Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
File:                     3139302e38392e32382e302f32342d3234203d3e20323639393735.roa (raw, json)
Hash identifier:          x5DrEUOVo1OuIfpOsCr8EjHGSCks+pNaEeKPAHfFUro=
Subject key identifier:   D0:62:B5:22:2A:4F:12:DC:D0:7A:31:E4:89:EE:F7:60:F4:84:C2:72
Certificate issuer:       /CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
Certificate serial:       4AC9837181B06C61B31BAC8FA7A92C187D3287FC
Authority key identifier: 2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
Signing time:             Tue 04 Feb 2025 20:06:35 +0000
ROA not before:           Tue 04 Feb 2025 20:01:35 +0000
ROA not after:            Tue 03 Feb 2026 20:06:35 +0000
asID:                     269975
IP address blocks:        190.89.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 17:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c9:83:71:81:b0:6c:61:b3:1b:ac:8f:a7:a9:2c:18:7d:32:87:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
        Validity
            Not Before: Feb  4 20:01:35 2025 GMT
            Not After : Feb  3 20:06:35 2026 GMT
        Subject: CN=D062B5222A4F12DCD07A31E489EEF760F484C272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:8b:7f:9b:24:76:12:15:6d:57:1a:20:36:
                    50:9e:c1:04:aa:d5:e6:d7:60:36:53:33:f4:cf:14:
                    89:bf:3f:a8:48:2f:16:72:c7:c0:34:0f:e4:b8:36:
                    eb:a8:c0:bf:0f:e6:06:7a:c8:9c:e0:f3:5a:7e:aa:
                    4f:07:0b:1e:80:03:c0:7f:be:ff:86:d4:10:89:9e:
                    82:d0:60:24:c4:60:ee:db:3e:91:30:07:96:56:d6:
                    ff:1a:56:ba:9e:8e:f9:7f:c8:07:a4:21:28:fe:99:
                    f4:b1:39:28:66:cd:a0:55:c7:bc:f1:14:42:f1:73:
                    81:11:29:dc:44:ad:a1:39:3b:bf:d1:4f:96:e8:9f:
                    b3:78:07:8b:c2:15:85:5f:36:cd:b7:6d:3d:3e:ac:
                    34:70:d8:be:0f:13:ea:68:73:45:52:5d:8a:9e:32:
                    c1:f1:68:ca:da:1a:4c:b1:c0:bc:3d:28:8b:aa:6a:
                    5b:c2:9d:44:eb:93:9c:1e:cb:8b:3b:8e:aa:df:62:
                    ee:61:d6:a0:76:a3:93:62:54:d4:86:90:ac:39:24:
                    a1:0b:56:f7:27:bb:d4:ed:0e:17:85:57:9e:54:fc:
                    e7:8b:8a:b0:34:ce:d2:b9:39:b4:b6:1c:a5:d7:3c:
                    24:a9:02:fa:65:12:19:0f:0f:43:eb:94:66:4a:cb:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:62:B5:22:2A:4F:12:DC:D0:7A:31:E4:89:EE:F7:60:F4:84:C2:72
            X509v3 Authority Key Identifier:
                keyid:2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:09:eb:69:4c:b9:68:a9:0d:50:40:cb:43:7b:6e:82:d0:
         98:e4:b1:72:33:64:4b:8d:a8:82:5c:cc:82:f4:3a:f3:59:43:
         0d:63:c3:e2:a7:31:52:5f:90:79:5b:b2:78:e5:23:90:63:62:
         65:a9:5e:51:de:2c:6d:cc:b9:bb:67:36:e7:51:04:4a:ae:a5:
         ac:69:15:1d:40:ea:8a:fd:4f:5c:34:51:a8:60:1a:49:2e:5e:
         31:e5:d5:df:12:e5:32:4b:91:39:08:6a:a3:3e:48:45:a8:04:
         ba:5e:ee:7c:a7:c5:8a:80:d5:8d:16:5e:f8:1a:09:09:43:87:
         7b:ba:6d:44:9d:67:87:15:01:4b:50:4a:2d:2f:45:45:e9:c2:
         50:74:a1:43:07:98:15:38:5f:2e:de:f8:70:5b:2e:5e:66:49:
         50:ac:0a:59:b1:d6:29:8b:0d:71:81:35:dd:10:80:ca:c1:73:
         30:b5:56:61:e9:03:68:fa:be:c8:bd:23:98:d2:61:09:78:20:
         97:23:e5:3c:87:43:bc:f6:38:c0:2d:4a:f8:e1:7f:8c:d1:55:
         9c:0c:18:15:49:eb:b4:19:ab:2b:a5:49:55:2b:78:aa:af:e9:
         05:fe:3a:5f:07:4e:02:ab:98:d2:d0:7f:2f:3f:b7:da:b5:02:
         a5:43:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:46:32 2025 by rpki-client