Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa
File:                     3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa (raw, json)
Hash identifier:          R82mTDmrmeRkuX4T7SS0JKV5B7ryWPyhG+tgTTbxSGE=
Subject key identifier:   D0:98:CC:03:29:B1:68:AE:12:46:79:02:60:CC:FA:24:8E:7F:1E:D4
Certificate issuer:       /CN=8490FC868F718F720126775187964F0F493B0CEB
Certificate serial:       115DFF431F79333DC62F9708EE4A399915C4677A
Authority key identifier: 84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa
Signing time:             Tue 04 Feb 2025 18:21:06 +0000
ROA not before:           Tue 04 Feb 2025 18:16:06 +0000
ROA not after:            Tue 03 Feb 2026 18:21:06 +0000
asID:                     52327
IP address blocks:        190.111.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5d:ff:43:1f:79:33:3d:c6:2f:97:08:ee:4a:39:99:15:c4:67:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8490FC868F718F720126775187964F0F493B0CEB
        Validity
            Not Before: Feb  4 18:16:06 2025 GMT
            Not After : Feb  3 18:21:06 2026 GMT
        Subject: CN=D098CC0329B168AE1246790260CCFA248E7F1ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:b5:0b:d9:d2:73:de:d5:cd:e7:12:b1:b6:
                    cb:a4:1d:0b:66:ca:ed:a5:a4:f7:0b:73:7c:90:4a:
                    0a:8d:ec:81:3a:66:43:8e:31:26:4c:45:fc:af:75:
                    0e:2a:2e:00:6f:4c:64:80:19:1b:a2:c8:7a:17:4a:
                    0d:67:8e:36:bb:a9:51:52:cf:61:0a:13:d1:73:ff:
                    12:74:ac:ab:08:65:cc:ef:43:41:d0:07:bd:2a:4d:
                    9d:e8:97:c9:61:db:49:5a:a6:93:b4:a1:34:31:3e:
                    ea:06:ad:9b:d2:45:b7:1c:51:47:a4:46:78:26:23:
                    58:5c:d6:de:1e:8f:3e:3f:6e:8c:7c:4e:3d:77:db:
                    01:05:27:c8:34:e3:f4:0c:67:a8:35:a9:48:9e:b7:
                    69:d7:dd:d2:ed:43:3d:27:09:77:0e:f5:eb:e4:a0:
                    be:bf:1a:55:b3:e8:b6:af:04:16:ec:d7:88:a1:ad:
                    b1:25:5c:0b:43:18:a6:b3:2b:21:6f:81:f3:9c:ac:
                    94:bf:78:9b:0e:b2:78:d4:02:9d:1c:4e:c3:4a:6b:
                    21:5c:42:06:f8:0f:d6:0f:22:99:26:a5:c9:81:28:
                    7f:82:38:64:c3:5a:7b:59:b7:19:ba:8f:fd:1d:41:
                    d5:72:a9:09:2f:ef:b9:34:e3:7e:6f:40:2d:53:b6:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:98:CC:03:29:B1:68:AE:12:46:79:02:60:CC:FA:24:8E:7F:1E:D4
            X509v3 Authority Key Identifier:
                keyid:84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:99:90:f9:30:e8:f5:aa:25:8a:b7:71:f2:27:99:c6:2c:30:
         a0:95:89:47:61:40:75:75:6f:01:4d:9f:3e:aa:8e:d5:d6:ad:
         d7:46:fb:a7:40:a0:38:05:2e:56:e9:f1:55:90:5f:17:08:69:
         db:1a:3c:91:78:35:8a:8c:4d:86:40:83:ff:e9:cf:62:74:e5:
         d6:d7:59:f1:38:52:7d:df:6b:67:21:d4:34:e7:03:ef:73:d7:
         e3:07:d2:9f:91:e5:25:2e:82:de:d8:10:66:58:04:c5:17:ae:
         21:41:35:9a:40:d1:38:92:8d:ec:b1:bc:95:91:2c:cb:54:55:
         2d:34:be:6b:19:cc:c8:b6:ba:03:da:c6:51:b3:d9:95:2a:ee:
         43:74:46:dc:93:23:17:bf:0f:9e:7c:07:aa:ca:8c:db:1c:df:
         50:45:ad:88:82:d3:3d:1e:2f:6a:b4:b8:8f:30:08:7b:5d:54:
         b9:9f:e6:be:a4:96:29:09:f8:87:e5:6e:ec:67:88:a1:f5:e4:
         cf:93:84:d5:44:dc:46:af:0e:91:d9:2c:dd:3f:04:da:42:76:
         93:b6:c8:7a:b0:e7:be:47:99:90:3f:bd:bd:7a:7d:15:34:b2:
         20:5d:05:94:7a:86:16:70:ea:ce:ab:7e:7d:bf:7b:cd:5b:8b:
         f5:67:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:58 2025 by rpki-client