Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa
File:                     3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          /J8Wgx+KxIiJWh/PEgy+PHXS39ppZxqJ9cVKX9QStSU=
Subject key identifier:   27:1A:3F:50:DE:CF:78:5D:44:12:CA:1D:4D:12:A2:64:F0:C5:26:C6
Certificate issuer:       /CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
Certificate serial:       19989A6D2260B5D0077D7C00708DC2F10BBBDAF8
Authority key identifier: 45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa
Signing time:             Tue 04 Feb 2025 18:47:55 +0000
ROA not before:           Tue 04 Feb 2025 18:42:55 +0000
ROA not after:            Tue 03 Feb 2026 18:47:55 +0000
asID:                     271795
IP address blocks:        190.12.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:9a:6d:22:60:b5:d0:07:7d:7c:00:70:8d:c2:f1:0b:bb:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
        Validity
            Not Before: Feb  4 18:42:55 2025 GMT
            Not After : Feb  3 18:47:55 2026 GMT
        Subject: CN=271A3F50DECF785D4412CA1D4D12A264F0C526C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:7a:a6:b4:3c:1d:7c:32:db:8f:60:79:d7:
                    fe:e7:f9:4d:73:84:67:74:d4:03:b8:d1:f6:14:34:
                    ab:54:f2:ad:1f:4e:12:b4:9d:47:18:67:54:0e:d8:
                    fa:e4:f4:87:3b:6d:a6:65:c2:59:e0:82:99:31:e1:
                    8e:38:d1:7f:d4:7b:57:53:57:13:0b:ac:37:6f:fe:
                    c2:0e:7c:88:37:75:ef:8b:3e:1c:1b:e5:68:64:fa:
                    13:fc:8e:0f:a0:2d:02:11:19:79:70:3a:0f:9e:b8:
                    52:eb:dd:e4:b9:68:ec:7b:32:02:e5:d9:5c:f7:36:
                    ef:35:fd:dc:89:91:06:7c:0b:76:b7:0a:86:96:94:
                    ad:b0:9b:f4:9d:d8:b1:eb:44:99:36:ac:9f:82:de:
                    15:fe:39:c6:21:28:7b:c3:07:62:a8:5d:98:5f:0a:
                    a1:a9:b0:e6:7c:bb:52:80:ca:d3:b7:9b:08:6d:5c:
                    ae:2f:b7:36:c2:07:64:a6:7d:4f:77:76:0f:06:b8:
                    f9:48:d1:ea:99:24:69:80:91:47:53:b4:69:4f:0e:
                    0d:e8:12:14:83:e3:35:2f:c4:5f:40:9c:8c:c6:12:
                    7d:be:11:12:ab:b6:88:1c:98:51:15:80:e6:67:f3:
                    a3:38:7b:20:06:59:34:55:86:0b:fb:8c:7e:7b:17:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1A:3F:50:DE:CF:78:5D:44:12:CA:1D:4D:12:A2:64:F0:C5:26:C6
            X509v3 Authority Key Identifier:
                keyid:45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:66:ba:97:42:a8:28:f8:93:b5:d9:7c:94:3b:16:df:83:da:
         10:d2:57:a7:c7:35:1a:10:96:71:fa:6b:82:87:0c:23:a7:8a:
         9a:28:0e:46:9e:d1:01:15:a0:a3:56:40:04:3c:5e:20:7f:9f:
         10:0f:be:7d:c7:52:99:ad:af:ad:9a:2c:12:a4:97:7e:51:59:
         75:9e:27:ab:90:54:24:1f:53:0c:f8:34:fb:43:8f:ef:d1:f1:
         34:1e:83:45:f5:35:40:c1:44:5b:7f:6c:1c:00:54:69:7a:36:
         29:c6:6d:3b:1e:05:f5:22:ef:4e:e2:ce:69:fe:d4:03:c3:1f:
         a5:37:1c:c1:39:00:80:34:99:56:2f:d2:71:50:36:e5:68:31:
         98:91:93:0a:46:15:5f:32:d2:81:1a:f5:73:7f:ae:8f:7f:c9:
         08:39:13:52:23:05:90:26:34:9b:9d:51:e2:20:91:3f:78:c1:
         31:c7:d8:79:3f:a8:0a:5b:a2:68:fe:67:53:21:aa:ec:62:3c:
         5b:fc:c4:85:41:03:26:ef:08:e0:32:f7:37:90:6c:1a:9b:e4:
         84:37:33:18:ee:09:27:13:c9:99:52:ee:d7:5b:e3:8a:fd:ec:
         8c:cb:2e:da:e0:aa:14:e3:7e:69:b0:74:3f:51:b5:3d:d6:a2:
         4f:b5:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:34:14 2025 by rpki-client