Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa
File:                     3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa (raw, json)
Hash identifier:          KCho/+0Bp8/H8ntBG6j73J9srof9JI0/HeagUNKtL+4=
Subject key identifier:   3D:35:F5:0B:17:B6:48:D3:AF:CC:EF:C0:D2:C0:34:D2:3D:59:A4:B7
Certificate issuer:       /CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
Certificate serial:       0F61B8F42ED806623A36B1B205B58064ECC44993
Authority key identifier: 4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa
Signing time:             Tue 04 Feb 2025 18:33:47 +0000
ROA not before:           Tue 04 Feb 2025 18:28:47 +0000
ROA not after:            Tue 03 Feb 2026 18:33:47 +0000
asID:                     271881
IP address blocks:        190.113.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:61:b8:f4:2e:d8:06:62:3a:36:b1:b2:05:b5:80:64:ec:c4:49:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
        Validity
            Not Before: Feb  4 18:28:47 2025 GMT
            Not After : Feb  3 18:33:47 2026 GMT
        Subject: CN=3D35F50B17B648D3AFCCEFC0D2C034D23D59A4B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:83:80:0f:d1:36:8f:68:46:23:e9:55:6a:
                    32:e6:df:a3:0c:a4:cb:50:65:2c:e9:00:bd:67:15:
                    0e:56:5f:39:29:41:70:38:dd:80:b0:a4:86:44:25:
                    e3:74:8f:09:b9:c1:d4:d6:03:98:ae:2c:71:b8:e9:
                    68:e8:f0:c5:b6:41:a7:2e:01:e2:cb:ad:85:98:b9:
                    6f:b2:30:e0:ba:94:04:64:22:70:66:19:be:b3:68:
                    e7:2a:b8:f0:84:23:94:2b:7a:31:d9:9e:eb:f8:1d:
                    42:c5:21:99:b0:aa:16:9c:0d:e5:e6:f5:ef:dc:26:
                    4d:63:fc:4e:42:b6:5d:fa:82:dc:b4:0b:0c:31:fe:
                    e3:c1:2c:6b:de:47:08:4a:02:c9:dd:b3:9a:b7:30:
                    fc:a1:59:99:13:a0:64:29:c0:1f:88:f6:90:50:cd:
                    2d:6f:99:63:e2:a4:51:6d:f4:dc:2a:1f:10:8b:18:
                    7b:73:f2:5e:17:ac:be:3e:bc:35:54:0f:ac:ae:86:
                    26:d3:76:79:f9:f5:c7:d8:c1:45:8b:86:6f:66:1d:
                    95:0b:71:07:b5:c4:c3:44:31:af:77:06:16:b5:c9:
                    ab:09:0c:62:4c:d1:b8:70:35:a0:37:8d:36:e8:da:
                    a2:b9:91:6f:4d:f1:2a:56:67:3b:0f:30:87:d1:88:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:35:F5:0B:17:B6:48:D3:AF:CC:EF:C0:D2:C0:34:D2:3D:59:A4:B7
            X509v3 Authority Key Identifier:
                keyid:4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:17:a6:7f:df:19:42:0e:1f:51:d1:cc:a8:37:c3:f7:8b:
         23:06:a6:28:0b:05:d5:21:de:49:71:81:1a:a5:96:e0:60:2e:
