Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231322e302f32322d3234203d3e203237373338.roa
File:                     3139302e36332e3231322e302f32322d3234203d3e203237373338.roa (raw, json)
Hash identifier:          5dAV80YkAFeZkkioxR43ZuOIvKkHdoWskvlmnpCrt9Q=
Subject key identifier:   FD:BC:2E:05:B7:89:5C:8F:3A:CF:7A:3C:0D:96:26:4F:A6:A2:C6:86
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       412974689B5505F8D3E162D79D733C433B132F65
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231322e302f32322d3234203d3e203237373338.roa
Signing time:             Tue 04 Feb 2025 18:26:40 +0000
ROA not before:           Tue 04 Feb 2025 18:21:40 +0000
ROA not after:            Tue 03 Feb 2026 18:26:40 +0000
asID:                     27738
IP address blocks:        190.63.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:74:68:9b:55:05:f8:d3:e1:62:d7:9d:73:3c:43:3b:13:2f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Feb  4 18:21:40 2025 GMT
            Not After : Feb  3 18:26:40 2026 GMT
        Subject: CN=FDBC2E05B7895C8F3ACF7A3C0D96264FA6A2C686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:e5:23:6c:23:ec:26:20:cd:1d:41:b2:5f:
                    0b:46:7e:07:1d:d4:45:0b:b3:c1:bc:ed:eb:15:7b:
                    30:50:eb:59:da:3e:69:d6:41:1e:56:45:6d:fb:f7:
                    19:2e:07:49:87:75:08:c7:9c:51:af:af:a3:02:04:
                    08:77:f3:9a:71:91:56:c9:8e:a5:7c:aa:ac:19:61:
                    42:7d:42:38:20:66:ab:2e:c4:14:65:a6:18:93:8b:
                    37:2e:d2:98:3b:26:67:1a:ab:a4:e3:80:00:72:72:
                    f8:bc:df:00:ee:6d:4a:02:8c:e2:ab:29:c5:00:c9:
                    21:f7:9e:d5:4b:1d:ca:c2:95:94:20:1d:ff:6a:f5:
                    2c:be:19:cf:1f:bc:60:83:90:c6:c4:60:de:30:06:
                    5d:fb:97:a2:0e:d2:93:28:b1:a1:7b:b7:be:9a:bc:
                    ab:ad:6a:70:0d:20:b0:46:69:de:ee:de:41:0a:5b:
                    79:7b:94:72:50:b5:d2:74:79:92:69:2d:ca:a7:f3:
                    58:df:89:e4:06:c0:15:87:92:13:8b:13:db:bd:b1:
                    7e:9a:12:60:54:bb:4d:35:2e:be:a5:92:68:2a:1c:
                    9d:bd:d6:91:0d:1a:6d:f2:9e:ac:a1:30:6a:4c:8a:
                    4c:bd:79:89:4e:a6:dd:16:79:40:ac:38:3f:83:84:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:2E:05:B7:89:5C:8F:3A:CF:7A:3C:0D:96:26:4F:A6:A2:C6:86
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231322e302f32322d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:f1:26:bc:65:65:c5:a0:6c:4b:44:e5:c6:e0:c9:8e:10:
         e0:df:e0:a4:65:0f:a2:3a:a4:8d:8d:4b:ba:97:b5:27:b3:f1:
         52:64:86:24:3c:ad:6f:bf:17:b2:36:ca:50:fa:19:47:b2:05:
         8a:59:06:45:9c:d3:4d:2b:8e:e0:87:e0:c9:a9:0a:53:91:cb:
         00:67:bb:46:5e:97:94:98:55:c8:00:ea:79:a1:59:ac:41:af:
         70:8b:06:d8:08:68:da:79:80:e8:ce:bf:5d:38:58:6f:a7:bb:
         39:2c:be:9a:32:c6:52:0c:d6:97:a3:25:98:6f:86:4d:41:c8:
         66:d4:97:5c:92:d7:d6:47:3d:fe:ca:7b:69:27:4b:e2:5a:e1:
         02:18:09:f6:93:01:a4:5e:04:51:8e:a7:3a:b7:8f:6c:fb:0a:
         82:f8:09:f2:09:d8:b2:a9:35:54:3b:61:2b:2b:10:d0:8c:1c:
         7e:28:df:49:41:ec:c1:64:52:aa:d6:a0:35:35:b3:a5:3c:77:
         e5:83:02:5c:3c:28:53:3a:67:df:c1:2e:98:fd:24:97:3d:b0:
         8c:82:21:fb:58:a2:74:77:bd:8d:1e:c5:f7:06:b5:aa:fd:a5:
         33:fc:85:20:71:1c:4a:92:04:68:34:7d:08:73:d7:b6:e9:6c:
         e6:e4:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:03 2025 by rpki-client