Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32312d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233322e302f32312d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          GKO81K3McZmAhOUUj47Mq8Pu4XI6g/qlydqnvy9+o+0=
Subject key identifier:   B1:D2:44:60:86:9A:86:09:E0:AE:7C:4E:CB:42:3D:CC:9F:98:AF:51
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       2A3A8F1F830836862764DB210F3EA815CA5E7779
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32312d3234203d3e20323633323435.roa
Signing time:             Tue 04 Feb 2025 18:51:09 +0000
ROA not before:           Tue 04 Feb 2025 18:46:09 +0000
ROA not after:            Tue 03 Feb 2026 18:51:09 +0000
asID:                     263245
IP address blocks:        190.107.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3a:8f:1f:83:08:36:86:27:64:db:21:0f:3e:a8:15:ca:5e:77:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Feb  4 18:46:09 2025 GMT
            Not After : Feb  3 18:51:09 2026 GMT
        Subject: CN=B1D24460869A8609E0AE7C4ECB423DCC9F98AF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:ca:20:ec:c5:35:cd:7b:0e:8e:d5:d0:cd:
                    3d:b4:61:33:d8:84:e2:29:c4:e9:e1:22:e6:07:f1:
                    5c:f1:7d:a7:23:ba:35:ef:89:27:f4:19:49:58:2c:
                    06:33:ed:d7:6d:79:0b:ab:86:91:ae:99:be:02:a9:
                    ff:8a:03:0e:9e:8a:a2:37:47:16:ab:9f:5b:df:77:
                    7b:f9:44:6a:54:54:8a:2c:0a:4d:7d:79:9c:b4:ff:
                    98:5c:f6:5d:db:82:5a:6a:24:19:96:c5:8c:e9:1c:
                    47:42:99:d7:2e:a5:10:76:e5:79:aa:7a:66:37:19:
                    86:03:e2:9a:f7:17:07:ec:c4:8e:48:6f:92:c4:37:
                    06:a8:4a:40:fd:b2:d7:03:7f:a9:f5:36:ee:ae:5a:
                    8a:05:e6:31:b5:c0:cb:ba:62:95:73:a7:57:d8:17:
                    bf:ce:3e:22:48:57:de:5d:50:d9:6b:60:b6:5f:01:
                    e7:a3:94:f7:9a:0b:0c:b4:1b:48:e6:47:f2:9e:a8:
                    23:8e:6d:2d:c9:cf:02:c6:0b:26:34:2e:86:82:51:
                    16:37:4c:c0:3d:23:09:eb:81:85:53:3e:e7:72:dc:
                    5c:5b:1f:a7:20:36:1d:2c:c3:39:7b:11:38:4e:57:
                    67:99:03:92:60:19:a9:9a:1e:85:21:33:7a:41:0a:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:44:60:86:9A:86:09:E0:AE:7C:4E:CB:42:3D:CC:9F:98:AF:51
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32312d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:75:47:df:25:dd:4f:62:e1:9c:33:e9:ba:73:82:1e:0d:
         7d:dd:50:a8:9c:bc:6a:82:ed:68:51:ff:72:ca:7a:b9:ff:ac:
         0e:d2:45:97:76:43:bf:81:e8:03:58:5b:a0:83:e5:9c:bf:7f:
         5c:68:fa:ab:ac:c6:84:e0:92:e2:3c:9d:b4:a4:1a:7a:95:e6:
         f6:98:03:e9:85:08:fe:dc:1e:46:9b:8f:3d:f7:67:5d:b2:88:
         cf:f4:da:f5:e0:0f:67:b6:3d:22:f9:36:5e:e8:f3:7f:a4:77:
         b7:da:5e:d7:35:12:b5:80:6e:84:18:f6:a4:1e:e2:cc:d8:b1:
         04:a6:ab:c5:f8:d1:15:09:da:32:d3:0e:3e:db:58:ff:cf:b8:
         6c:cb:6b:76:85:a5:9d:30:b2:59:1e:55:37:28:36:52:05:f7:
         0f:1f:c8:25:59:19:03:0e:0a:e3:05:06:8c:db:56:7a:70:7a:
         2c:bd:b5:85:5b:9b:d2:e2:72:ff:1b:d8:de:92:cf:30:f6:58:
         6c:f1:d5:08:c0:32:bf:4e:5a:e3:0a:17:31:3c:a3:7a:b1:80:
         e4:32:fc:fa:f6:ea:58:2d:ff:91:4e:40:f6:d7:ea:cb:9c:45:
         ee:95:f0:42:87:28:7e:3c:54:84:1a:d0:fe:d7:a7:fe:cf:00:
         56:cd:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:06 2025 by rpki-client