Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136382e302f32312d3234203d3e203134353933.roa
File:                     3134392e31392e3136382e302f32312d3234203d3e203134353933.roa (raw, json)
Hash identifier:          chEYkdS697fmdviaGhf6rgo3RCsSKQG/Mgz82wh7waM=
Subject key identifier:   CD:47:A7:41:5A:CD:D8:6E:FA:55:0F:03:5D:BB:D2:86:8A:86:F5:3A
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       43407F18289B6C6203863A72BBCB1C6F83D7A37D
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136382e302f32312d3234203d3e203134353933.roa
Signing time:             Tue 04 Feb 2025 18:13:59 +0000
ROA not before:           Tue 04 Feb 2025 18:08:59 +0000
ROA not after:            Tue 03 Feb 2026 18:13:59 +0000
asID:                     14593
IP address blocks:        149.19.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:40:7f:18:28:9b:6c:62:03:86:3a:72:bb:cb:1c:6f:83:d7:a3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Feb  4 18:08:59 2025 GMT
            Not After : Feb  3 18:13:59 2026 GMT
        Subject: CN=CD47A7415ACDD86EFA550F035DBBD2868A86F53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:23:07:92:ed:25:22:29:d9:15:7d:dc:56:
                    35:15:47:c8:da:8f:f5:48:fb:a0:27:bb:b3:10:80:
                    5a:2e:39:1f:f4:ae:84:74:0a:17:f0:b0:55:f4:8b:
                    f1:d8:14:19:0e:c9:21:78:cc:b3:38:d7:cd:a5:55:
                    6d:65:70:cc:56:3b:66:f1:2f:85:15:bf:7d:ea:85:
                    4f:b5:ff:13:e4:7c:37:ce:6e:86:34:7b:9f:f0:cc:
                    c9:05:cb:84:11:27:b0:33:87:74:2b:5f:53:81:1f:
                    89:34:f5:e4:7b:8b:39:49:44:1d:92:89:ee:b1:df:
                    30:bf:96:7b:6b:50:e5:52:da:3d:1c:da:23:0b:7d:
                    46:94:24:44:4e:48:b2:26:0a:a5:10:72:30:01:07:
                    92:15:68:7f:3f:f7:f3:80:74:46:f0:58:d6:cd:00:
                    8e:eb:75:d0:e9:c0:8a:49:aa:d4:b6:2c:0b:a2:51:
                    86:9e:03:7e:68:cf:f3:2d:95:7c:30:cc:ed:89:52:
                    31:1e:be:02:79:25:57:a9:86:12:66:d0:15:c5:87:
                    f7:aa:e8:b3:1c:e7:e8:24:3c:75:b0:fc:69:7c:30:
                    05:8b:32:9c:ae:3b:de:c1:c3:4d:f0:3f:98:eb:15:
                    d5:97:c0:53:78:14:10:1f:19:4f:f5:d6:20:d3:55:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:A7:41:5A:CD:D8:6E:FA:55:0F:03:5D:BB:D2:86:8A:86:F5:3A
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136382e302f32312d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:de:48:65:ed:fc:2d:cb:47:0c:06:30:32:fd:53:e3:42:ad:
         28:4d:fa:62:a5:2a:b1:21:a1:a2:b6:d1:8e:1f:24:c0:9e:ce:
         24:47:b1:b7:23:b3:c7:5b:49:3e:85:9e:8c:6c:50:72:0d:62:
         a4:b8:4a:ac:cb:57:71:bb:00:d0:61:13:b2:e0:17:86:94:f8:
         e2:04:b7:ba:46:34:4e:a9:7b:82:fc:66:7c:56:11:0b:b5:37:
         5a:d3:ea:e8:ab:27:f8:a5:2f:08:9f:e3:30:b9:56:1e:7b:18:
         c3:cc:cf:0d:d9:e2:6a:fe:4e:2c:e4:bf:6e:41:66:dc:7a:2c:
         7d:a6:6c:0d:eb:ad:a0:f8:a6:03:ad:4b:55:74:e7:3a:c0:e8:
         c2:cb:e7:d6:fc:02:73:7f:47:95:d5:e5:88:32:3e:c5:4d:6c:
         fd:f7:c0:68:8d:a2:2e:7a:3b:3a:fd:40:ee:01:84:5d:fc:58:
         f6:77:52:ac:32:2d:f2:8d:5f:46:4b:18:40:b7:8a:ff:c4:f3:
         6e:15:6e:03:ac:87:75:1f:37:ec:74:18:f6:19:08:7d:a7:48:
         92:8d:07:9b:d1:e3:3c:e5:13:28:6c:d0:fa:63:14:9a:9b:46:
         80:d4:4e:51:40:3f:66:9b:fa:41:e5:5a:e2:eb:e5:77:58:71:
         dc:ff:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:14 2025 by rpki-client