Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34362e302f32342d3234203d3e203532333438.roa
File:                     3139302e31342e34362e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          a9VwU/yHHwiG8mI/pPFbcSh2POJ5ZvxY1Hp3I8f7TL4=
Subject key identifier:   FD:C2:9B:8D:10:52:FE:9C:56:99:1F:4D:57:D5:FB:63:60:AE:D6:32
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       6A726D6CAF56AAA62E85380BAD8243742B6105B1
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34362e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:25 +0000
ROA not before:           Tue 04 Feb 2025 18:31:25 +0000
ROA not after:            Tue 03 Feb 2026 18:36:25 +0000
asID:                     52348
IP address blocks:        190.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:72:6d:6c:af:56:aa:a6:2e:85:38:0b:ad:82:43:74:2b:61:05:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:25 2025 GMT
            Not After : Feb  3 18:36:25 2026 GMT
        Subject: CN=FDC29B8D1052FE9C56991F4D57D5FB6360AED632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:38:85:c1:1d:39:4e:5a:6a:af:f9:86:74:
                    25:a2:9a:41:a4:77:e5:02:39:ac:2a:3c:de:ad:af:
                    23:70:1a:c7:1d:00:95:cf:64:e4:0b:e0:04:ed:ca:
                    e4:2d:c5:09:ba:42:90:71:30:fb:dd:60:ce:2b:a8:
                    d3:2a:11:fb:f8:a0:81:dc:a3:db:a3:88:a8:39:2f:
                    bd:4a:2a:22:47:c5:0d:1f:ab:b1:8f:81:13:69:57:
                    b3:80:69:68:62:5c:16:de:7b:79:99:6b:b4:13:06:
                    fb:0f:c2:2a:50:2f:67:e3:3c:93:81:e2:fc:c9:7e:
                    25:7e:e4:2c:6c:88:88:80:3f:05:12:3e:d2:eb:f0:
                    d7:57:f2:09:0c:be:7f:cf:59:0d:19:88:1b:07:80:
                    15:51:91:86:f3:c6:fd:12:71:63:32:0c:78:2e:34:
                    75:91:ac:ba:f6:b2:91:0d:4f:65:71:84:13:b7:11:
                    1e:88:2d:f5:1c:75:b9:f7:5d:ab:f3:19:3f:b1:91:
                    c8:e6:49:6c:74:f6:48:74:6e:38:ec:ab:bd:0b:32:
                    19:98:72:8a:b8:2c:d4:01:eb:31:25:7f:f9:7f:95:
                    b9:93:24:a5:81:e5:fd:b5:5e:8a:33:68:ff:e6:c5:
                    38:68:a4:65:26:29:b2:59:d5:24:41:ac:61:a2:61:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:9B:8D:10:52:FE:9C:56:99:1F:4D:57:D5:FB:63:60:AE:D6:32
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34362e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:34:99:92:bb:eb:a7:ce:a6:42:f7:3b:ed:35:95:1a:26:bd:
         16:d8:b0:01:24:b9:88:90:3d:b3:b8:32:0e:ce:f4:6a:a4:c5:
         96:5f:5f:14:25:a1:eb:bd:b3:bb:c9:bf:c5:bd:67:9f:ef:91:
         87:22:e2:e3:47:20:a9:3f:23:06:43:b7:20:ff:0f:8d:d2:5f:
         f5:bf:cf:e6:de:73:5d:2c:45:c2:41:a5:9e:2b:ea:25:06:d9:
         a5:0d:54:57:ec:a2:6e:c9:84:ec:4a:8c:00:2e:c0:91:34:9b:
         bd:4b:14:62:cf:2d:c2:b8:a0:18:31:d3:93:a1:81:21:69:45:
         ac:d6:a5:c6:9f:76:b0:14:d5:6e:46:9d:69:49:ce:28:f8:63:
         b5:2e:4a:b8:c5:a8:b9:fd:56:67:1d:f0:9c:dc:67:16:92:6c:
         38:fa:54:06:35:71:c4:21:9a:cb:dc:2e:39:c8:d9:18:ab:12:
         08:90:62:de:9a:5b:e4:4d:6e:a1:77:85:84:6c:89:37:c1:de:
         65:30:0a:17:7a:f1:9f:1d:3a:3f:df:82:ff:fc:15:da:ce:de:
         c9:0d:99:50:e9:9b:f7:6b:7c:3d:b1:7d:77:3a:3e:43:5f:bf:
         4a:12:7e:3a:bb:a0:8a:ca:78:13:5b:ae:81:6f:16:86:3d:58:
         75:ae:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:56:18 2025 by rpki-client