Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133392e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133392e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          fT1Y0HpqRDY1ndssgVeGDJRblLGghQ3CHiea42rWC1U=
Subject key identifier:   C6:C0:8F:EB:C6:F7:14:56:A3:F5:50:BA:D6:8D:76:62:F8:CD:56:1B
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       13A06EE5210EBA1CD5987E7027B8D5E63330D77B
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133392e302f32342d3234203d3e203532323333.roa
Signing time:             Thu 20 Mar 2025 19:20:00 +0000
ROA not before:           Thu 20 Mar 2025 19:15:00 +0000
ROA not after:            Thu 19 Mar 2026 19:20:00 +0000
asID:                     52233
IP address blocks:        190.88.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a0:6e:e5:21:0e:ba:1c:d5:98:7e:70:27:b8:d5:e6:33:30:d7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar 20 19:15:00 2025 GMT
            Not After : Mar 19 19:20:00 2026 GMT
        Subject: CN=C6C08FEBC6F71456A3F550BAD68D7662F8CD561B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:36:a3:4e:36:fa:ba:c3:ff:9b:b9:ab:05:
                    0f:f6:d9:c7:0b:44:78:3f:ce:5a:96:2f:a8:e6:14:
                    d4:3f:62:b6:4c:94:10:ae:54:b0:aa:22:0c:55:07:
                    5d:64:a1:9f:7c:e8:2f:91:38:6a:a5:d1:37:80:a3:
                    07:9f:74:13:c7:86:79:47:d3:17:df:c5:53:ca:d8:
                    69:70:be:96:a8:1d:5f:ff:8f:f5:fd:3f:7f:44:9f:
                    eb:89:95:a9:b5:75:4e:a2:53:1a:50:f6:65:dd:5d:
                    63:74:1a:90:ff:af:d1:3a:4c:e3:c9:90:f5:49:f4:
                    08:5c:36:3e:fb:81:be:04:08:c4:82:d6:f7:85:c5:
                    33:76:37:58:1b:58:a1:5b:88:e6:06:38:40:a2:5a:
                    a6:82:26:a4:22:96:58:a0:5d:2a:b3:cc:4d:00:40:
                    fd:1b:ed:bb:c5:61:0f:25:e7:ae:19:f9:95:86:1a:
                    dc:86:e8:d1:d0:22:bc:45:a3:17:73:e9:a4:bc:8e:
                    e6:7a:8e:fa:e6:6d:b0:d8:cd:f7:67:03:35:db:a3:
                    5c:96:f3:7c:92:c3:3b:f5:a0:60:bc:6b:1f:da:ec:
                    b2:d4:03:83:72:51:3c:e0:7e:66:1f:99:94:a0:a6:
                    87:c6:21:de:51:14:59:7c:ca:97:4c:76:cf:ec:f2:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:8F:EB:C6:F7:14:56:A3:F5:50:BA:D6:8D:76:62:F8:CD:56:1B
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133392e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:8d:eb:ac:99:fb:28:1f:25:ed:4b:89:c6:60:04:61:bd:
         7c:d8:b6:f2:b6:15:19:69:83:e8:48:90:72:97:5b:f2:13:ad:
         cc:d4:3d:22:0c:85:ae:08:6c:05:fb:b7:b5:0a:d3:84:3e:b9:
         d6:ef:ef:f1:7d:96:ae:77:90:94:82:cb:96:f1:7c:88:c2:f9:
         cf:57:ae:1b:ee:e8:a4:aa:be:b2:68:06:8d:7c:34:30:26:4a:
         e7:93:96:37:06:e6:e3:9e:cf:37:7e:c5:f5:6f:c2:7e:8f:dd:
         52:5d:5a:e9:e9:10:c5:10:4f:60:69:06:0b:f4:20:ef:a5:77:
         9e:c5:a2:ef:21:94:e8:8d:5c:5b:3b:c0:14:0e:06:bd:e8:66:
         70:54:52:5f:af:de:99:42:bc:88:75:fc:1e:90:c6:b3:e7:27:
         84:83:05:20:61:55:6e:77:2a:cf:05:1e:d6:3c:17:c9:50:bf:
         d0:a9:52:64:37:49:1c:41:85:8d:c4:5c:33:05:98:44:9b:3e:
         87:28:31:d1:a2:fd:3c:4d:05:2e:e2:57:52:9a:2a:f6:58:3d:
         4b:38:59:10:a3:95:5b:25:b1:2f:37:09:40:fa:d6:c6:2f:05:
         7b:d2:5f:ec:90:0a:51:9a:ae:b7:12:f4:95:da:a7:3d:79:61:
         ad:31:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:32 2025 by rpki-client