Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa
File:                     3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          uLcwQGGN0dIeCkJenOLqW6ny6ydpvk9biK+IT9QVdnc=
Subject key identifier:   AF:42:82:3E:FD:DA:0C:46:AA:90:78:F4:69:0E:71:EE:30:85:87:58
Certificate issuer:       /CN=E10A7D4A0B75981E0FB5EA86605DC22332B137C0
Certificate serial:       0DB015F662E2F4AD1CD79C58F7FF1A77A949BC3A
Authority key identifier: E1:0A:7D:4A:0B:75:98:1E:0F:B5:EA:86:60:5D:C2:23:32:B1:37:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa
Signing time:             Tue 04 Feb 2025 18:54:25 +0000
ROA not before:           Tue 04 Feb 2025 18:49:25 +0000
ROA not after:            Tue 03 Feb 2026 18:54:25 +0000
asID:                     262197
IP address blocks:        190.113.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b0:15:f6:62:e2:f4:ad:1c:d7:9c:58:f7:ff:1a:77:a9:49:bc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E10A7D4A0B75981E0FB5EA86605DC22332B137C0
        Validity
            Not Before: Feb  4 18:49:25 2025 GMT
            Not After : Feb  3 18:54:25 2026 GMT
        Subject: CN=AF42823EFDDA0C46AA9078F4690E71EE30858758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:1b:8d:d5:85:30:83:a9:c7:65:f9:94:c2:
                    88:05:1c:6d:00:ed:c6:b2:30:9e:1a:9a:79:08:23:
                    c6:29:9c:3b:54:2c:8a:cc:20:1c:45:3c:50:38:fa:
                    1e:c3:be:c1:46:1f:28:47:1e:70:cb:2f:2e:ef:d0:
                    f0:f9:97:a3:4c:12:9e:13:b5:59:35:2a:d7:30:b9:
                    cf:41:5a:2f:6e:81:45:ee:dd:22:5b:e0:27:b2:ca:
                    b2:c3:92:ee:c1:b3:f4:98:88:8e:20:9e:c1:c6:f1:
                    2b:38:99:db:c2:2e:a7:d0:94:12:09:77:48:1e:4c:
                    3a:1c:e5:45:8d:3a:5f:94:2e:ae:d8:d2:81:7b:b7:
                    0e:43:86:1d:bf:b9:2d:09:13:13:96:40:cb:0a:6e:
                    3e:2f:94:26:7c:15:d8:93:9b:7f:43:d2:82:68:97:
                    04:5e:c5:88:d4:32:55:a4:dd:b8:fd:2b:68:b6:0d:
                    28:b7:07:a3:66:a4:de:40:80:b7:14:e6:78:73:6d:
                    6a:db:3f:ee:c5:af:29:46:82:5d:3e:d4:fa:0d:47:
                    26:d4:87:23:a2:34:0d:14:17:b6:e8:0b:3e:ac:b1:
                    4b:f2:f8:91:53:40:21:d6:95:53:e0:3a:1f:0c:49:
                    b7:95:9a:96:f4:b2:38:44:7d:aa:05:c5:b9:5c:dd:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:42:82:3E:FD:DA:0C:46:AA:90:78:F4:69:0E:71:EE:30:85:87:58
            X509v3 Authority Key Identifier:
                keyid:E1:0A:7D:4A:0B:75:98:1E:0F:B5:EA:86:60:5D:C2:23:32:B1:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:84:06:55:66:27:aa:c5:bc:3c:09:a4:94:0c:f9:f5:52:
         e1:50:e6:88:33:28:50:a3:0f:a4:2f:de:ba:c4:50:ae:12:42:
         d1:30:cb:5e:cf:95:ae:90:18:f9:27:a7:ea:db:0b:65:4f:ac:
         59:3c:d1:42:66:ea:8f:fe:ed:7d:3f:42:98:49:09:11:4b:63:
         f2:d3:d4:31:ea:5d:6e:de:26:07:0b:e0:b3:f2:c5:2c:c6:ae:
         23:b1:45:4c:12:ad:b6:13:c1:3e:7a:8b:2b:9f:93:3c:27:68:
         b7:da:6d:12:e7:f6:ee:83:93:90:d5:5f:3c:8a:92:bc:da:c2:
         4a:0c:b1:37:e6:bb:04:73:14:07:f2:99:2a:a5:39:78:3a:a5:
         c1:3a:b3:01:a2:3e:9f:76:9c:4a:e9:ae:3c:55:d0:96:f3:74:
         c4:7a:39:f6:4c:e8:d3:a4:96:fe:ae:d0:ab:9e:64:56:3a:f1:
         e0:36:d9:8d:ba:98:28:58:09:56:b9:d4:41:6e:37:ed:66:c4:
         4e:d4:89:de:48:ad:02:2d:05:42:ef:0f:33:bf:42:82:f3:a8:
         b1:2f:c8:87:69:af:ff:a1:5f:81:aa:32:8e:47:28:95:a4:b7:
         ff:ae:d0:b3:b2:94:48:20:67:16:b4:12:31:95:b5:73:03:ba:
         91:91:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:35:38 2025 by rpki-client