Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa
File:                     3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa (raw, json)
Hash identifier:          f9nv3hTzbtsm/CvYeEnQ+6GzHGJk6jb5n6ZfTluxbho=
Subject key identifier:   B1:D4:6A:76:35:7F:51:83:ED:E4:0E:D5:D8:C8:79:39:BE:3B:8B:4D
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       346C5762921C6DCAC7C61DE9C158E1F016446C77
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa
Signing time:             Tue 04 Feb 2025 20:02:38 +0000
ROA not before:           Tue 04 Feb 2025 19:57:38 +0000
ROA not after:            Tue 03 Feb 2026 20:02:38 +0000
asID:                     267801
IP address blocks:        190.122.86.24/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:57:62:92:1c:6d:ca:c7:c6:1d:e9:c1:58:e1:f0:16:44:6c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Feb  4 19:57:38 2025 GMT
            Not After : Feb  3 20:02:38 2026 GMT
        Subject: CN=B1D46A76357F5183EDE40ED5D8C87939BE3B8B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:6e:fa:b1:39:3c:82:10:57:08:97:32:59:
                    3f:35:31:38:a3:1c:23:32:94:27:8e:aa:21:62:60:
                    42:85:07:72:75:ef:c2:36:0a:c5:ab:b6:35:d0:7e:
                    18:19:eb:fe:78:58:3d:c5:1e:54:54:c4:92:b2:34:
                    81:30:ae:49:90:5a:a4:06:03:16:6a:3f:67:3e:29:
                    14:e0:a7:f5:e8:68:0f:d6:c4:95:41:0f:dc:6e:92:
                    77:81:c5:35:73:bd:1a:ca:f3:5c:8f:5d:89:d9:3f:
                    04:61:72:da:37:7a:d2:b4:77:04:94:8f:68:fb:ab:
                    96:b9:52:65:04:ef:a0:7c:fd:a3:a5:83:f7:72:28:
                    0d:ac:b9:e5:37:80:da:3d:40:cb:e3:ae:e2:2c:7d:
                    64:69:b7:bc:0d:5d:73:b5:46:45:55:11:86:1d:09:
                    30:d1:7d:8f:85:25:5f:60:8e:a0:be:16:d1:7d:24:
                    20:46:3a:ac:92:a3:cd:b2:38:d3:87:98:9a:8c:b3:
                    dd:46:11:96:2f:6d:8c:18:16:06:cc:17:fa:0d:5e:
                    ef:4a:95:a0:d2:e2:7f:ae:2c:f8:4d:c1:2d:fd:4b:
                    44:b1:96:73:03:68:72:8a:d4:a6:b2:02:a7:16:68:
                    55:49:06:3b:ee:e2:ce:09:89:f3:97:54:15:25:56:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D4:6A:76:35:7F:51:83:ED:E4:0E:D5:D8:C8:79:39:BE:3B:8B:4D
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.86.24/29

    Signature Algorithm: sha256WithRSAEncryption
         55:d9:69:79:04:08:1f:7c:89:7e:54:c1:21:55:b8:ca:c3:4e:
         43:ae:03:87:4c:ff:79:4d:33:11:b1:17:9d:fe:15:2c:4c:95:
         79:31:c4:b9:2e:08:1b:f5:7e:48:0e:9f:34:fc:7a:76:eb:b6:
         e0:73:5e:b8:6d:b2:10:1b:5b:a7:a9:ea:a9:ef:47:21:76:18:
         ac:75:cb:d1:65:81:80:6b:0e:bb:8c:ce:50:cd:ba:14:83:98:
         06:86:fa:a2:6d:22:43:6e:22:1d:a5:97:e3:f3:7f:c1:d9:20:
         e8:65:8d:af:68:b3:95:ab:ca:5f:7e:6b:29:11:8d:88:58:25:
         c7:92:0c:14:91:01:7f:f2:1a:60:cf:c8:7d:69:ee:c6:e3:d1:
         6d:8f:17:ee:cd:66:d9:c3:2d:62:79:01:53:52:16:fe:7d:3f:
         be:17:bf:87:f1:76:07:13:3e:88:41:b1:6a:3c:54:d5:64:b9:
         04:63:aa:78:29:ed:d1:b4:18:a8:e9:a0:75:a4:b6:17:26:7e:
         38:a3:c7:09:48:46:91:d5:b2:2f:b2:a8:52:8c:b9:2d:54:ed:
         ae:de:bc:c4:28:42:25:a0:7d:e3:0d:1b:20:27:23:ad:e9:76:
         34:d2:ec:71:2d:f5:48:7b:dd:c7:3d:62:da:5b:85:5b:e0:57:
         23:cc:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:23 2025 by rpki-client