Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa
File:                     3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa (raw, json)
Hash identifier:          +nLrEnWoWm5mG/OpQ1hmUupxqgoH/HX71/Wgtde5gEs=
Subject key identifier:   EB:5E:F7:E5:C2:B7:98:AF:5C:5B:75:D6:A3:6F:43:DC:84:28:EB:1B
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       29263AE8C3E74B55CE5FC11150898CD6A8D8EDFA
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa
Signing time:             Tue 04 Feb 2025 18:36:48 +0000
ROA not before:           Tue 04 Feb 2025 18:31:48 +0000
ROA not after:            Tue 03 Feb 2026 18:36:48 +0000
asID:                     27665
IP address blocks:        190.213.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:26:3a:e8:c3:e7:4b:55:ce:5f:c1:11:50:89:8c:d6:a8:d8:ed:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Feb  4 18:31:48 2025 GMT
            Not After : Feb  3 18:36:48 2026 GMT
        Subject: CN=EB5EF7E5C2B798AF5C5B75D6A36F43DC8428EB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:c9:ea:be:61:5d:af:e1:90:09:9d:d1:45:
                    cc:06:0b:63:cc:84:cd:c3:a2:5f:36:4c:6c:39:9d:
                    28:76:62:06:0b:7a:28:56:e5:f8:fc:c6:a0:5c:f3:
                    2a:7a:d8:c9:f3:ab:a0:24:ab:fb:8d:86:2f:3e:63:
                    01:5d:59:37:9a:e9:49:d5:04:a5:71:34:00:34:35:
                    3f:2e:9a:d8:cd:49:e6:71:ed:7d:9c:34:71:02:1c:
                    55:18:d7:a2:06:c0:10:28:c9:ee:0b:ff:da:dc:a0:
                    58:52:65:36:42:59:95:3c:b8:26:d0:13:cf:f5:47:
                    d9:66:e5:72:37:30:b5:df:cf:04:8b:ad:2b:71:76:
                    95:1c:e8:f2:61:41:98:41:a5:bc:1e:eb:bc:93:39:
                    42:8f:fa:6b:ae:39:1e:3a:30:94:9d:71:29:aa:fc:
                    88:1d:0f:1f:81:60:0c:a3:e0:f1:cb:21:3f:60:8e:
                    02:17:2b:24:fe:e1:38:c1:6c:9e:82:02:83:49:b0:
                    92:0e:19:10:ad:64:a7:90:dc:a3:47:66:f4:65:cd:
                    1a:01:ad:fd:c6:11:d6:c0:c2:85:9e:1e:ac:38:4c:
                    15:8a:d3:6a:10:59:94:4d:1d:30:d5:a6:d0:1b:10:
                    72:13:6d:f0:20:35:74:9c:52:3a:aa:ac:9a:a7:d5:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:F7:E5:C2:B7:98:AF:5C:5B:75:D6:A3:6F:43:DC:84:28:EB:1B
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.213.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:87:4f:3f:36:82:47:34:66:4e:96:08:4e:35:ea:f8:64:
         59:c1:63:1e:f7:47:69:54:ae:87:61:66:4c:0b:92:64:9b:2f:
         10:b5:21:13:08:c9:d4:6a:15:7c:fb:0e:19:fa:db:16:d3:da:
         e2:e5:7a:c6:16:94:ca:3b:a5:b3:b4:b4:f2:7f:c9:f0:7b:22:
         18:3c:9d:73:a5:50:36:0f:11:a9:4f:de:19:5c:0f:20:dd:c2:
         5d:02:88:26:9e:73:08:1e:a9:4b:bf:b2:10:0d:0a:a0:89:79:
         82:3b:8d:2b:da:28:35:5d:1b:d8:ff:99:5a:83:a9:87:44:34:
         6b:b1:1a:c6:13:00:c7:9e:9e:ae:9e:67:c3:54:46:da:0f:6a:
         06:a6:95:28:b8:c8:dc:a4:fd:bd:86:e4:cd:6f:a6:e7:86:1b:
         19:fe:a0:f9:ce:5a:3d:ce:32:1c:50:88:c8:60:82:f6:b7:f6:
         00:0c:a3:c5:13:54:3d:87:3b:11:b2:b1:4c:b0:97:53:7a:8b:
         4e:48:d2:e5:27:8c:dd:ab:e6:6b:12:12:89:12:8b:fe:0f:ec:
         39:b6:bc:3e:92:3b:6a:41:a9:1f:f3:ea:b7:d2:50:4e:ff:45:
         c3:57:74:16:d0:62:c2:36:2e:ea:fd:9d:53:23:bf:55:96:a1:
         69:0e:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:03:01 2025 by rpki-client