Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e31362e302f32302d3234203d3e203532323333.roa
File:                     3139302e38382e31362e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          yqlxkYwtRjef1BJvs0JNcUCfbM8XqwrDlj0d35dTevc=
Subject key identifier:   DF:A3:E1:52:F8:55:C4:8D:11:C6:93:6C:D2:22:52:44:92:DD:D9:83
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2D9C2C55A41F261FDAF4BAA40B264836D7981294
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e31362e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 04 Feb 2025 18:50:49 +0000
ROA not before:           Tue 04 Feb 2025 18:45:49 +0000
ROA not after:            Tue 03 Feb 2026 18:50:49 +0000
asID:                     52233
IP address blocks:        190.88.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9c:2c:55:a4:1f:26:1f:da:f4:ba:a4:0b:26:48:36:d7:98:12:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:49 2025 GMT
            Not After : Feb  3 18:50:49 2026 GMT
        Subject: CN=DFA3E152F855C48D11C6936CD222524492DDD983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:a1:88:d0:4d:e1:13:ec:8c:2a:86:dc:9a:
                    a2:c1:1c:7f:3b:4e:cb:9e:7b:4c:3a:68:ee:2a:f7:
                    03:11:86:7b:3f:55:7e:16:a4:de:fc:18:09:31:05:
                    b1:f7:03:f4:f4:9c:10:53:0d:da:31:02:5e:29:8f:
                    41:28:9e:56:cf:79:8c:43:40:46:78:77:c8:39:17:
                    99:93:56:ba:35:6e:01:9e:00:c3:6c:47:a3:d6:b9:
                    1a:60:14:77:b2:66:33:cc:68:0c:5b:6e:cb:58:6a:
                    91:64:8d:3f:25:8f:5e:35:bd:d8:8b:aa:90:a3:d1:
                    dd:51:3e:ac:8a:09:ff:17:63:8d:30:d0:b5:b1:c6:
                    b9:44:2f:dc:86:b5:4d:1e:1e:96:45:32:dc:e8:6b:
                    d4:58:f6:82:32:68:71:32:44:eb:48:5c:08:9b:ca:
                    91:d6:72:7a:09:11:34:e7:5d:6d:d0:50:d3:d3:e9:
                    92:d0:71:39:b3:dc:00:70:e6:5a:db:39:1a:d0:e3:
                    bd:6a:f3:a2:27:e4:c4:59:b9:a6:55:a3:a2:e7:5d:
                    02:a9:10:93:38:c1:a4:2e:ae:a3:53:2c:4e:79:5d:
                    f3:95:fb:49:66:f3:c1:86:07:e1:41:7f:51:d5:20:
                    61:de:91:ee:07:87:c2:f8:c7:17:a5:45:a5:83:4c:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A3:E1:52:F8:55:C4:8D:11:C6:93:6C:D2:22:52:44:92:DD:D9:83
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e31362e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:35:b9:8d:f2:7b:20:bb:1c:1e:46:d0:c1:c8:d6:09:f5:
         22:dd:04:87:5f:8e:c4:c4:09:2d:9c:12:c1:77:95:1d:36:e9:
         85:da:25:5b:66:05:2b:b8:7e:85:20:e3:c8:44:77:79:e4:3b:
         5c:de:72:82:1c:2c:e8:9d:3d:cf:b1:b2:49:ea:37:cc:a4:ea:
         fd:a8:a3:58:c0:1c:85:b3:40:bd:a3:75:96:02:86:82:a5:09:
         ec:51:ab:8c:4e:67:70:16:f5:46:d6:d5:9a:3b:73:fe:2c:2d:
         01:3b:7d:8e:fc:de:4b:6a:4a:0b:00:3d:2e:ac:f0:af:f1:f5:
         de:12:0c:19:bf:71:a7:8b:04:91:62:6d:94:eb:6b:24:75:b4:
         72:38:2d:f4:a5:57:a8:6e:f6:06:9e:ed:09:86:e1:38:ba:02:
         96:19:30:9c:f2:52:d5:b3:99:bc:bf:b4:40:b8:17:d1:1f:9a:
         2c:46:a5:f5:d4:43:a5:29:04:42:81:da:6c:ad:42:07:04:a0:
         2e:f4:d1:32:25:0e:35:a2:7a:f6:0a:73:a2:5d:c5:5f:11:39:
         13:30:52:d7:bb:4f:38:5c:51:30:49:8a:c6:67:ff:95:50:38:
         bc:26:94:f5:fe:fe:c4:e2:85:d2:19:1f:1a:58:91:d7:4b:0d:
         22:e1:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 14 14:58:29 2025 by rpki-client