Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa
File:                     3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          hsiO99V/0P5i4cl0YfH1+WyXNF0s9qnJNN135XOgTRE=
Subject key identifier:   F5:AF:00:7B:C8:05:C5:D3:12:01:16:38:30:04:A5:7A:52:D9:C2:3D
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       206D344395B680898D2410696C0C9132081E81AE
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:56 +0000
ROA not before:           Tue 04 Feb 2025 18:20:56 +0000
ROA not after:            Tue 03 Feb 2026 18:25:56 +0000
asID:                     14754
IP address blocks:        190.110.228.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:34:43:95:b6:80:89:8d:24:10:69:6c:0c:91:32:08:1e:81:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:56 2025 GMT
            Not After : Feb  3 18:25:56 2026 GMT
        Subject: CN=F5AF007BC805C5D3120116383004A57A52D9C23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:3c:4c:df:b5:9a:8b:35:ba:96:6d:18:64:
                    8a:b3:f8:59:b8:97:1e:01:73:ec:0e:b2:1d:b3:e5:
                    25:11:e6:1c:75:93:94:c1:54:fe:eb:ac:21:d0:a8:
                    2a:cf:2d:bc:d1:06:a5:44:45:62:c7:03:d7:93:1f:
                    0e:cb:9b:a2:70:39:74:60:4b:8a:e7:09:4e:fa:b7:
                    9c:92:05:e5:6d:78:28:69:e0:fd:c3:d0:1e:56:cc:
                    89:54:09:14:80:68:57:5a:d7:45:c4:d3:88:6e:f7:
                    45:e6:75:41:b3:64:77:3d:49:c5:e5:42:9c:62:86:
                    ee:9f:5c:27:e3:7a:52:fe:39:1e:96:5e:62:4c:4f:
                    6a:42:aa:39:bc:2f:ef:a2:bf:75:33:18:a1:8f:c6:
                    d5:4e:9f:69:da:f2:ff:4d:18:4f:d9:f3:f0:a1:b7:
                    d9:1b:2c:31:33:51:7d:e1:67:1c:c4:b9:f4:1f:df:
                    0c:be:5d:41:34:e9:ff:c9:86:75:79:e5:b1:45:cb:
                    da:bc:ef:b5:1f:53:ae:e5:a3:48:8e:3e:93:d9:8c:
                    5a:7b:d1:d5:4c:d4:36:1a:88:32:36:59:1c:4a:82:
                    33:79:f8:53:49:bb:ee:f8:ba:b5:62:eb:e7:e2:51:
                    ce:1c:b5:46:e8:4e:d0:13:c8:01:fd:7d:07:bc:3d:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:00:7B:C8:05:C5:D3:12:01:16:38:30:04:A5:7A:52:D9:C2:3D
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:80:f7:15:aa:d2:66:e0:01:1f:81:35:a7:6e:97:c4:75:c1:
         36:62:18:66:d2:d3:ce:ba:8b:83:f5:3b:19:5e:2d:37:57:7c:
         7d:5f:4f:55:8c:c4:07:0a:9f:ea:01:41:a8:09:94:2d:98:41:
         d6:67:86:90:b5:e0:08:85:f6:e0:7c:fc:b8:4d:ac:2d:ce:37:
         16:50:20:be:e1:8e:ca:ad:38:ef:46:94:08:df:47:ce:0b:2f:
         ec:4f:ea:da:5d:63:1f:e4:ed:db:5c:34:34:d3:0a:87:1a:61:
         47:70:67:26:c3:5e:e6:84:c9:d7:ed:21:cf:ca:d3:3a:e9:35:
         7a:78:7a:a7:07:ca:05:d4:d6:4b:94:73:6c:4d:08:48:fb:e0:
         c8:d4:85:04:ef:f2:25:34:48:dd:fe:52:a4:4f:17:bf:ad:5c:
         56:8a:4f:6b:12:4d:5f:0c:0a:27:7b:40:2b:94:55:e8:0a:8b:
         20:74:d7:58:1d:d1:e2:76:09:28:d7:08:77:6b:56:3e:6f:7e:
         01:21:23:b6:80:e7:cd:92:72:5e:b3:d6:a2:2a:cb:06:e0:7b:
         50:34:ac:35:f5:ab:1c:7d:99:5b:60:71:ae:c2:61:19:29:3a:
         d6:e1:7c:eb:16:b4:d5:3e:c7:6a:4d:a0:cf:cf:64:df:08:85:
         89:b5:94:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:19:28 2025 by rpki-client