Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa
File:                     3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa (raw, json)
Hash identifier:          Iur/p8ZTTqLH6FzFpYHVmm2c/kay6dNLPLqtZxwIoHs=
Subject key identifier:   F8:ED:02:13:A2:2A:DE:3C:10:16:D0:90:13:D0:4A:97:33:A8:C9:06
Certificate issuer:       /CN=C16940956C9D4811364B5F0969082CDFA737DE6C
Certificate serial:       7CB342A1626476A0013163C27438AB6E6170CDEE
Authority key identifier: C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa
Signing time:             Tue 04 Feb 2025 20:01:19 +0000
ROA not before:           Tue 04 Feb 2025 19:56:19 +0000
ROA not after:            Tue 03 Feb 2026 20:01:19 +0000
asID:                     262221
IP address blocks:        190.106.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b3:42:a1:62:64:76:a0:01:31:63:c2:74:38:ab:6e:61:70:cd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16940956C9D4811364B5F0969082CDFA737DE6C
        Validity
            Not Before: Feb  4 19:56:19 2025 GMT
            Not After : Feb  3 20:01:19 2026 GMT
        Subject: CN=F8ED0213A22ADE3C1016D09013D04A9733A8C906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:59:1b:20:12:3f:92:dd:fb:e5:f0:c4:c0:
                    97:4b:5b:c2:0a:d2:3e:c1:21:b9:53:15:ca:4b:3b:
                    e0:09:b5:e3:f5:43:dc:c1:47:6f:8b:84:b2:27:69:
                    c0:35:93:3e:3e:54:ee:a3:77:d1:d2:bf:26:65:88:
                    84:28:11:30:d3:de:97:72:68:66:7d:8c:20:33:cb:
                    36:b9:e4:f0:10:14:96:aa:1e:02:0e:f2:e5:53:d1:
                    9d:10:1f:cc:dc:53:ad:62:9b:0a:cf:d4:dd:87:f4:
                    9d:c0:c6:7d:4d:e9:0a:24:09:8b:b9:da:34:a6:a6:
                    7e:95:6a:a8:b0:52:f2:85:1e:57:9a:3a:62:08:9e:
                    85:a4:b6:2b:40:9a:8e:34:a6:45:e8:d2:d5:b6:36:
                    95:a0:72:c2:c5:f9:97:69:0d:8d:15:4f:66:db:17:
                    93:bd:ca:4d:2e:e8:1e:92:7d:7e:4c:74:4a:10:b4:
                    78:68:31:52:06:e9:d5:16:96:d4:52:79:2f:9e:81:
                    97:63:16:76:d1:f1:0c:e4:86:27:0e:ba:c3:b4:b3:
                    0a:79:9f:89:22:91:28:48:9f:9f:ff:48:f0:23:77:
                    94:16:96:cc:00:ff:43:67:cf:4c:33:60:99:eb:9a:
                    fd:05:b3:ab:ac:7a:78:bc:af:22:6f:f6:5b:84:d5:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:02:13:A2:2A:DE:3C:10:16:D0:90:13:D0:4A:97:33:A8:C9:06
            X509v3 Authority Key Identifier:
                keyid:C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:29:12:0d:20:bc:d3:31:6e:82:a1:23:56:db:66:99:c5:4c:
         b4:4f:46:28:8d:cc:3c:a7:2b:b2:77:66:e8:c1:5f:13:5b:f3:
         46:0f:80:be:be:be:9c:fd:93:17:e3:2d:66:79:a2:e8:0b:b3:
         2f:c1:1d:6c:76:e4:65:5d:60:31:de:71:d8:4f:84:7d:a1:83:
         23:c0:b3:d5:37:61:cd:77:36:e1:45:a2:6c:44:7c:97:37:58:
         b5:58:9a:d6:96:69:ed:5e:84:4b:a4:1b:db:c0:dd:e2:c2:30:
         0f:74:37:b2:f5:31:5e:71:fd:5b:11:e9:22:69:3d:45:d0:6b:
         85:00:fa:74:3c:13:aa:07:39:2e:95:92:e5:c1:28:95:b3:ca:
         5e:a9:ed:72:16:ac:89:23:2c:b1:66:6c:c2:06:31:62:87:04:
         eb:67:c4:bd:99:5f:f7:31:69:25:41:87:2a:b8:56:5e:8f:4d:
         b9:d9:32:73:64:5d:e8:63:86:03:7d:26:a9:45:34:9a:4e:75:
         4c:f1:a4:a2:7c:d0:07:47:41:98:5c:9c:3f:de:fa:3d:5e:c6:
         18:72:01:8b:13:e1:ce:a0:4f:e0:1e:72:55:cd:82:12:1e:a2:
         2e:8e:79:7d:07:12:8b:95:d3:5d:5c:3d:f8:84:7b:34:d1:08:
         ac:57:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:45 2025 by rpki-client