Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa
File:                     3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa (raw, json)
Hash identifier:          aSYxWyb1X4RP8j7SOOohMcJzyEKVOsTNjfxCTtPbo2A=
Subject key identifier:   20:9F:7C:41:69:C2:25:E0:24:49:C2:C9:E6:41:DE:93:84:CC:F3:3C
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       278B903E9FD475A463E74E51DFECE6BAD1F1953D
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:49 +0000
ROA not before:           Tue 04 Feb 2025 19:56:49 +0000
ROA not after:            Tue 03 Feb 2026 20:01:49 +0000
asID:                     267848
IP address blocks:        190.97.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:90:3e:9f:d4:75:a4:63:e7:4e:51:df:ec:e6:ba:d1:f1:95:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:49 2025 GMT
            Not After : Feb  3 20:01:49 2026 GMT
        Subject: CN=209F7C4169C225E02449C2C9E641DE9384CCF33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:90:6e:86:7c:1a:51:8c:9e:c9:e3:76:b8:
                    12:95:c0:9d:15:66:c6:38:7d:a9:b4:4a:50:47:46:
                    a1:fb:5f:0a:67:27:20:59:2f:41:5c:df:46:71:ac:
                    c4:12:4a:5b:2f:73:15:cc:15:5d:d4:6c:02:c8:65:
                    ba:e5:0e:03:87:6e:81:bf:7e:89:82:48:b5:18:09:
                    64:1a:d8:ed:a0:48:61:8c:d6:96:a1:cb:e9:46:21:
                    b3:60:af:08:de:59:41:a3:90:32:7f:d3:e6:1d:bf:
                    35:da:de:5c:8a:a9:e4:a6:c8:c4:1e:61:89:05:4b:
                    67:2b:5e:dd:f3:b6:a0:4f:fb:a6:33:5e:94:55:54:
                    6f:6d:7e:fc:69:f9:cf:92:9f:88:21:a8:a9:d7:a2:
                    24:3b:23:52:8b:75:38:b6:53:92:cb:67:8d:30:9f:
                    f5:99:80:cb:3f:c0:fc:2a:4c:0d:81:5f:88:dc:7a:
                    c7:f1:1f:b2:e2:4b:6c:2a:81:f4:00:62:06:42:ee:
                    dd:df:75:9e:b1:3a:12:38:0a:4a:68:07:46:3a:58:
                    6f:65:96:64:3e:a2:01:3b:91:a9:43:67:bf:2b:b1:
                    f8:89:e0:0d:be:11:ff:e1:f4:5d:1f:9b:b1:da:3a:
                    d4:66:5d:f4:dc:29:8e:ae:9a:d2:e8:6e:41:53:f8:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:7C:41:69:C2:25:E0:24:49:C2:C9:E6:41:DE:93:84:CC:F3:3C
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:71:7d:4f:05:96:31:88:0e:e1:98:4f:44:ea:5d:1c:6d:
         16:c6:68:a0:05:99:11:50:f3:6b:b7:20:60:03:f6:d7:6b:16:
         7f:12:eb:6c:d1:0a:b6:3b:a0:40:ec:40:91:c7:2b:f8:30:88:
         20:bd:12:7f:65:ec:e1:4d:e0:8e:ec:16:cb:dd:43:f7:8f:e9:
         ff:69:e5:5e:95:a7:b9:57:7d:3f:b3:73:a9:18:85:73:76:db:
         bc:61:cd:a9:87:09:29:c2:d4:ae:0c:d9:5c:ae:2b:8d:8c:ec:
         4e:d6:a1:f0:6e:2d:b0:96:36:19:5d:9b:9e:f9:45:02:45:8a:
         81:cd:05:1c:b0:fd:a6:52:58:43:db:6b:cf:ec:80:16:d4:92:
         22:7f:81:57:58:b5:b3:83:8e:5b:da:c0:9b:c0:67:7c:a0:d0:
         a7:b9:b9:40:53:ea:d4:7e:16:23:63:27:18:da:99:80:d1:47:
         e6:02:0d:72:f7:9a:77:ea:85:5d:13:7e:27:3e:a7:eb:0a:9d:
         8c:5d:7c:ba:bc:98:5d:f4:89:2b:ad:72:10:1d:4d:6b:47:f1:
         2b:2b:e7:ca:2c:63:7b:93:54:ad:f3:b8:fe:dd:02:fc:55:64:
         5e:0e:42:b0:19:1c:1a:77:ed:82:83:1f:c3:d7:e6:9c:39:0e:
         1c:df:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:07 2025 by rpki-client