Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          8mlEwjVmBvsudX2Q/55tuG2JJI+RKpE2xQy/6o8Qzm0=
Subject key identifier:   FC:5F:17:A5:B0:BE:CD:14:12:9E:B1:C9:7D:D4:2E:E0:40:85:92:68
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       420331849B76DFDDDA66FD6C833C731127A21A44
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 04 Feb 2025 18:51:10 +0000
ROA not before:           Tue 04 Feb 2025 18:46:10 +0000
ROA not after:            Tue 03 Feb 2026 18:51:10 +0000
asID:                     263245
IP address blocks:        190.107.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:31:84:9b:76:df:dd:da:66:fd:6c:83:3c:73:11:27:a2:1a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Feb  4 18:46:10 2025 GMT
            Not After : Feb  3 18:51:10 2026 GMT
        Subject: CN=FC5F17A5B0BECD14129EB1C97DD42EE040859268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:58:90:33:e7:89:75:3a:3e:79:f4:e1:3e:
                    dd:c8:8a:50:08:46:4a:e1:ae:cd:44:36:77:b0:9e:
                    1e:17:16:60:0d:a4:31:88:a0:6a:ed:a8:e0:f2:f2:
                    da:cc:c9:38:1a:17:15:90:c9:58:87:06:e9:d2:00:
                    37:7d:bf:fc:a0:70:3e:3f:7e:79:43:c8:49:3c:b4:
                    de:fe:ee:5d:1b:43:d0:cc:90:83:29:fd:9e:f8:13:
                    a4:2a:2f:37:b9:98:e3:ea:ef:fc:4e:0e:1f:c3:ad:
                    d1:cc:40:af:9b:19:95:04:e4:04:ac:d5:d8:bb:7d:
                    19:f9:ad:28:97:99:4a:1c:eb:f9:55:05:36:5e:f0:
                    09:20:c5:4d:b7:74:d2:3f:54:4c:00:db:ff:db:42:
                    13:c5:3a:75:69:ed:6d:73:94:42:59:42:96:e1:f1:
                    0b:47:69:f7:54:ad:05:c0:e0:7f:ce:0a:57:6b:7c:
                    7e:72:81:8b:b1:7f:f5:8a:a5:e3:36:e8:40:7d:b8:
                    b1:17:48:5e:4b:52:33:4a:0c:cf:e0:84:a8:13:58:
                    61:ce:c9:fc:88:c2:7b:81:8c:d1:a7:ab:5d:89:40:
                    d1:7a:11:49:8c:37:05:09:a9:dc:68:28:b7:fb:f3:
                    4b:9b:25:1b:c8:c8:f0:df:96:9e:58:11:15:b6:ac:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:17:A5:B0:BE:CD:14:12:9E:B1:C9:7D:D4:2E:E0:40:85:92:68
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:d8:43:2c:80:e5:67:13:6c:26:68:8d:ac:f0:ac:e8:18:
         1b:41:d6:16:81:2a:04:70:30:22:25:36:be:02:50:ad:6d:f1:
         b8:83:2e:1f:84:a1:6e:98:fc:0c:29:8a:19:6b:3f:39:04:60:
         a4:40:a6:7f:bb:34:47:ed:c1:ee:b0:64:d2:4a:a0:75:10:22:
         48:9b:b5:b8:7e:c6:65:85:24:cb:d0:e9:9e:73:09:ca:2a:1d:
         ca:7e:dc:93:ee:36:82:9d:5b:68:60:a9:c3:f3:36:c0:24:21:
         aa:d0:b1:ba:3e:c6:45:f3:8a:c7:6b:82:b9:0b:c7:97:3c:4b:
         b4:e6:80:ea:40:a1:2f:be:b3:e7:a7:e5:cd:95:70:e2:5e:52:
         0a:93:6e:00:24:26:72:c0:1b:e2:c8:07:a3:3b:c8:5c:97:dc:
         24:9e:81:32:c3:94:b6:61:cf:9b:f9:66:08:cd:5d:40:91:62:
         d5:24:2b:f2:17:d8:db:5e:f4:35:06:e3:e2:96:30:98:8b:99:
         16:4f:22:a0:64:9e:5c:f3:ba:f7:a0:91:9b:8e:29:c0:78:7d:
         b2:1e:0e:83:2a:4c:e7:f8:8c:be:7d:7e:47:55:87:1b:63:14:
         96:af:54:a5:4c:a6:a2:46:0a:4d:10:ec:02:d1:64:53:ad:55:
         62:ab:b2:00
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQgMxhJt2393aZv1sgzxzESeiGkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBQjc3NzMwRDkxMjc4RDY1NkE5QjM1QjFFNTM0M0Yz
NTk4MDJBNDAeFw0yNTAyMDQxODQ2MTBaFw0yNjAyMDMxODUxMTBaMDMxMTAvBgNV
BAMTKEZDNUYxN0E1QjBCRUNEMTQxMjlFQjFDOTdERDQyRUUwNDA4NTkyNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdC1iQM+eJdTo+efThPt3IilAI
Rkrhrs1ENnewnh4XFmANpDGIoGrtqODy8trMyTgaFxWQyViHBunSADd9v/ygcD4/
fnlDyEk8tN7+7l0bQ9DMkIMp/Z74E6QqLze5mOPq7/xODh/DrdHMQK+bGZUE5ASs
1di7fRn5rSiXmUoc6/lVBTZe8AkgxU23dNI/VEwA2//bQhPFOnVp7W1zlEJZQpbh
8QtHafdUrQXA4H/OCldrfH5ygYuxf/WKpeM26EB9uLEXSF5LUjNKDM/ghKgTWGHO
yfyIwnuBjNGnq12JQNF6EUmMNwUJqdxoKLf780ubJRvIyPDflp5YERW2rMXpAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU/F8XpbC+zRQSnrHJfdQu4ECFkmgwHwYDVR0j
BBgwFoAUsqt3cw2RJ41laps1seU0PzWYAqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTQ5RDBGRjY3RTlBMjUzNjMyMzgyRDRFMkNENDQzQThE
MzBBN0FEMTcyOTUzQjAxRDM1Q0YyM0FBRkM0MTI5LzAvQjJBQjc3NzMwRDkxMjc4
RDY1NkE5QjM1QjFFNTM0M0YzNTk4MDJBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkFCNzc3MzBEOTEyNzhENjU2
QTlCMzVCMUU1MzQzRjM1OTgwMkE0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk0OUQwRkY2N0U5QTI1MzYzMjM4MkQ0RTJDRDQ0M0E4RDMwQTdBRDE3
Mjk1M0IwMUQzNUNGMjNBQUZDNDEyOS8wLzMxMzkzMDJlMzEzMDM3MmUzMjMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a+0wDQYJKoZIhvcNAQELBQADggEBAGi32EMsgOVnE2wmaI2s8KzoGBtB1haBKgRw
MCIlNr4CUK1t8biDLh+EoW6Y/AwpihlrPzkEYKRApn+7NEftwe6wZNJKoHUQIkib
tbh+xmWFJMvQ6Z5zCcoqHcp+3JPuNoKdW2hgqcPzNsAkIarQsbo+xkXzisdrgrkL
x5c8S7TmgOpAoS++s+en5c2VcOJeUgqTbgAkJnLAG+LIB6M7yFyX3CSegTLDlLZh
z5v5ZgjNXUCRYtUkK/IX2Nte9DUG4+KWMJiLmRZPIqBknlzzuvegkZuOKcB4fbIe
DoMqTOf4jL59fkdVhxtjFJavVKVMpqJGCk0Q7ALRZFOtVWKrsgA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:05 2025 by rpki-client