Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa
File:                     3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa (raw, json)
Hash identifier:          ShB3wcXyweNGRvQrVyTBLBrQnJn71mmsWN9hLg4MbwU=
Subject key identifier:   D1:F2:57:BE:B6:B2:31:B4:E1:3A:19:EB:D8:F1:29:BA:A1:12:C5:C7
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       2CF70C4C1DD8912E55BFB518F80858DFDBD84A57
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa
Signing time:             Thu 24 Apr 2025 16:15:56 +0000
ROA not before:           Thu 24 Apr 2025 16:10:56 +0000
ROA not after:            Thu 23 Apr 2026 16:15:56 +0000
asID:                     271949
IP address blocks:        190.122.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f7:0c:4c:1d:d8:91:2e:55:bf:b5:18:f8:08:58:df:db:d8:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Apr 24 16:10:56 2025 GMT
            Not After : Apr 23 16:15:56 2026 GMT
        Subject: CN=D1F257BEB6B231B4E13A19EBD8F129BAA112C5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:12:3f:e7:53:42:6c:64:58:6a:01:d6:6f:
                    50:a8:2d:67:9f:c2:34:b8:0d:d0:8a:dd:cb:0f:95:
                    0d:47:fe:95:4b:2c:15:1f:80:12:7a:07:28:af:1e:
                    1f:c2:f4:b0:4a:00:75:79:f1:af:8b:03:3a:23:cd:
                    11:86:d0:db:08:59:1f:2e:0a:b1:37:bb:1e:0d:84:
                    4b:65:13:b7:f4:94:2c:7d:dd:28:65:d3:0d:76:08:
                    3f:d3:07:61:4c:7a:0b:ad:df:57:78:38:bf:7f:03:
                    06:db:a3:e4:a0:0c:d7:0a:54:74:71:c9:47:1e:48:
                    ed:05:8c:04:33:0d:08:c6:11:f4:86:f0:66:ea:75:
                    0d:d1:09:94:d0:0b:a5:fd:14:b5:1f:08:8a:ed:6e:
                    6b:6f:29:d5:75:d6:8a:2b:58:82:5b:cf:34:77:0d:
                    fc:8d:46:1a:17:a4:71:f2:ba:7b:01:6a:a2:ad:a8:
                    17:f5:ca:6f:e1:2b:50:e9:43:42:08:a3:4e:31:ac:
                    35:08:94:e7:ec:8c:ae:3b:ba:6e:1e:35:81:75:b7:
                    cc:45:02:af:59:28:62:1e:99:27:61:22:d1:85:bc:
                    9d:bf:19:9c:b2:62:f2:54:00:3a:47:72:b7:3f:2d:
                    03:47:82:70:50:88:d9:78:4b:89:4c:94:04:72:cc:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:57:BE:B6:B2:31:B4:E1:3A:19:EB:D8:F1:29:BA:A1:12:C5:C7
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:57:d0:69:47:0b:bc:de:3a:25:b9:a5:48:ac:0e:3e:c0:
         69:16:ab:6c:96:2b:fd:69:6c:03:1e:a6:93:4f:00:79:c8:a6:
         65:31:80:a2:73:72:da:68:03:b9:88:ef:df:15:67:fa:74:2b:
         67:64:5e:6c:d1:dd:39:6d:d7:84:84:99:79:64:6b:86:75:e8:
         57:e1:3b:6d:0a:0c:67:5f:c2:ce:5c:e9:8a:9b:b9:47:7c:4f:
         7f:23:62:59:f0:76:64:ab:5f:24:aa:8f:42:ac:63:12:2f:ba:
         54:8b:71:9f:bb:2c:8a:a0:64:f0:45:18:65:07:55:30:16:f0:
         78:4c:ae:5a:15:73:cf:3e:e8:92:83:9b:da:c6:87:96:59:bc:
         c2:c4:50:7d:b6:6a:a1:b0:fc:a7:5f:35:b0:a1:3a:92:92:82:
         be:e1:80:51:eb:6e:c0:62:6a:d4:fd:16:4c:2b:ce:f7:4a:45:
         4e:43:2f:d5:a5:9e:6a:93:22:a9:32:8c:a2:3c:99:e1:e5:67:
         3a:cf:77:c8:64:3f:ac:1a:fe:a4:9b:b6:a5:46:ae:9b:a6:9a:
         1c:c3:70:f1:1b:60:d6:9f:b0:97:10:5d:aa:cf:f1:23:60:17:
         ef:17:5d:19:53:52:69:b2:32:91:5c:b4:35:fe:df:18:f4:b7:
         8d:2a:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net