Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133382e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          exQ4bAsI3mmAKyPhi7mvgVM6myOiaI+ba2fncU87dqI=
Subject key identifier:   1C:43:71:7D:65:56:25:A6:E6:C5:F5:41:74:51:EE:07:D5:EE:AF:49
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       081E35BE5EDEC76A9DF4739965BBAEF1B5DFE696
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
Signing time:             Thu 20 Mar 2025 19:20:00 +0000
ROA not before:           Thu 20 Mar 2025 19:15:00 +0000
ROA not after:            Thu 19 Mar 2026 19:20:00 +0000
asID:                     52233
IP address blocks:        190.88.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1e:35:be:5e:de:c7:6a:9d:f4:73:99:65:bb:ae:f1:b5:df:e6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar 20 19:15:00 2025 GMT
            Not After : Mar 19 19:20:00 2026 GMT
        Subject: CN=1C43717D655625A6E6C5F5417451EE07D5EEAF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:89:88:36:1c:5a:dc:af:20:b8:c8:11:4f:
                    65:98:44:0e:bd:7e:cb:4c:5a:0d:58:52:a7:c0:d8:
                    00:35:8b:ae:89:e3:c5:bd:e0:2e:3d:14:8d:14:da:
                    30:02:39:28:6a:82:17:7d:78:3d:56:fb:dd:48:72:
                    b8:35:fa:ca:da:9c:23:7f:c4:12:6e:0f:65:4b:2c:
                    0d:7f:50:d0:5d:a0:4e:61:58:db:45:30:be:3d:04:
                    d8:0b:78:2c:f3:09:1b:f7:97:8e:81:9b:6e:f5:73:
                    df:4f:77:c5:75:2d:09:1e:4b:01:72:19:6a:7e:09:
                    0c:b2:5a:d9:58:1c:3f:37:c2:d2:f5:b6:4d:4e:51:
                    a5:bb:b3:33:0d:65:f9:d2:a4:e3:15:66:bc:bb:9f:
                    e9:1f:cb:7b:a8:39:94:d1:4d:ea:a7:0c:e6:c2:39:
                    58:a6:db:48:53:e4:dd:a5:87:1b:4d:4d:3f:dc:86:
                    86:a4:9d:1f:6a:5c:ae:57:1e:ef:58:0d:73:5b:00:
                    4a:ec:7f:37:b8:a6:85:68:1a:2e:c7:3c:eb:f9:97:
                    85:73:04:9a:4f:73:31:5e:5c:ce:33:9e:ff:96:33:
                    ca:bb:dc:9b:a6:9c:1b:6c:f9:3e:e4:34:6c:68:5b:
                    5a:6a:2c:5a:49:e4:68:1f:e1:80:6a:b2:34:e0:7c:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:43:71:7D:65:56:25:A6:E6:C5:F5:41:74:51:EE:07:D5:EE:AF:49
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:5b:36:69:54:47:b6:97:50:4c:f0:2c:1f:4b:87:bd:56:
         5f:c6:1c:20:0e:47:f6:a0:c5:ed:14:aa:29:07:f2:ea:da:ea:
         3c:75:03:82:7d:78:25:7c:87:2b:f5:89:ea:33:47:7f:fb:d2:
         cf:e3:0d:3e:c6:36:2d:a3:ce:97:31:b1:93:14:12:27:6d:94:
         90:27:8d:99:b1:f0:25:74:21:e5:35:a4:aa:98:57:40:22:89:
         c9:da:8c:f2:0d:f4:d9:c9:6a:c6:f6:eb:60:c7:1b:89:8c:dc:
         a9:45:4c:0f:90:e9:49:ea:e4:88:b7:87:31:a2:87:57:ac:b2:
         54:bf:51:42:13:e7:90:a8:27:ce:4f:6d:b4:34:a7:7b:a9:e2:
         4d:ec:eb:20:fe:1c:09:4b:1e:ae:5e:f9:fb:a1:9e:0a:0d:cd:
         fe:58:57:2e:32:19:13:1b:d7:2f:e4:e4:c5:01:d0:54:96:6f:
         6a:f4:3e:64:60:20:9f:13:b2:70:71:c7:4c:b1:9b:25:33:94:
         bf:5b:18:02:a2:0a:98:7c:06:02:5e:28:07:71:ef:4d:f4:ce:
         0f:33:f1:7e:89:6b:22:fe:f3:71:e2:db:ba:0e:97:5b:67:86:
         08:46:a1:bd:b1:e9:25:7e:46:da:34:b4:3e:2f:dd:7f:94:c6:
         e0:33:d9:11
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCB41vl7ex2qd9HOZZbuu8bXf5pYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTAzMjAxOTE1MDBaFw0yNjAzMTkxOTIwMDBaMDMxMTAvBgNV
BAMTKDFDNDM3MTdENjU1NjI1QTZFNkM1RjU0MTc0NTFFRTA3RDVFRUFGNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3H4mINhxa3K8guMgRT2WYRA69
fstMWg1YUqfA2AA1i66J48W94C49FI0U2jACOShqghd9eD1W+91Icrg1+sranCN/
xBJuD2VLLA1/UNBdoE5hWNtFML49BNgLeCzzCRv3l46Bm271c99Pd8V1LQkeSwFy
GWp+CQyyWtlYHD83wtL1tk1OUaW7szMNZfnSpOMVZry7n+kfy3uoOZTRTeqnDObC
OVim20hT5N2lhxtNTT/choaknR9qXK5XHu9YDXNbAErsfze4poVoGi7HPOv5l4Vz
BJpPczFeXM4znv+WM8q73JumnBts+T7kNGxoW1pqLFpJ5Ggf4YBqsjTgfERnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHENxfWVWJabmxfVBdFHuB9Xur0kwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMxMzkzMDJlMzgzODJlMzEzMzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5YijAN
BgkqhkiG9w0BAQsFAAOCAQEApDFbNmlUR7aXUEzwLB9Lh71WX8YcIA5H9qDF7RSq
KQfy6trqPHUDgn14JXyHK/WJ6jNHf/vSz+MNPsY2LaPOlzGxkxQSJ22UkCeNmbHw
JXQh5TWkqphXQCKJydqM8g302clqxvbrYMcbiYzcqUVMD5DpSerkiLeHMaKHV6yy
VL9RQhPnkKgnzk9ttDSne6niTezrIP4cCUserl75+6GeCg3N/lhXLjIZExvXL+Tk
xQHQVJZvavQ+ZGAgnxOycHHHTLGbJTOUv1sYAqIKmHwGAl4oB3HvTfTODzPxfolr
Iv7zceLbug6XW2eGCEahvbHpJX5G2jS0Pi/df5TG4DPZEQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:22 2025 by rpki-client