Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa
File:                     3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa (raw, json)
Hash identifier:          BGBv4w6kU8dEXCVpR1mMJXRHoMr0lGe6ytN0xgSOeR4=
Subject key identifier:   19:C7:03:29:37:97:E8:06:E5:22:03:90:47:F6:75:41:2D:BD:E9:63
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       652C02C6385E5C3B0D14FCBAF4051A3360A57A0C
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa
Signing time:             Tue 04 Feb 2025 18:19:31 +0000
ROA not before:           Tue 04 Feb 2025 18:14:31 +0000
ROA not after:            Tue 03 Feb 2026 18:19:31 +0000
asID:                     40676
IP address blocks:        190.110.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2c:02:c6:38:5e:5c:3b:0d:14:fc:ba:f4:05:1a:33:60:a5:7a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Feb  4 18:14:31 2025 GMT
            Not After : Feb  3 18:19:31 2026 GMT
        Subject: CN=19C703293797E806E522039047F675412DBDE963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:f2:c1:73:aa:85:cd:16:a5:f0:9a:6d:b0:
                    50:85:58:9a:fa:cb:ec:5c:14:34:1a:4c:f3:0f:c8:
                    3b:51:52:e7:a5:78:04:5e:b0:1c:65:4e:af:08:27:
                    56:f4:c7:3c:f2:b7:60:3d:c6:98:ba:b5:f2:33:ef:
                    d0:82:82:4d:b8:11:ac:5d:eb:96:35:57:26:ae:88:
                    7b:16:a1:70:b6:14:53:9c:8f:e8:7c:3a:c5:91:96:
                    55:88:1f:ee:7d:65:a6:f1:6a:f3:13:1f:42:d6:8e:
                    75:45:f5:44:aa:af:65:9b:a2:61:35:07:1c:28:f8:
                    db:c0:51:fc:7b:6b:96:bf:37:b3:be:0d:30:d1:8a:
                    f4:87:42:c1:ef:fc:93:72:42:e2:cb:ca:2a:5a:73:
                    cf:1c:b3:54:97:eb:5c:ea:d8:5d:61:24:68:b0:b0:
                    31:81:b4:8a:f4:a6:2b:c9:a0:bb:fa:63:4b:b1:c6:
                    8c:06:39:9f:75:e7:72:78:89:f4:9f:74:f3:de:a5:
                    3e:36:66:ee:02:38:6e:e6:01:6c:9d:f1:90:aa:56:
                    eb:1b:83:a0:f1:4c:a1:a9:17:c1:98:98:bb:ef:ca:
                    0c:6d:6a:81:a0:02:81:1c:c6:92:b7:98:57:47:cd:
                    9a:2f:a7:9b:65:42:5e:73:b8:52:4f:ed:0e:ab:95:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C7:03:29:37:97:E8:06:E5:22:03:90:47:F6:75:41:2D:BD:E9:63
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:be:05:a7:3c:75:b4:fb:71:5a:c0:ef:65:1f:1b:a0:df:56:
         34:90:a6:e3:4c:2a:ec:b4:ac:ab:2f:75:c9:4a:bc:bf:7b:89:
         ef:1e:95:16:d1:a4:40:f5:bd:47:57:e7:e1:35:53:53:0e:81:
         45:7a:0a:df:04:13:ec:e9:f8:b7:2f:b0:99:d0:bf:9e:7f:b4:
