Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa
File:                     3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa (raw, json)
Hash identifier:          yrB/l0MxLVnwRds3mdsUMC0Y5ZI+kRtQ1bArHu/Ma8w=
Subject key identifier:   9A:F1:86:B0:3C:FB:94:C8:04:91:36:59:46:AC:34:10:14:9A:AD:59
Certificate issuer:       /CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478
Certificate serial:       1EC8AD5DAEE9D2B0312E8F8A11F4461EC053E58D
Authority key identifier: A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa
Signing time:             Tue 04 Feb 2025 18:29:03 +0000
ROA not before:           Tue 04 Feb 2025 18:24:03 +0000
ROA not after:            Tue 03 Feb 2026 18:29:03 +0000
asID:                     263224
IP address blocks:        177.91.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c8:ad:5d:ae:e9:d2:b0:31:2e:8f:8a:11:f4:46:1e:c0:53:e5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478
        Validity
            Not Before: Feb  4 18:24:03 2025 GMT
            Not After : Feb  3 18:29:03 2026 GMT
        Subject: CN=9AF186B03CFB94C80491365946AC3410149AAD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:32:5f:82:a8:15:be:47:bd:90:c9:5b:c1:
                    44:9f:5a:80:a7:0c:83:a1:dc:6d:c9:95:c2:38:76:
                    f8:a8:a9:a1:b4:32:35:13:dd:58:c8:68:63:a3:db:
                    1a:a6:f5:13:40:f4:fc:2e:fc:31:13:ac:e0:92:a7:
                    7c:74:db:10:cf:8d:f5:09:af:22:a2:e0:55:c6:7d:
                    f3:0b:55:47:2d:43:ae:b3:44:21:c0:b2:56:68:8c:
                    62:93:d3:9a:f7:5c:89:47:9e:6f:ad:ee:f6:0e:8a:
                    2f:82:fc:36:b0:35:13:d5:39:c8:65:5c:ca:57:28:
                    98:f5:c2:31:46:cb:58:e4:78:ec:a0:85:0a:d5:db:
                    40:7d:0d:1d:90:c6:0f:04:05:19:e8:21:d0:10:f7:
                    e3:75:b9:22:57:9a:08:9d:5c:7d:15:3b:52:85:19:
                    56:b6:9c:02:70:01:4a:54:00:94:36:b2:7a:51:18:
                    31:13:35:d6:f9:fc:cf:81:88:a0:6b:38:6d:8e:1a:
                    d4:34:8d:77:3d:0d:aa:c6:3b:bb:0a:9a:69:3d:3e:
                    d6:61:a4:43:f1:7b:b5:fc:ec:13:eb:52:68:46:58:
                    00:bd:ce:db:dc:0a:0f:ec:20:ca:13:f3:af:6b:39:
                    e7:2d:8c:19:f8:02:35:27:15:be:ca:f7:b6:d9:1b:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:86:B0:3C:FB:94:C8:04:91:36:59:46:AC:34:10:14:9A:AD:59
            X509v3 Authority Key Identifier:
                keyid:A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:3b:fb:8e:83:db:ab:01:82:8d:57:fc:d9:fc:78:1a:33:d3:
         2c:e3:b3:9b:80:86:da:45:47:e4:21:d0:b8:6b:e2:07:91:5e:
         f7:4c:5c:85:19:ca:fd:61:d1:55:75:88:48:5b:95:da:bc:7b:
         f0:d6:00:f2:0a:ed:7f:91:8c:0f:9c:b2:50:a9:14:61:27:38:
         cb:e8:92:41:4d:06:c2:e1:83:ec:e2:c5:c8:ca:91:4c:78:3d:
         ab:41:10:db:e5:07:b3:ac:09:19:b7:e3:e5:35:01:e5:5d:f7:
         2a:9d:5a:d6:11:a0:60:9d:5d:e9:97:b3:b0:29:36:c3:4c:4d:
         15:3f:be:ca:31:76:5e:8f:c8:1f:3a:d1:08:bd:71:8e:8b:5d:
         11:a8:65:e3:21:b1:70:6d:48:51:57:0b:07:02:ee:04:b5:6a:
         44:ca:10:cf:1f:c8:12:28:56:91:d3:81:93:48:e5:6d:8a:63:
         39:2d:bb:0d:5a:e9:2e:ae:3f:12:3a:02:fe:9a:a1:54:78:82:
         ec:2e:82:50:da:c0:8a:e0:47:8d:78:08:8c:e9:5d:a7:af:6e:
         b9:d2:51:42:9f:37:09:ef:0e:b8:5e:0d:a6:06:07:d6:12:58:
         99:7c:3a:2f:9c:20:2c:48:5e:99:f7:40:ec:18:ba:0f:b7:c9:
         b5:be:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:07 2025 by rpki-client