Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa
File:                     3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa (raw, json)
Hash identifier:          v2rEv3FgDufDMfiddhOq/5IMaazVdU1+nzVGmOOrvh4=
Subject key identifier:   F4:6E:79:E2:69:7C:8A:24:E6:BB:AB:6F:F5:EA:6D:D2:ED:9F:FC:76
Certificate issuer:       /CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35
Certificate serial:       7EF84D34330FE2A18056B9CDC7BCA6195DD203E7
Authority key identifier: C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa
Signing time:             Tue 04 Feb 2025 18:19:26 +0000
ROA not before:           Tue 04 Feb 2025 18:14:26 +0000
ROA not after:            Tue 03 Feb 2026 18:19:26 +0000
asID:                     262231
IP address blocks:        190.103.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f8:4d:34:33:0f:e2:a1:80:56:b9:cd:c7:bc:a6:19:5d:d2:03:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35
        Validity
            Not Before: Feb  4 18:14:26 2025 GMT
            Not After : Feb  3 18:19:26 2026 GMT
        Subject: CN=F46E79E2697C8A24E6BBAB6FF5EA6DD2ED9FFC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:a5:28:e1:ca:a4:b0:f5:e5:7b:58:8b:fe:
                    56:f1:f1:d0:30:2b:35:d3:35:18:81:2b:17:24:60:
                    35:8b:99:70:af:46:a8:4b:fe:8b:7a:a3:b5:16:6b:
                    97:88:94:e4:ff:86:6a:e9:50:f6:96:4d:33:2f:11:
                    14:f6:b0:ef:9a:f8:df:e1:40:fb:4e:26:c4:3a:ad:
                    c8:1d:f2:74:6d:d7:ab:c0:28:d1:cd:60:73:30:08:
                    4f:2b:fe:72:af:a3:f2:07:8e:79:02:36:d3:96:db:
                    aa:57:9c:a6:07:2b:74:bf:cd:83:45:de:a0:60:4d:
                    02:37:de:0d:8c:a8:4c:aa:af:5a:4a:43:cc:37:33:
                    f9:ca:21:2e:42:10:36:f6:b5:84:08:08:10:93:18:
                    00:a2:dd:10:e9:76:21:ab:69:9c:a7:09:5c:3d:05:
                    de:82:1e:66:e6:86:44:f2:cd:6c:2b:a0:c3:86:99:
                    4e:05:a0:59:a5:2c:a4:dd:a4:4a:19:9c:66:84:85:
                    63:04:60:27:8b:26:1f:61:b3:c5:ad:86:41:68:89:
                    8e:f6:eb:64:a4:08:96:b0:3b:45:e5:dc:1a:70:87:
                    f7:6e:43:78:31:9e:f8:45:09:41:c8:b4:33:7c:ad:
                    3f:90:1d:72:30:42:b4:05:9c:c0:2b:95:10:da:16:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:79:E2:69:7C:8A:24:E6:BB:AB:6F:F5:EA:6D:D2:ED:9F:FC:76
            X509v3 Authority Key Identifier:
                keyid:C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:54:c1:18:74:b8:00:ba:d0:90:bb:18:33:d4:76:04:b0:0d:
         52:1b:0b:d1:bd:30:ff:33:3d:50:61:ed:f7:5c:7e:1a:3b:b4:
         32:58:3c:8a:90:ef:64:e3:f5:e1:f8:64:31:87:eb:e7:65:97:
         37:95:a1:96:53:b2:1f:e2:43:50:ec:a0:fd:01:73:93:f3:1b:
         a4:6b:04:53:fc:bd:fb:07:f0:47:99:f8:ab:b4:ce:0f:10:59:
         4d:9b:d4:5b:b9:e2:1d:b2:00:0d:05:1f:50:41:b7:d6:9c:bf:
         2f:44:9d:78:d6:3c:61:98:ba:dc:18:a9:24:e0:1a:78:24:4f:
         c3:ae:fe:28:54:f6:b9:fb:9c:33:74:5f:37:59:b6:4f:77:07:
         60:1a:4e:a6:c2:be:f1:62:bc:ce:e9:0b:29:8a:2c:c6:5d:f6:
         2a:05:b2:83:3e:cf:a3:64:5e:97:89:2a:2a:f7:36:a3:a3:99:
         48:59:c0:6a:d7:5d:1c:37:18:48:62:a5:24:b4:73:8c:19:e6:
         22:a8:2f:0e:bc:60:45:5a:7e:cb:a4:4b:f0:43:85:be:ef:28:
         2b:2b:4e:07:3e:af:f8:d5:02:5f:21:84:35:7e:d9:00:d0:be:
         5c:b4:75:6e:83:fc:66:03:31:8c:6d:9e:0c:48:7d:fc:68:25:
         19:20:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:13:30 2025 by rpki-client