         8f:f8:d9:b3:fd:ef:71:24:c6:e1:6b:52:c5:27:00:53:13:64:
         af:24:23:3d:a2:47:a3:9d:80:14:4b:6d:da:8e:b7:34:fb:68:
         35:aa:fe:11:32:ca:e6:cf:77:e6:34:1b:b7:af:9d:88:7e:91:
         05:2d:97:f2:66:40:ca:8a:b0:bd:1e:3a:56:f6:cb:10:b6:4d:
         43:b2:8d:4a:23:12:19:cd:7e:1d:36:d1:88:60:d7:cd:9a:28:
         ae:27:c8:fe:b7:60:b2:2d:5b:db:d2:18:68:c6:4c:16:a5:3a:
         91:fa:47:23:80:f1:87:6a:9f:ee:42:12:1c:c6:4d:76:78:b6:
         cb:dc:47:d8:b1:87:88:80:38:5b:16:64:b7:8d:77:5d:1e:9f:
         eb:aa:4c:3f:f2:04:83:ff:0d:fd:fb:4f:6f:a3:f9:93:e5:06:
         09:73:b6:81:59:bc:8a:75:0a:4d:cf:74:1d:74:e2:7f:91:d4:
         d6:ba:46:fa:b2:d6:19:fb:9e:d9:e3:eb:a2:b8:db:28:58:66:
         dc:a9:08:64:59:3d:75:e6:45:d9:33:5c:04:aa:e6:da:4f:ff:
         c3:2d:ae:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD2G49C7YBmI6NrGyBbWAZOzESZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1MjYwQ0ExQUMyNTIzRjk0MDIyNzA2MjQ4QjRENUU5
QTE3MjlFRDAeFw0yNTAyMDQxODI4NDdaFw0yNjAyMDMxODMzNDdaMDMxMTAvBgNV
BAMTKDNEMzVGNTBCMTdCNjQ4RDNBRkNDRUZDMEQyQzAzNEQyM0Q1OUE0QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJIOAD9E2j2hGI+lVajLm36MM
pMtQZSzpAL1nFQ5WXzkpQXA43YCwpIZEJeN0jwm5wdTWA5iuLHG46Wjo8MW2Qacu
AeLLrYWYuW+yMOC6lARkInBmGb6zaOcquPCEI5QrejHZnuv4HULFIZmwqhacDeXm
9e/cJk1j/E5Ctl36gty0Cwwx/uPBLGveRwhKAsnds5q3MPyhWZkToGQpwB+I9pBQ
zS1vmWPipFFt9NwqHxCLGHtz8l4XrL4+vDVUD6yuhibTdnn59cfYwUWLhm9mHZUL
cQe1xMNEMa93Bha1yasJDGJM0bhwNaA3jTbo2qK5kW9N8SpWZzsPMIfRiJfHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPTX1Cxe2SNOvzO/A0sA00j1ZpLcwHwYDVR0j
BBgwFoAUS1JgyhrCUj+UAicGJItNXpoXKe0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNDM0ODUzMTczQ0UwQjUxOTg2NDQ3MDFGNUIyODgyRjY1
NTU4ODY3NkI0N0Q3OEM4NTIyRDRDNTI0OThCRkQxLzAvNEI1MjYwQ0ExQUMyNTIz
Rjk0MDIyNzA2MjQ4QjRENUU5QTE3MjlFRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QjUyNjBDQTFBQzI1MjNGOTQw
MjI3MDYyNDhCNEQ1RTlBMTcyOUVELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDQzNDg1MzE3M0NFMEI1MTk4NjQ0NzAxRjVCMjg4MkY2NTU1ODg2NzZC
NDdENzhDODUyMkQ0QzUyNDk4QkZEMS8wLzMxMzkzMDJlMzEzMTMzMmUzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnE4
MA0GCSqGSIb3DQEBCwUAA4IBAQA6ZBemf98ZQg4fUdHMqDfD94sjBqYoCwXVId5J
cYEapZbgYC6P+Nmz/e9xJMbha1LFJwBTE2SvJCM9okejnYAUS23ajrc0+2g1qv4R
Msrmz3fmNBu3r52IfpEFLZfyZkDKirC9HjpW9ssQtk1Dso1KIxIZzX4dNtGIYNfN
miiuJ8j+t2CyLVvb0hhoxkwWpTqR+kcjgPGHap/uQhIcxk12eLbL3EfYsYeIgDhb
FmS3jXddHp/rqkw/8gSD/w39+09vo/mT5QYJc7aBWbyKdQpNz3QddOJ/kdTWukb6
stYZ+57Z4+uiuNsoWGbcqQhkWT115kXZM1wEqubaT//DLa6r
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:04:06 2025 by rpki-client