Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa
File:                     3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa (raw, json)
Hash identifier:          Rd0MAAjQ8s96S6QUdsiUy/WxJ2VlaYgHMuANIcB3/Rs=
Subject key identifier:   DA:3B:82:28:A0:7B:09:62:80:E4:A7:FE:73:E6:53:D8:CF:CD:FE:B6
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       3E62650B0F6606FB72CBE986FD572C99DF5074EE
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa
Signing time:             Tue 04 Feb 2025 20:06:21 +0000
ROA not before:           Tue 04 Feb 2025 20:01:21 +0000
ROA not after:            Tue 03 Feb 2026 20:06:21 +0000
asID:                     272818
IP address blocks:        190.121.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:62:65:0b:0f:66:06:fb:72:cb:e9:86:fd:57:2c:99:df:50:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Feb  4 20:01:21 2025 GMT
            Not After : Feb  3 20:06:21 2026 GMT
        Subject: CN=DA3B8228A07B096280E4A7FE73E653D8CFCDFEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:7c:6d:44:59:35:3d:0c:0d:75:37:2a:82:
                    0f:1a:3c:ab:60:e6:f3:7f:e3:47:00:5f:c6:43:ce:
                    f3:5c:41:e2:ef:9e:ae:ec:22:b1:d6:24:d2:dd:3d:
                    f3:f2:15:70:8d:79:79:36:fa:b9:1f:3b:97:cd:15:
                    54:ec:0e:28:bb:ee:11:3d:d6:09:a8:30:2c:d5:3a:
                    74:4c:4b:e9:7d:2d:cf:75:e7:41:e0:73:6c:35:62:
                    05:82:16:a4:a8:14:1d:44:75:41:54:2f:c0:03:56:
                    a5:f1:b0:29:78:05:c7:49:d1:5d:c7:a8:7b:bb:41:
                    9f:2c:ed:4a:dd:7f:e0:24:33:a8:79:5e:4e:01:b4:
                    6c:e0:fa:58:17:27:d2:ac:e0:e8:b1:2c:d8:c8:9b:
                    42:a0:b2:86:ed:70:07:f5:6e:a4:42:cf:44:03:02:
                    2e:39:57:ea:16:1d:d6:74:a1:1e:ad:23:9e:04:b5:
                    80:2c:7f:2c:a8:c0:d2:97:da:4a:7a:ff:f2:17:c3:
                    92:d4:ac:88:e2:28:a7:ad:2e:ce:19:c7:da:d1:fc:
                    33:3c:97:2c:34:6c:23:f2:72:2b:30:5e:27:f6:c7:
                    bc:92:13:dd:5d:f9:9c:49:44:ee:83:1a:54:86:be:
                    e2:df:fd:01:8d:13:ac:0a:2b:dc:27:ba:61:d3:e1:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3B:82:28:A0:7B:09:62:80:E4:A7:FE:73:E6:53:D8:CF:CD:FE:B6
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:f8:2b:36:55:c1:8f:f3:fa:ee:b6:ec:a8:c1:6a:ec:eb:
         b3:ee:ba:ed:c2:21:d0:30:8f:6d:3f:f2:d1:9b:ea:73:f3:45:
         9e:1d:dd:e1:07:cd:7c:8e:c7:c7:56:64:6b:a8:c7:5f:20:a2:
         6a:af:ae:84:97:eb:a7:07:b2:29:fe:78:6f:37:a4:1c:2f:80:
         0e:61:b1:9e:1e:3b:8f:1b:81:e5:33:97:10:6b:20:ef:13:18:
         aa:47:7f:9e:fd:ef:96:14:27:76:43:42:05:43:b0:39:7e:62:
         a9:dc:b7:a5:56:92:e4:15:15:2e:f9:09:19:89:40:2b:60:73:
         1c:1c:59:be:39:32:c6:95:2a:5a:6e:d2:30:93:c5:8d:cd:86:
         bd:a0:ce:43:2e:50:d4:02:dc:0f:cf:4a:9a:72:be:dc:50:8a:
         fc:24:80:61:fe:ec:9a:0f:5a:31:89:a8:62:b1:7c:35:6e:14:
         04:06:b7:a2:aa:d1:d2:b0:8f:87:f9:b7:56:be:ee:a7:9c:85:
         d5:50:d4:07:dd:15:12:76:9a:cd:e6:df:32:3a:e1:55:d8:bb:
         88:b2:52:8d:96:96:ea:7f:81:53:e4:f6:ec:72:6f:78:37:4a:
         cf:15:42:0f:d6:ef:dd:08:75:5b:ee:0b:5f:54:fb:a5:a8:ba:
         dc:2e:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 01:07:03 2025 by rpki-client