Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233342e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233342e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          GiwxhpQ4dnRI717Uz1L0IEsxsl+P4BxIf5IQeDTUfDo=
Subject key identifier:   57:E9:02:70:0F:C6:4D:3F:DE:CF:D2:8F:B5:A5:62:79:EC:FE:0C:AE
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       7D0D761E5E426B58A2F7DE93420E0B24A513D9FA
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233342e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 04 Feb 2025 18:51:11 +0000
ROA not before:           Tue 04 Feb 2025 18:46:11 +0000
ROA not after:            Tue 03 Feb 2026 18:51:11 +0000
asID:                     263245
IP address blocks:        190.107.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0d:76:1e:5e:42:6b:58:a2:f7:de:93:42:0e:0b:24:a5:13:d9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Feb  4 18:46:11 2025 GMT
            Not After : Feb  3 18:51:11 2026 GMT
        Subject: CN=57E902700FC64D3FDECFD28FB5A56279ECFE0CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:6d:56:e3:7b:88:3a:8c:58:f1:61:09:29:
                    87:7a:c5:c1:56:b4:1c:b3:20:5d:b1:0d:2b:92:1d:
                    c2:b7:3d:07:0d:4c:d1:14:c8:9e:4e:6b:0a:2b:ba:
                    13:56:c1:31:7d:73:45:b0:b1:0a:25:e9:81:02:08:
                    3c:2b:66:c6:9f:26:e9:74:84:0d:d0:a9:0e:6a:7d:
                    65:96:46:b2:14:bf:d0:6d:c8:8e:4c:3c:e0:11:9e:
                    e4:bb:29:d1:c0:34:b1:d6:3b:16:c3:18:46:5a:c4:
                    7b:3c:ef:e7:a9:41:41:1f:b5:97:8c:e1:78:91:c3:
                    8b:bc:af:12:af:0b:3f:3b:2d:1c:3b:5a:03:7f:2a:
                    43:56:eb:e1:b9:ed:0d:dc:51:c1:84:ee:1b:f1:7a:
                    e6:f8:64:e4:ee:61:29:28:f9:b8:59:4d:bb:8c:6f:
                    d9:cf:3e:f2:4c:5d:dc:d3:74:70:db:d9:2e:a9:72:
                    42:73:77:10:36:e7:7a:7a:a5:6b:3e:bb:5c:45:b4:
                    43:fc:3f:70:54:aa:ef:26:26:33:8b:2d:94:a2:f7:
                    38:83:46:e6:36:3f:e4:7c:16:72:75:1c:71:b7:91:
                    fa:33:6b:5e:9c:4c:b3:00:2d:a7:89:2e:b4:02:1f:
                    81:69:b2:75:21:6d:ec:d0:1c:1e:0b:78:84:4b:bc:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:02:70:0F:C6:4D:3F:DE:CF:D2:8F:B5:A5:62:79:EC:FE:0C:AE
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233342e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:85:e7:60:e2:d7:32:03:8c:c2:a2:34:4c:ec:1a:2a:9c:02:
         40:7f:b9:6e:11:d2:8e:ee:e3:e5:be:0a:39:d7:56:ee:de:d3:
         98:de:ba:e2:85:4c:43:46:7b:99:82:f3:a7:33:aa:80:b3:ab:
         78:b7:1b:e4:18:ce:67:a4:12:ff:ae:f9:82:c4:c4:84:a6:70:
         6a:b8:71:44:e6:c3:6a:07:53:b9:04:14:12:ad:0f:50:e2:7d:
         80:d3:39:af:0a:af:57:ac:a2:d0:18:5c:75:97:67:a6:56:30:
         7d:11:74:af:7d:52:24:a0:a8:f0:3f:94:0f:c1:10:58:75:0a:
         ba:b5:94:7f:8a:ce:a1:18:e6:f7:48:56:2b:7d:6b:3e:2b:a0:
         a6:62:47:2e:91:44:50:2f:36:17:15:e8:1f:8b:1d:0a:58:c6:
         70:82:c1:7a:d3:c6:c5:26:5e:52:87:7c:15:09:f8:79:9a:59:
         aa:a7:30:76:e0:df:40:16:d9:24:5e:24:f4:68:4a:76:84:42:
         a9:fb:f7:18:e9:e1:45:37:54:b2:34:ed:56:2d:e6:18:29:8c:
         a6:7e:40:66:93:bb:27:48:30:db:c4:01:9d:19:3f:a3:d9:41:
         15:da:aa:c9:fe:88:c9:db:02:c8:aa:49:bf:ce:a3:1d:53:08:
         58:5c:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:07 2025 by rpki-client