Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e32332e302e302f31362d3234203d3e203237373638.roa
File:                     3139302e32332e302e302f31362d3234203d3e203237373638.roa (raw, json)
Hash identifier:          nhT1rl70r6gxJ970uWHU60OTBBgTXJIZp8QWkL4O8A4=
Subject key identifier:   D9:38:FF:C5:8F:F1:FB:4E:3A:F8:68:90:46:98:85:C0:ED:8F:5D:43
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       16CAC8DD86AB1036421D360864FC1A17060421BB
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e32332e302e302f31362d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:16 +0000
ROA not before:           Tue 04 Feb 2025 18:26:16 +0000
ROA not after:            Tue 03 Feb 2026 18:31:16 +0000
asID:                     27768
IP address blocks:        190.23.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ca:c8:dd:86:ab:10:36:42:1d:36:08:64:fc:1a:17:06:04:21:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:16 2025 GMT
            Not After : Feb  3 18:31:16 2026 GMT
        Subject: CN=D938FFC58FF1FB4E3AF86890469885C0ED8F5D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:57:78:d7:85:df:f6:37:07:f6:d9:0a:e1:
                    eb:5d:c1:b1:3c:d7:a1:53:8c:e5:ae:db:f2:1c:7e:
                    2a:0c:d5:63:7d:e7:08:01:82:ef:05:22:d4:97:4c:
                    e5:50:b0:9b:96:8a:38:26:23:7c:d0:fc:fc:c3:b8:
                    78:ef:12:25:cc:bc:74:df:0e:63:38:af:84:1b:c6:
                    9d:5c:4c:db:19:5d:14:6e:fe:0c:0e:05:3e:b1:52:
                    e3:02:50:18:8c:82:1c:14:55:e5:e7:92:e6:93:40:
                    85:9f:57:c1:77:e3:07:62:2f:c1:d5:24:36:87:83:
                    dc:82:d9:8b:78:f6:1e:f7:7d:07:b2:60:41:30:5d:
                    bd:9e:9b:ea:3d:c3:51:26:8c:39:a1:a1:c7:78:94:
                    f0:36:96:5f:83:4e:f1:13:8c:dd:ba:73:ba:b4:b6:
                    a8:81:14:b1:82:0f:16:74:a7:66:17:1a:e5:20:3a:
                    54:74:3f:98:bd:f1:82:33:02:a7:be:87:06:4b:bb:
                    f2:c5:ff:34:d8:73:9c:c5:c1:a3:06:4b:2b:15:30:
                    d8:c5:c7:07:14:fe:fa:27:55:7c:d3:9b:9d:db:6f:
                    7d:02:60:2b:c2:a4:93:ce:c2:58:7f:76:6a:19:a1:
                    54:51:79:13:81:44:70:4f:c7:ed:ed:a1:75:bc:b4:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:38:FF:C5:8F:F1:FB:4E:3A:F8:68:90:46:98:85:C0:ED:8F:5D:43
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e32332e302e302f31362d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:23:49:98:77:38:0f:1f:80:f8:fe:6f:41:9c:c8:f0:d2:ee:
         f0:be:3e:ac:92:2b:72:87:17:55:44:7b:08:96:e6:5a:c5:0b:
         5e:84:c8:01:8a:0c:47:50:70:fa:95:e3:92:b5:d9:8c:3e:d0:
         b1:28:48:73:02:8c:bb:4f:4b:55:02:f6:d0:9c:fa:71:b9:fd:
         c8:42:34:e8:46:60:1c:44:76:fe:dd:a6:e6:05:33:28:ea:f0:
         af:76:da:41:8f:2b:b4:76:d0:39:8b:31:d5:72:f9:62:76:f5:
         75:7c:5a:58:e2:7b:d5:d1:94:43:ea:40:3f:5b:af:b9:12:61:
         b4:ba:ec:46:ee:50:fa:12:85:69:ea:44:1e:45:82:fe:29:96:
         1b:6a:82:1f:aa:1d:5e:d7:1f:5c:9e:1a:a9:a7:40:43:ff:33:
         ce:30:30:cb:24:26:06:9c:b7:79:c2:9c:3a:59:19:2c:81:ed:
         6c:6e:2e:b0:87:cc:a7:59:31:ba:6c:43:15:16:9c:f1:60:ad:
         a4:48:d6:9b:8c:24:f6:45:c7:6a:a8:70:7f:1c:b8:68:e7:a1:
         0f:0c:2b:a4:97:0f:00:75:f4:3c:38:58:5e:08:75:04:8c:77:
         13:62:1c:6f:01:1f:be:ca:ce:6a:88:a5:5e:f1:10:30:c6:11:
         e8:c6:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:05 2025 by rpki-client