Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134312e302f32342d3234203d3e20323730313036.roa
File:                     3139312e3234312e3134312e302f32342d3234203d3e20323730313036.roa (raw, json)
Hash identifier:          ehRyRclFFeSuDqJRfGWyiRtMyY1kGDgK17Ah1mVTTOU=
Subject key identifier:   4E:3F:12:3A:7C:A7:83:DF:34:40:29:51:C8:D9:1F:18:8A:BF:84:ED
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       40B90EC0C8585292FBA245F42CE130A9373FD9F2
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134312e302f32342d3234203d3e20323730313036.roa
Signing time:             Thu 08 May 2025 17:30:00 +0000
ROA not before:           Thu 08 May 2025 17:25:00 +0000
ROA not after:            Thu 07 May 2026 17:30:00 +0000
asID:                     270106
IP address blocks:        191.241.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 19:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b9:0e:c0:c8:58:52:92:fb:a2:45:f4:2c:e1:30:a9:37:3f:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: May  8 17:25:00 2025 GMT
            Not After : May  7 17:30:00 2026 GMT
        Subject: CN=4E3F123A7CA783DF34402951C8D91F188ABF84ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:f4:5b:d0:43:94:93:00:4d:20:81:24:25:
                    df:ae:02:ca:17:30:94:8d:0d:c0:da:d4:e8:9d:64:
                    9a:88:7e:1d:67:5e:b4:81:52:92:d4:a4:74:97:34:
                    50:73:24:08:10:25:79:b4:d4:36:40:fa:9c:a4:1f:
                    56:a3:25:6b:7a:a6:74:45:a3:d6:88:10:93:c2:d1:
                    7d:b4:ec:8a:f9:95:34:ac:61:ff:41:ce:f4:2c:54:
                    c1:9e:2c:1b:52:7d:ff:3e:ae:3f:95:95:31:f2:a8:
                    dc:44:ff:62:39:ee:6b:cf:1f:e7:de:b1:3e:b3:4d:
                    cd:f6:74:99:f6:4e:d0:0a:c8:10:cf:bd:6a:55:96:
                    85:32:fd:e9:d5:0c:35:34:5c:6c:72:1c:c6:ba:96:
                    29:8a:7b:cc:fa:d7:09:f6:54:78:95:10:19:02:ce:
                    f7:76:e5:47:b0:04:6c:8d:68:b7:55:6d:7b:97:50:
                    7e:b5:2b:c5:89:f9:82:42:94:b0:91:4a:f8:30:5b:
                    8c:72:ab:e6:34:9f:7c:c1:b5:8b:bf:15:5d:8d:01:
                    b8:7b:74:d5:f5:ad:65:45:8d:8d:bd:5d:49:db:ab:
                    26:a8:c5:78:7e:92:ca:cb:ff:bd:95:73:e0:f6:a7:
                    34:e4:f2:87:12:5e:3e:1d:04:63:9a:ff:18:ca:95:
                    b4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3F:12:3A:7C:A7:83:DF:34:40:29:51:C8:D9:1F:18:8A:BF:84:ED
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134312e302f32342d3234203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d8:af:1e:78:1b:3b:13:94:5b:ee:ef:22:19:7b:cf:63:70:
         16:5e:4a:fc:5e:d0:0a:da:91:10:78:10:64:e3:8d:48:d2:bb:
         05:2d:bf:35:e0:31:45:34:d3:b1:6b:ba:38:10:bb:f0:f5:25:
         b3:47:9f:ad:47:57:45:b2:85:39:74:26:3b:17:b3:88:e5:6e:
         bb:87:eb:c1:ca:e9:a3:d1:0c:01:ec:fc:03:ce:9a:d6:18:8e:
         89:83:81:ca:e0:47:5d:15:d2:10:1a:de:3d:77:10:59:8a:a0:
         05:0a:06:4e:1f:f3:38:49:d5:6e:1f:20:21:92:bb:ed:9e:8e:
         e8:64:4a:fa:3a:5d:1b:1b:ea:b9:c8:c6:54:82:fb:1f:d3:8c:
         0d:96:38:d1:2c:7d:f1:08:b0:93:d2:80:d3:a2:fe:cc:6c:7e:
         73:de:fe:03:df:c6:78:5b:f8:00:4c:f6:c4:69:51:2e:4f:d6:
         70:b9:b4:aa:8f:52:d9:c4:9c:dd:9d:5c:35:b1:38:fd:c7:8f:
         0b:03:85:6b:9a:f6:a5:7f:9a:c6:35:54:32:5f:ba:00:0b:e6:
         ac:59:50:95:3f:a4:74:04:6d:62:9b:2d:3e:f1:30:94:6c:7a:
         23:94:85:75:e0:07:b3:f4:ff:9f:f3:b0:3b:f6:e3:19:ec:94:
         ed:7e:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:30:14 2025 by rpki-client