         af:63:a2:b3:1b:a1:7b:e0:20:0f:e9:69:a0:1e:72:d0:da:68:
         be:3d:d4:b2:74:98:3e:cb:f3:13:90:89:4c:08:01:48:03:84:
         6b:39:83:88:e1:3a:17:92:a0:b2:21:3d:a5:a5:37:38:44:29:
         6a:a4:ce:0c:22:48:81:6f:99:07:51:1a:3d:0c:c5:08:c7:be:
         95:c1:8b:4c:d3:24:5a:4c:cd:5b:b6:36:06:64:8e:56:0a:73:
         e2:39:5d:a1:c0:00:dd:ab:48:0b:f8:34:dd:fe:b5:dd:6b:38:
         b1:f6:6f:4d:c9:32:39:31:4f:65:ef:a7:a7:79:02:37:6b:ab:
         be:a7:83:45:91:ad:c2:e7:43:ec:b6:ea:fb:68:d2:c5:c3:09:
         bd:a0:91:22:73:89:08:17:e9:a8:f9:84:c3:8e:fa:d0:f5:e6:
         fe:0e:6f:bb:8c:04:c5:95:49:5a:ef:03:1b:e8:38:32:17:74:
         f8:a1:84:e6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZSwCxjheXDsNFPy69AUaM2ClegwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA2NTUxNDczOTg0QTdEMDIxQ0U0QzkzMDA2OEQ0REQ0
Q0JBMTQyQTAeFw0yNTAyMDQxODE0MzFaFw0yNjAyMDMxODE5MzFaMDMxMTAvBgNV
BAMTKDE5QzcwMzI5Mzc5N0U4MDZFNTIyMDM5MDQ3RjY3NTQxMkRCREU5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqPLBc6qFzRal8JptsFCFWJr6
y+xcFDQaTPMPyDtRUueleAResBxlTq8IJ1b0xzzyt2A9xpi6tfIz79CCgk24Eaxd
65Y1VyauiHsWoXC2FFOcj+h8OsWRllWIH+59ZabxavMTH0LWjnVF9USqr2WbomE1
Bxwo+NvAUfx7a5a/N7O+DTDRivSHQsHv/JNyQuLLyipac88cs1SX61zq2F1hJGiw
sDGBtIr0pivJoLv6Y0uxxowGOZ9153J4ifSfdPPepT42Zu4COG7mAWyd8ZCqVusb
g6DxTKGpF8GYmLvvygxtaoGgAoEcxpK3mFdHzZovp5tlQl5zuFJP7Q6rldLfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGccDKTeX6AblIgOQR/Z1QS296WMwHwYDVR0j
BBgwFoAUsGVRRzmEp9AhzkyTAGjU3Uy6FCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMzgzMEJERTdBN0RDN0NCRTI3NTA1OTBFODEzNUUzNzZC
MTYzNEFDNUMwRUU2OTQ2NEQxMTdFQTA2MTUxMjZFLzAvQjA2NTUxNDczOTg0QTdE
MDIxQ0U0QzkzMDA2OEQ0REQ0Q0JBMTQyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMDY1NTE0NzM5ODRBN0QwMjFD
RTRDOTMwMDY4RDRERDRDQkExNDJBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTM4MzBCREU3QTdEQzdDQkUyNzUwNTkwRTgxMzVFMzc2QjE2MzRBQzVD
MEVFNjk0NjREMTE3RUEwNjE1MTI2RS8wLzMxMzkzMDJlMzEzMTMwMmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDMwMzYzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvm54
MA0GCSqGSIb3DQEBCwUAA4IBAQBRvgWnPHW0+3FawO9lHxug31Y0kKbjTCrstKyr
L3XJSry/e4nvHpUW0aRA9b1HV+fhNVNTDoFFegrfBBPs6fi3L7CZ0L+ef7SvY6Kz
G6F74CAP6WmgHnLQ2mi+PdSydJg+y/MTkIlMCAFIA4RrOYOI4ToXkqCyIT2lpTc4
RClqpM4MIkiBb5kHURo9DMUIx76VwYtM0yRaTM1btjYGZI5WCnPiOV2hwADdq0gL
+DTd/rXdazix9m9NyTI5MU9l76eneQI3a6u+p4NFka3C50Pstur7aNLFwwm9oJEi
c4kIF+mo+YTDjvrQ9eb+Dm+7jATFlUla7wMb6DgyF3T4oYTm
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:37:50 2025 by rpki-client