Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20323730303339.roa
File:                     3139302e3132302e3232382e302f32322d3234203d3e20323730303339.roa (raw, json)
Hash identifier:          DUzRlu86ABE1AtLv3BgitdQM8QuiydeyIf81xqwRhKM=
Subject key identifier:   E7:BB:CA:4E:E9:83:28:A2:E0:FF:C1:6E:72:23:90:78:D9:9A:14:5B
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       277ED20CB603B1F67A989C99B9237A524A3AA4AE
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20323730303339.roa
Signing time:             Tue 04 Feb 2025 18:48:21 +0000
ROA not before:           Tue 04 Feb 2025 18:43:21 +0000
ROA not after:            Tue 03 Feb 2026 18:48:21 +0000
asID:                     270039
IP address blocks:        190.120.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7e:d2:0c:b6:03:b1:f6:7a:98:9c:99:b9:23:7a:52:4a:3a:a4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Feb  4 18:43:21 2025 GMT
            Not After : Feb  3 18:48:21 2026 GMT
        Subject: CN=E7BBCA4EE98328A2E0FFC16E72239078D99A145B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:ea:cd:54:78:cb:dd:db:b3:01:9d:10:97:
                    35:bd:5b:de:35:f0:14:06:72:56:12:db:93:4b:9b:
                    38:c0:6a:bf:77:28:95:50:b8:60:16:1c:ff:42:99:
                    14:ca:f7:c4:06:1e:91:f9:2e:80:0a:7f:32:ec:87:
                    a6:b4:ee:55:3f:e4:76:24:a4:1a:53:07:d2:88:49:
                    ee:c1:89:c0:84:48:59:04:c3:fe:a6:b0:22:93:b7:
                    90:c4:7b:f5:a1:f5:a8:54:cc:c1:de:55:10:4b:3b:
                    fc:03:e2:4a:ff:7b:8c:de:23:66:17:2e:4f:4c:6c:
                    9e:85:71:69:cc:46:9f:d1:fa:04:c7:7f:eb:a9:1f:
                    b2:6e:c8:20:75:81:e5:9a:87:dd:be:79:24:31:61:
                    ca:fb:42:64:66:2e:bc:b7:f5:8e:70:4f:89:a9:c0:
                    64:5e:8f:28:ff:cd:f8:17:4b:db:a4:9d:72:c1:28:
                    38:cd:65:53:50:cb:bf:d0:0f:96:25:a4:e0:56:c1:
                    56:9f:69:e1:eb:d8:10:29:ff:ea:6d:7c:f8:4f:ca:
                    5f:23:31:24:1b:8f:32:a8:2c:8f:3f:9e:ea:d3:e4:
                    17:9b:57:e1:bf:a4:a2:97:4d:73:5b:59:88:23:ac:
                    68:e2:7c:ac:08:e6:39:54:b9:35:b5:c2:97:50:d3:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:CA:4E:E9:83:28:A2:E0:FF:C1:6E:72:23:90:78:D9:9A:14:5B
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20323730303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:a0:99:10:3b:10:62:67:6e:35:50:1a:fe:fe:8a:70:b7:65:
         38:dd:f0:46:4c:c8:fd:4c:a8:8c:d0:94:56:af:84:63:fc:7d:
         7b:71:35:b7:eb:35:ce:69:d0:b8:54:0c:9d:f6:65:94:65:77:
         4e:ff:0a:f8:2f:e1:47:3e:de:91:f7:83:85:15:d9:3d:b5:6b:
         e9:d9:89:b1:46:c9:54:bb:70:bb:66:e6:a2:91:2a:95:96:91:
         55:da:70:b0:c1:d6:bd:9f:4e:c8:90:9a:55:a5:15:e2:66:8a:
         a0:33:91:6a:57:f9:d2:b6:df:d8:d8:2f:c0:12:01:0a:c9:8b:
         27:83:13:ed:1c:84:ae:59:0a:6b:a0:d4:3c:80:98:73:f5:62:
         8c:12:05:09:51:7d:c9:82:21:b2:a6:cb:b6:19:7e:99:49:e8:
         60:a3:27:dd:99:82:cb:6c:ad:d5:dc:16:be:13:20:25:87:7e:
         fa:58:3e:62:a6:5e:a7:e1:e6:02:1e:41:ce:a7:27:00:51:d6:
         94:e8:e1:1a:91:b5:a0:9d:b7:07:e7:11:30:f5:96:74:d8:d7:
         27:37:32:83:f2:9b:64:e4:3e:8c:1b:19:9f:0e:3f:cd:c2:42:
         ab:1b:a0:0d:04:92:b1:07:28:e4:20:07:8b:7c:0d:06:75:c5:
         1a:0c:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:16:28 2025 by rpki-client