Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3139362e302f32322d3234203d3e203237363531.roa
File:                     3139302e39312e3139362e302f32322d3234203d3e203237363531.roa (raw, json)
Hash identifier:          GKgrd90rWOjjnCiSnkZqVBPt4ZCpgrrICZC2IWjbDFo=
Subject key identifier:   27:D3:48:81:BB:80:5D:51:88:95:35:66:4A:71:77:39:65:2B:DE:63
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       19D5597B6977A8F35293A6491D33B8699F56A278
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3139362e302f32322d3234203d3e203237363531.roa
Signing time:             Fri 28 Mar 2025 20:13:13 +0000
ROA not before:           Fri 28 Mar 2025 20:08:13 +0000
ROA not after:            Fri 27 Mar 2026 20:13:13 +0000
asID:                     27651
IP address blocks:        190.91.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d5:59:7b:69:77:a8:f3:52:93:a6:49:1d:33:b8:69:9f:56:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar 28 20:08:13 2025 GMT
            Not After : Mar 27 20:13:13 2026 GMT
        Subject: CN=27D34881BB805D51889535664A717739652BDE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:9b:1c:f2:45:e3:75:11:0f:50:dc:d9:8e:
                    74:d0:ac:4a:df:06:23:85:35:26:3c:b6:15:19:85:
                    e7:52:a2:64:43:18:05:2b:50:ac:45:1d:39:03:8d:
                    2a:af:4c:45:13:ac:4a:9e:24:1a:4c:f0:6a:c1:40:
                    9c:46:07:85:f3:80:f2:c0:5f:6f:0c:ba:23:94:00:
                    1f:f4:fe:fb:26:34:27:d3:17:dd:8e:90:22:91:85:
                    76:42:ff:9d:4f:20:32:0c:15:9b:5a:d4:a0:68:30:
                    42:3b:d1:0c:2e:d1:48:c2:12:76:f1:bd:1c:16:da:
                    2d:06:41:be:1a:78:a1:3f:68:3e:3a:2d:e7:8a:31:
                    73:10:1e:d8:4a:3b:65:86:58:d7:c6:5d:77:75:eb:
                    71:ea:94:de:12:47:b6:56:68:dc:eb:5c:bc:ac:1b:
                    c8:a1:3f:af:71:bb:ca:ea:5f:ad:4a:6c:49:e3:da:
                    8d:cd:c2:fa:08:14:f7:42:72:25:7d:f3:23:36:c3:
                    ad:64:68:e0:b7:9c:0e:13:99:3c:4b:8f:69:10:2d:
                    54:cf:e3:c4:39:1f:e9:91:9d:1f:60:d7:ab:b4:f3:
                    79:d6:01:56:45:8e:94:d9:ea:e0:5a:a5:19:e1:71:
                    96:5d:b3:dc:e1:e2:c1:01:a0:3a:e2:01:00:9a:83:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:48:81:BB:80:5D:51:88:95:35:66:4A:71:77:39:65:2B:DE:63
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3139362e302f32322d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:47:8b:45:ce:d4:47:bb:55:05:b2:10:19:41:17:09:70:ca:
         30:8e:06:b5:8e:7b:d0:dd:3a:44:72:73:eb:80:98:3a:0c:c2:
         42:f7:15:f3:35:2f:54:47:b1:0a:be:9a:4d:19:6b:07:43:45:
         18:80:a3:f6:b6:f4:da:81:0d:12:4d:da:16:e5:fc:9c:7d:bf:
         3c:9f:17:25:7a:34:6b:6b:cf:9b:f8:6f:6e:0d:72:59:00:38:
         41:12:f0:05:02:da:6a:50:3c:71:5d:3b:fe:e4:80:98:b4:81:
         39:21:2e:a8:c1:e2:66:5f:af:ae:60:55:e8:92:a1:c4:77:f6:
         41:88:8b:f0:a0:10:45:e0:b1:3b:a9:5f:59:06:b7:af:4d:51:
         d2:b9:d1:9a:05:c8:74:8d:9c:68:75:b8:71:6c:20:e7:50:f3:
         12:9b:20:77:17:74:66:36:21:1d:cf:1c:3d:a4:e9:2f:4c:6b:
         de:64:38:1f:44:3f:b0:4b:cb:d9:ee:6f:64:dd:da:3c:67:45:
         a5:99:ad:40:d1:93:f3:11:45:25:7a:fb:63:2b:aa:24:60:f8:
         40:b1:03:85:49:4a:b8:1e:37:3e:c1:a6:cc:d0:b8:64:59:22:
         5e:e0:4b:29:1b:39:bb:49:0f:ed:10:7d:9b:29:d3:00:f4:22:
         b4:a3:f7:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGdVZe2l3qPNSk6ZJHTO4aZ9WongwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNTAzMjgyMDA4MTNaFw0yNjAzMjcyMDEzMTNaMDMxMTAvBgNV
BAMTKDI3RDM0ODgxQkI4MDVENTE4ODk1MzU2NjRBNzE3NzM5NjUyQkRFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qJsc8kXjdREPUNzZjnTQrErf
BiOFNSY8thUZhedSomRDGAUrUKxFHTkDjSqvTEUTrEqeJBpM8GrBQJxGB4XzgPLA
X28MuiOUAB/0/vsmNCfTF92OkCKRhXZC/51PIDIMFZta1KBoMEI70Qwu0UjCEnbx
vRwW2i0GQb4aeKE/aD46LeeKMXMQHthKO2WGWNfGXXd163HqlN4SR7ZWaNzrXLys
G8ihP69xu8rqX61KbEnj2o3NwvoIFPdCciV98yM2w61kaOC3nA4TmTxLj2kQLVTP
48Q5H+mRnR9g16u083nWAVZFjpTZ6uBapRnhcZZds9zh4sEBoDriAQCag2NBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJ9NIgbuAXVGIlTVmSnF3OWUr3mMwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzkzMDJlMzkzMTJlMzEzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM2MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5bxDAN
BgkqhkiG9w0BAQsFAAOCAQEAVUeLRc7UR7tVBbIQGUEXCXDKMI4GtY570N06RHJz
64CYOgzCQvcV8zUvVEexCr6aTRlrB0NFGICj9rb02oENEk3aFuX8nH2/PJ8XJXo0
a2vPm/hvbg1yWQA4QRLwBQLaalA8cV07/uSAmLSBOSEuqMHiZl+vrmBV6JKhxHf2
QYiL8KAQReCxO6lfWQa3r01R0rnRmgXIdI2caHW4cWwg51DzEpsgdxd0ZjYhHc8c
PaTpL0xr3mQ4H0Q/sEvL2e5vZN3aPGdFpZmtQNGT8xFFJXr7YyuqJGD4QLEDhUlK
uB43PsGmzNC4ZFkiXuBLKRs5u0kP7RB9mynTAPQitKP3zA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:49 2025 by rpki-client