Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133332e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133332e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          wjc8jikSsde1DQxfWHy61OG+f/L+LXgCnPXLJBcDM90=
Subject key identifier:   8E:EA:5C:23:79:41:29:51:9E:C8:32:A1:76:12:8C:86:C9:73:28:BB
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       75294DE8B5C449105665376983598DF848EF57A0
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133332e302f32342d3234203d3e203532323333.roa
Signing time:             Wed 27 Nov 2024 15:15:00 +0000
ROA not before:           Wed 27 Nov 2024 15:10:00 +0000
ROA not after:            Wed 26 Nov 2025 15:15:00 +0000
asID:                     52233
IP address blocks:        190.88.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 12:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:29:4d:e8:b5:c4:49:10:56:65:37:69:83:59:8d:f8:48:ef:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Nov 27 15:10:00 2024 GMT
            Not After : Nov 26 15:15:00 2025 GMT
        Subject: CN=8EEA5C23794129519EC832A176128C86C97328BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:34:cb:ae:91:5e:15:bc:19:75:7c:3b:4e:
                    2d:03:b0:99:4e:94:fe:ed:25:75:96:63:56:6d:5a:
                    98:d2:2d:26:f8:76:8d:4c:1f:6a:a6:65:21:14:43:
                    dc:f8:dc:a8:1d:6b:24:e2:d3:e2:ff:f0:9b:b6:1d:
                    4e:8d:09:f4:a0:3d:75:97:4d:3a:17:18:4c:20:d0:
                    d2:ed:e3:81:c0:a8:f9:b0:c5:3b:ac:4e:dc:82:0f:
                    db:a1:63:d8:5d:91:12:88:d4:27:fa:a0:30:7c:64:
                    68:92:a7:d5:0f:58:2a:24:48:53:45:a0:c8:b6:f5:
                    04:17:ec:82:3b:f8:c4:36:d2:dd:a5:5a:a2:f4:2a:
                    8a:e6:61:eb:55:3f:5e:5a:96:ee:ae:33:2a:ba:17:
                    30:a5:84:73:5a:09:ce:b6:73:62:64:dc:b6:9e:a6:
                    2d:3c:f8:b4:ef:93:c7:a0:8b:2e:a5:0c:f1:f8:04:
                    91:fd:b8:b4:f4:d3:f1:18:f8:ef:bf:e0:c5:5d:94:
                    f0:8f:0e:6e:21:ff:4d:ba:14:ae:85:a9:d5:cc:f3:
                    4e:d0:2a:ca:db:52:95:9a:7c:6b:36:47:5c:c8:22:
                    a2:97:2f:79:72:b2:7e:74:c4:7a:f1:07:71:2e:ec:
                    1b:34:a0:56:d0:d1:f9:22:5c:aa:37:d6:9f:0d:80:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:5C:23:79:41:29:51:9E:C8:32:A1:76:12:8C:86:C9:73:28:BB
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133332e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:2a:35:fd:7e:53:34:45:db:d1:fd:7a:cd:45:f4:64:07:02:
         f5:88:62:25:13:07:b7:90:c9:0d:85:d1:bf:0b:85:02:b3:37:
         31:08:aa:e6:37:ca:06:5e:d1:da:2e:c1:07:ad:dd:23:49:9b:
         90:35:4a:65:06:54:9e:f4:74:e7:01:0e:5b:48:65:7b:66:c9:
         fa:08:4b:c9:d3:c6:72:54:f7:0b:1a:fc:f7:9c:99:d5:54:1b:
         c3:47:0d:8d:d6:56:1d:2e:1c:27:fa:26:93:dc:c8:0c:93:c1:
         57:d1:25:9c:da:c7:98:e0:b6:19:b2:34:02:4d:cd:cb:f3:ac:
         aa:5e:ef:73:ea:bb:42:43:f3:5a:72:a8:b4:85:db:60:fd:6f:
         4e:8b:bb:10:56:db:14:f3:99:c4:83:73:32:0b:f2:fa:96:bf:
         49:dc:04:60:02:a5:36:6d:49:e0:a4:a7:ae:a1:d1:b1:14:ef:
         4b:5d:7f:1e:51:51:40:79:41:c6:55:ed:f6:ce:da:fd:11:00:
         90:5d:5c:15:50:da:bd:9d:87:b1:75:2e:81:5b:dd:00:ab:98:
         97:67:3b:c3:e6:1b:3e:23:f1:72:e9:2f:30:82:d4:55:6d:8e:
         b6:cd:88:50:45:0b:e3:06:12:40:f8:b0:78:5a:d8:1a:5d:0b:
         06:83:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:56 2025 by rpki-client