Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/3139302e3131302e3234312e302f32342d3234203d3e20323734303236.roa
File:                     3139302e3131302e3234312e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          H9o1SeyusV/SBg0UM4X1MDKb9ZclfNMeSZMJ4z0Brx8=
Subject key identifier:   8A:35:FB:C2:01:F2:7D:E1:A0:71:33:A3:61:AE:51:82:46:00:87:11
Certificate issuer:       /CN=B5D91E46260E9AEAE95697E1C0815E51DF174137
Certificate serial:       77CCC01D2E6515F3174BEDF0DB85A8D66A9FD28D
Authority key identifier: B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/3139302e3131302e3234312e302f32342d3234203d3e20323734303236.roa
Signing time:             Wed 11 Jun 2025 15:45:00 +0000
ROA not before:           Wed 11 Jun 2025 15:40:00 +0000
ROA not after:            Wed 10 Jun 2026 15:45:00 +0000
asID:                     274026
IP address blocks:        190.110.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cc:c0:1d:2e:65:15:f3:17:4b:ed:f0:db:85:a8:d6:6a:9f:d2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D91E46260E9AEAE95697E1C0815E51DF174137
        Validity
            Not Before: Jun 11 15:40:00 2025 GMT
            Not After : Jun 10 15:45:00 2026 GMT
        Subject: CN=8A35FBC201F27DE1A07133A361AE518246008711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:38:17:f4:50:70:4f:f4:81:ad:ec:e0:a8:
                    e6:05:09:04:66:a2:e4:16:48:ba:c7:b4:e3:d5:4f:
                    b9:d4:44:e3:38:f8:7d:24:70:4f:ca:c1:ef:80:76:
                    16:11:d4:d8:13:0f:9e:46:34:99:38:5f:40:b2:be:
                    8b:46:1e:e5:e1:bf:f2:bb:c0:5b:2a:e1:c2:5c:fb:
                    13:df:92:dc:b5:93:af:1c:f4:ca:8f:32:11:1f:28:
                    58:7c:f0:f6:79:e1:a9:30:d7:7b:bf:07:2a:b1:9a:
                    03:34:b8:95:5b:c1:5e:c2:74:17:fc:89:95:0a:4b:
                    7c:90:00:3e:1d:04:e5:6a:ca:af:48:36:d4:1a:32:
                    16:82:ba:f1:11:ac:8b:1d:2f:9b:9a:71:24:db:44:
                    b9:74:81:1f:9e:a0:cc:01:54:69:73:de:0f:ab:4d:
                    ef:15:2d:79:f3:d9:a5:96:84:3b:bc:24:f7:a9:7a:
                    23:a4:78:38:b9:54:d3:e5:72:22:c5:76:d9:3e:4f:
                    f3:7c:72:e3:49:18:0c:a2:7b:8e:65:0b:ab:65:71:
                    7c:b0:5e:74:19:59:81:46:b8:b3:b2:2a:d5:4a:e4:
                    da:be:70:35:06:ae:99:ad:6e:13:90:e5:7f:f0:0a:
                    0c:19:6d:33:32:51:e9:96:f4:e8:72:6b:21:84:64:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:FB:C2:01:F2:7D:E1:A0:71:33:A3:61:AE:51:82:46:00:87:11
            X509v3 Authority Key Identifier:
                keyid:B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/3139302e3131302e3234312e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:ab:12:d2:3b:50:52:5f:3e:1e:b7:ef:ac:96:31:21:75:
         80:44:48:f0:94:2d:86:5d:b5:3c:fd:1c:3e:31:94:24:c2:b7:
         80:f2:74:f9:28:35:ec:38:5c:94:cc:ee:38:eb:a0:41:78:cc:
         0f:a5:85:4c:d0:bc:83:ca:3d:d7:dc:40:1c:f4:b5:4d:a7:ea:
         81:4f:b0:a7:11:93:d2:be:cd:f0:f0:59:5e:03:04:98:d4:0e:
         03:94:1b:66:af:d4:83:4b:7f:49:07:45:75:2c:d9:10:1a:cd:
         b3:1c:a7:24:1d:df:ca:76:fb:65:08:15:35:ad:16:ff:51:47:
         5e:68:1a:8c:fd:0c:7a:81:46:99:9b:30:db:1b:7b:c8:3d:ff:
         65:b8:eb:8b:52:07:e6:fd:58:03:da:55:a2:91:bd:59:50:0a:
         04:64:1c:3b:05:eb:7d:fa:c3:37:85:ea:6d:df:2e:48:b6:51:
         ad:7a:e1:ab:20:9d:28:3a:94:7d:56:08:02:ee:13:c0:30:59:
         d6:2a:fa:ce:28:cd:23:ae:01:d0:7c:17:c1:7d:29:e0:56:65:
         b3:2b:cf:b4:bc:bb:23:ec:bf:f5:af:f7:9c:d8:19:18:b4:be:
         58:28:e4:57:a6:86:8c:3c:29:f3:5b:3d:bd:de:b0:34:02:65:
         52:bb:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:19:25 2025 by rpki-client