Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          IO7YZm43HyjPC/udI9prLGOpVtFyI+A4NvP10fehzIk=
Subject key identifier:   0B:F6:A2:82:9C:21:BF:9E:41:7D:4B:78:B1:8E:4C:81:D4:D6:D0:C7
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       6E48EA2AB60CED1037A7F78683F2C5CD9CCF35BB
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 04 Feb 2025 18:51:08 +0000
ROA not before:           Tue 04 Feb 2025 18:46:08 +0000
ROA not after:            Tue 03 Feb 2026 18:51:08 +0000
asID:                     263245
IP address blocks:        190.107.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:48:ea:2a:b6:0c:ed:10:37:a7:f7:86:83:f2:c5:cd:9c:cf:35:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Feb  4 18:46:08 2025 GMT
            Not After : Feb  3 18:51:08 2026 GMT
        Subject: CN=0BF6A2829C21BF9E417D4B78B18E4C81D4D6D0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:c0:27:65:85:91:5a:5b:af:e0:93:ad:0e:
                    62:ba:93:f3:02:3b:e3:03:1c:fb:14:34:52:8f:a1:
                    9f:6f:98:a0:64:95:39:5f:b0:be:80:58:09:a8:6a:
                    f8:86:87:be:e9:1a:c7:d6:73:5f:bd:de:4e:3a:e8:
                    c8:7d:8f:69:67:41:cc:a7:3d:18:94:25:21:2d:5e:
                    fb:b9:6f:35:6d:01:6c:1f:7c:58:df:79:a5:ed:75:
                    2a:0c:be:f6:4c:72:a4:e1:cd:d0:80:15:46:ac:77:
                    3f:bd:bf:75:25:28:36:b7:28:d8:e6:cd:1c:c6:3d:
                    57:81:60:ea:cb:67:1e:5d:dc:24:d8:9e:65:18:2e:
                    7a:cf:8d:65:6b:15:70:30:11:47:6d:d0:85:d8:f6:
                    9c:1e:4b:9a:1f:9f:85:e9:d4:4f:db:59:47:0b:b0:
                    bc:a6:35:92:79:28:83:f6:be:2c:66:da:6e:fe:78:
                    c3:9c:95:29:bc:cf:7b:cc:de:3c:b9:e2:4a:dc:64:
                    1c:f2:af:b1:31:be:1e:59:80:f9:5d:8b:dc:b6:c2:
                    7f:07:07:41:00:b3:88:de:d2:87:dc:43:d0:91:7e:
                    39:db:87:55:28:29:87:73:78:ba:5a:da:fa:9f:c7:
                    7e:e9:e2:9c:e1:28:6c:19:a7:6d:1d:e4:b6:aa:0c:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F6:A2:82:9C:21:BF:9E:41:7D:4B:78:B1:8E:4C:81:D4:D6:D0:C7
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:dd:a2:e6:39:e7:3f:61:a0:2f:60:15:75:15:e0:7b:4a:
         5b:cd:7a:ba:c6:74:32:a4:26:66:ee:19:ec:87:ba:76:17:49:
         5d:66:d4:92:d6:da:b5:c7:91:94:39:35:50:b8:0b:1c:7f:ed:
         6b:4f:6f:be:74:62:32:bf:71:75:99:ad:17:b8:8d:a7:9d:a6:
         7c:eb:e2:c2:8d:63:f3:28:5d:77:df:08:e0:56:67:a9:49:f4:
         aa:e8:a3:e6:83:f3:6d:5c:35:04:c7:70:76:09:f8:16:89:be:
         d2:4d:bc:4a:78:53:e6:fb:86:9a:90:b7:d1:5a:10:d8:56:4b:
         52:8e:da:b3:29:02:be:cd:83:01:cc:f3:8e:31:40:7e:12:53:
         c2:96:d9:b7:0a:1c:0e:1a:a9:58:3d:9c:32:dd:38:0b:65:8b:
         f9:06:a7:51:e3:25:6a:43:15:5c:f8:d0:0d:17:66:c8:b2:c3:
         21:78:85:5c:09:47:56:c6:47:06:09:c4:88:7a:b7:65:39:b9:
         57:ae:33:fa:fd:65:0b:3f:c2:16:89:d5:5e:79:1e:68:73:3a:
         10:7e:67:90:de:2e:ba:44:74:f6:8e:a7:36:ac:40:7d:59:e0:
         84:1e:42:72:cf:cb:2a:3a:84:16:7a:2b:81:83:3b:8e:11:f9:
         59:51:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:51 2025 by rpki-client