)
Hash identifier:          ++YEEtaeg6QIVmpoZwjhMst/W0rPbZL3DX6bd7UsXBk=
Subject key identifier:   83:70:F3:CB:75:A0:4D:38:06:DB:6D:AC:2B:D3:CB:8B:B2:7F:5E:87
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       69EF9BE775E0967D4AD3D2F00FED61ADA0B7E48F
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38302e302f32302d3234203d3e203237393838.roa
Signing time:             Tue 04 Feb 2025 20:02:39 +0000
ROA not before:           Tue 04 Feb 2025 19:57:39 +0000
ROA not after:            Tue 03 Feb 2026 20:02:39 +0000
asID:                     27988
IP address blocks:        190.122.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ef:9b:e7:75:e0:96:7d:4a:d3:d2:f0:0f:ed:61:ad:a0:b7:e4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Feb  4 19:57:39 2025 GMT
            Not After : Feb  3 20:02:39 2026 GMT
        Subject: CN=8370F3CB75A04D3806DB6DAC2BD3CB8BB27F5E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:57:ca:ac:2a:80:6f:a4:95:36:83:27:29:
                    5f:45:16:5d:cf:7e:2f:76:59:51:52:6b:1c:ad:df:
                    f0:fe:6d:68:d6:a8:7c:f1:3c:d7:7b:6c:db:ea:9f:
                    74:61:0a:e1:b2:80:4a:02:5c:7e:14:f5:d4:27:55:
                    4d:da:0d:8c:46:dc:cc:73:7a:b9:be:37:f7:c5:12:
                    06:74:28:6e:7f:57:4b:d6:94:65:c4:79:f6:d2:df:
                    df:3c:78:b4:85:3a:bd:6d:fb:66:44:3d:0d:46:b7:
                    41:0d:68:8d:55:b7:2e:2a:6d:2c:99:5a:22:13:8b:
                    aa:1f:ba:25:d2:73:a4:68:ce:55:d9:c0:a1:cd:fa:
                    48:4b:66:c5:e0:4d:e8:c3:22:cd:e3:02:1d:e4:52:
                    16:7c:84:e2:fe:57:f5:7c:97:e6:c6:d8:6a:99:9f:
                    fe:34:49:5e:4e:e8:97:87:70:9f:97:43:f2:8f:28:
                    fc:26:60:36:a7:f9:46:68:94:f2:2a:93:5d:28:2d:
                    f1:59:f0:20:8c:36:3c:25:89:1a:19:03:8e:47:0a:
                    4b:4a:de:e3:ef:9d:4d:96:34:c0:80:ab:b6:85:04:
                    4d:a1:15:b3:df:c4:d4:4c:fd:b0:cd:b1:4e:cb:f6:
                    bc:74:05:12:20:36:c5:6d:2b:91:2e:df:6e:83:81:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:F3:CB:75:A0:4D:38:06:DB:6D:AC:2B:D3:CB:8B:B2:7F:5E:87
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38302e302f32302d3234203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:69:e2:12:c7:cd:0c:b3:78:77:63:46:cd:7b:84:cc:06:
         b4:21:9e:d3:ab:47:cc:93:be:08:17:08:3a:a4:ec:50:c1:94:
         3f:83:4b:1f:b6:a9:b8:38:0d:e1:23:5b:01:57:c4:30:b9:2a:
         fb:2f:94:34:31:e5:1e:e3:62:4c:57:be:d5:6c:6f:21:7d:b0:
         4c:39:d7:68:46:ed:2e:38:21:83:8f:30:fa:ea:68:c8:22:c5:
         f3:34:27:0a:ea:bf:bf:33:68:36:b9:2a:78:fb:19:d9:78:d4:
         7a:15:ca:2c:28:c8:ca:13:a6:f6:5d:3f:05:26:fd:0f:d9:8d:
         22:ae:d2:9f:c3:20:89:9e:bd:0d:c4:ec:98:08:97:f8:2b:c4:
         42:a2:7f:3b:e2:f3:b2:c5:37:3b:06:f7:19:90:18:82:ca:a0:
         8d:79:5c:84:47:13:7f:cc:e5:2a:bf:3d:33:af:ca:4f:6e:e0:
         9c:d8:e6:00:5a:73:99:82:e7:ce:f4:a0:5e:d8:1e:5d:92:11:
         d6:cf:70:89:8c:df:09:4f:22:da:b4:29:e5:b3:36:51:9f:74:
         5a:25:b6:7b:ad:d4:f8:c9:b1:e0:fa:6c:f1:b5:e6:48:62:37:
         a6:30:a4:04:4e:03:2f:a4:f9:09:68:17:0a:f0:c0:3a:d2:15:
         8b:b0:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:30 2025 by rpki-client