Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133372e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133372e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          6/0mwbf7KHoskizQ7sRLPQYBhelH8XrT04VClHS530I=
Subject key identifier:   FE:07:63:30:5D:81:A3:53:E1:B6:D5:C2:5B:FF:A0:BA:43:CB:0A:E0
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2FA07F87BB5683E928BF9A3AB42433C35DC01A38
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133372e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 03 Dec 2024 13:55:00 +0000
ROA not before:           Tue 03 Dec 2024 13:50:00 +0000
ROA not after:            Tue 02 Dec 2025 13:55:00 +0000
asID:                     52233
IP address blocks:        190.88.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 12:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:7f:87:bb:56:83:e9:28:bf:9a:3a:b4:24:33:c3:5d:c0:1a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Dec  3 13:50:00 2024 GMT
            Not After : Dec  2 13:55:00 2025 GMT
        Subject: CN=FE0763305D81A353E1B6D5C25BFFA0BA43CB0AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:5a:88:6b:e7:f6:27:04:0f:e8:d2:19:30:
                    b6:8f:b2:b5:e0:4c:56:12:8e:39:1c:db:01:be:58:
                    61:0a:86:36:90:34:c2:8f:85:04:db:e2:4e:92:8f:
                    fc:ae:e1:fd:d1:44:a8:15:63:90:34:e6:47:3f:c2:
                    15:dc:c1:de:41:b3:57:96:f1:83:17:f7:9b:d3:c6:
                    43:42:b6:de:de:9c:5d:95:b3:80:00:3c:dd:33:4a:
                    96:2c:d4:d1:b9:cb:4a:56:43:36:9e:b6:6d:e0:87:
                    42:b5:ea:ac:0f:75:f8:1f:6e:02:aa:58:6d:8e:9b:
                    8f:12:74:f8:71:b5:1d:22:06:40:46:f1:b8:70:fe:
                    76:ae:40:b7:37:1b:e2:65:36:2b:01:1f:04:41:a4:
                    3f:11:07:c3:ee:11:d9:15:2d:51:1e:85:d6:22:4e:
                    57:49:f9:9a:2f:fd:73:8d:ac:0b:c4:b2:d6:b9:93:
                    60:56:61:af:0d:9b:5f:78:2c:31:5c:21:cc:79:55:
                    21:8e:95:4d:0b:b4:c2:b8:28:24:a8:f1:26:05:e7:
                    90:a8:fe:0e:8a:52:d4:46:4b:9c:99:ac:45:f4:4e:
                    8f:ee:2a:92:88:52:a7:a3:6e:b6:7d:e6:b6:06:b2:
                    15:2f:62:f8:7a:da:46:5c:58:14:12:76:7f:e6:3a:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:63:30:5D:81:A3:53:E1:B6:D5:C2:5B:FF:A0:BA:43:CB:0A:E0
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133372e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:60:8f:fa:9b:fd:64:c6:a7:9d:bd:f7:d5:c4:d7:f0:00:a0:
         85:23:46:2b:b6:9d:f3:ec:8c:a9:a9:10:34:62:91:2c:e7:8f:
         40:f5:a2:6c:4f:19:cd:65:73:29:e1:a7:6d:bb:7c:70:1a:92:
         13:1e:fe:74:e9:23:f0:2b:42:6a:40:67:7d:41:7f:10:15:a5:
         fb:4a:b1:b8:17:4b:27:e7:48:41:ee:c4:20:34:b0:2a:b3:1d:
         9b:93:ae:58:b8:9c:ec:e5:dc:82:1e:f4:9d:05:c0:b9:9a:ce:
         cb:b4:96:61:eb:25:76:7a:80:3f:2c:34:08:9b:9c:bc:3f:47:
         17:ac:0d:f7:31:89:5e:a1:92:6d:6e:08:88:96:0e:43:56:3f:
         52:8a:d8:74:4e:2e:97:ca:ff:9b:4b:4e:a7:10:bd:3e:a7:d5:
         a7:e3:25:ad:5c:e3:b0:c0:1f:74:d7:c1:e7:27:67:43:40:eb:
         ce:3e:8a:34:25:04:82:8d:3e:eb:1c:92:13:e0:19:f6:0b:42:
         30:94:d0:d7:52:f9:57:c1:dd:e2:61:58:b9:01:26:63:aa:45:
         9b:bb:ad:17:34:2a:c0:0e:0a:ef:88:b0:0e:4e:b6:84:55:b6:
         b5:61:b0:6a:44:74:c2:23:80:a8:79:ec:b9:46:4a:56:2a:c2:
         67:6d:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:00:20 2025 by rpki-client