Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133302e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133302e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          6SX2E6ADWCgcNujbDSN7+ugJt4gkhv/VJVLtLDRrBVw=
Subject key identifier:   8D:B9:B5:A7:22:40:CD:DA:5F:D8:65:4E:35:FC:3E:B1:27:01:6F:9C
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       610C7734F541CD23E6FFA046D8614923411187A6
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133302e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 04 Feb 2025 18:50:49 +0000
ROA not before:           Tue 04 Feb 2025 18:45:49 +0000
ROA not after:            Tue 03 Feb 2026 18:50:49 +0000
asID:                     52233
IP address blocks:        190.88.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:77:34:f5:41:cd:23:e6:ff:a0:46:d8:61:49:23:41:11:87:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:49 2025 GMT
            Not After : Feb  3 18:50:49 2026 GMT
        Subject: CN=8DB9B5A72240CDDA5FD8654E35FC3EB127016F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:6f:40:1d:7b:0e:5a:5f:89:c6:50:c4:cf:
                    03:ad:30:d1:2a:e1:08:bb:87:33:35:32:77:75:40:
                    e3:bd:b5:af:ba:96:9b:b5:59:e8:36:8f:6d:78:95:
                    6e:8f:53:d7:33:2e:8d:2f:5e:56:2e:24:a1:a3:aa:
                    98:f7:1f:69:87:2b:42:21:85:33:84:d2:fe:f7:72:
                    ae:7d:35:4c:b7:f0:4f:fc:b4:a3:b1:a6:8a:19:ee:
                    f4:12:9d:ff:7b:c9:c6:07:5e:cc:43:36:37:26:18:
                    7b:6d:f9:57:b6:eb:99:7b:d0:d4:1b:81:eb:40:49:
                    06:68:dc:d8:bd:97:6e:d1:c8:c4:76:ac:12:7d:dc:
                    1e:e1:0b:68:43:75:90:de:22:df:da:a1:88:c3:a1:
                    55:d8:d3:e0:fd:9e:41:6f:dc:f4:68:39:e6:9c:fa:
                    0b:89:57:5b:f8:d0:77:2f:5f:f4:a7:8a:07:32:56:
                    28:3d:e2:66:1b:aa:e6:25:d4:5f:81:9a:65:b8:40:
                    a6:88:0b:9a:82:9e:66:15:2b:48:fa:5b:4f:91:2c:
                    a7:33:ae:66:e7:d0:19:13:9e:51:fb:83:04:d0:7c:
                    43:aa:8a:d9:32:62:30:b3:90:df:1e:de:be:a9:11:
                    03:a2:e7:2b:7c:e4:7f:d3:c7:f6:8f:9e:fa:30:7f:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B9:B5:A7:22:40:CD:DA:5F:D8:65:4E:35:FC:3E:B1:27:01:6F:9C
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133302e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:b6:56:37:fa:fd:a0:2c:98:31:05:3d:eb:e5:16:1b:76:
         4a:13:d6:e0:a3:09:0f:0b:51:40:15:f5:f1:a4:92:46:5b:a6:
         d4:b3:64:ca:a1:f8:84:43:f8:e2:15:3e:11:cd:4e:be:c0:e5:
         78:5f:5c:78:d4:7f:e3:3e:67:3e:e3:94:b9:4c:bd:5a:26:36:
         ec:86:1a:a2:3d:f8:7e:f9:d8:0e:32:9b:e4:aa:15:42:0a:dd:
         c8:4b:29:13:eb:6f:d4:71:7d:e7:c2:0e:31:db:4d:ad:cd:87:
         b6:3f:8d:51:b1:59:a6:5f:21:b8:8b:ea:b9:36:89:e9:73:29:
         ee:0d:73:62:f5:7d:ce:ba:d9:4d:e2:05:72:9c:ea:28:c1:17:
         44:2a:bb:45:c4:22:ed:0c:bb:ba:ef:42:8e:72:00:9a:d7:b4:
         bc:fa:e0:04:36:d0:67:1e:f5:98:e5:14:3c:56:49:37:71:37:
         5a:fe:5e:fa:18:d3:f1:07:99:83:37:5c:6c:70:a0:b0:d8:7a:
         97:9d:92:a6:aa:ea:00:1a:e8:dc:fd:48:df:ad:73:14:5e:9f:
         d6:9a:09:52:3d:b6:d3:bc:7e:fc:bb:b6:ca:cf:e3:04:e1:5c:
         6e:f4:9f:2b:8d:88:0e:36:25:13:85:45:12:e8:06:af:4b:f5:
         b1:35:a9:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYQx3NPVBzSPm/6BG2GFJI0ERh6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTAyMDQxODQ1NDlaFw0yNjAyMDMxODUwNDlaMDMxMTAvBgNV
BAMTKDhEQjlCNUE3MjI0MENEREE1RkQ4NjU0RTM1RkMzRUIxMjcwMTZGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2m9AHXsOWl+JxlDEzwOtMNEq
4Qi7hzM1Mnd1QOO9ta+6lpu1Weg2j214lW6PU9czLo0vXlYuJKGjqpj3H2mHK0Ih
hTOE0v73cq59NUy38E/8tKOxpooZ7vQSnf97ycYHXsxDNjcmGHtt+Ve265l70NQb
getASQZo3Ni9l27RyMR2rBJ93B7hC2hDdZDeIt/aoYjDoVXY0+D9nkFv3PRoOeac
+guJV1v40HcvX/SnigcyVig94mYbquYl1F+BmmW4QKaIC5qCnmYVK0j6W0+RLKcz
rmbn0BkTnlH7gwTQfEOqitkyYjCzkN8e3r6pEQOi5yt85H/Tx/aPnvowf6uTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjbm1pyJAzdpf2GVONfw+sScBb5wwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMxMzkzMDJlMzgzODJlMzEzMzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5YgjAN
BgkqhkiG9w0BAQsFAAOCAQEAT/u2Vjf6/aAsmDEFPevlFht2ShPW4KMJDwtRQBX1
8aSSRlum1LNkyqH4hEP44hU+Ec1OvsDleF9ceNR/4z5nPuOUuUy9WiY27IYaoj34
fvnYDjKb5KoVQgrdyEspE+tv1HF958IOMdtNrc2Htj+NUbFZpl8huIvquTaJ6XMp
7g1zYvV9zrrZTeIFcpzqKMEXRCq7RcQi7Qy7uu9CjnIAmte0vPrgBDbQZx71mOUU
PFZJN3E3Wv5e+hjT8QeZgzdcbHCgsNh6l52SpqrqABro3P1I361zFF6f1poJUj22
07x+/Lu2ys/jBOFcbvSfK42IDjYlE4VFEugGr0v1sTWpbg==
-----END CERTIFICATE-----
Generated at Fri Feb 14 15:20:30 2025 by rpki-client