Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e3132382e302f31372d3234203d3e2037343138.roa
File:                     3139302e38322e3132382e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          JMuZIxtv+FP9HVXnQtsiOfhXPH7NkpDcK+xMSKnNILk=
Subject key identifier:   25:32:27:02:B5:A9:5C:84:80:E0:F1:29:AF:8C:23:91:66:78:1F:4D
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       0F6D3CFFFFB606B7F6935E226A5F4A10984224A3
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e3132382e302f31372d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:01:00 +0000
ROA not before:           Tue 04 Feb 2025 19:56:00 +0000
ROA not after:            Tue 03 Feb 2026 20:01:00 +0000
asID:                     7418
IP address blocks:        190.82.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6d:3c:ff:ff:b6:06:b7:f6:93:5e:22:6a:5f:4a:10:98:42:24:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:00 2025 GMT
            Not After : Feb  3 20:01:00 2026 GMT
        Subject: CN=25322702B5A95C8480E0F129AF8C239166781F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:00:24:63:6d:e8:9e:78:eb:05:a3:a8:81:
                    53:fd:fd:bc:28:e7:5e:54:c2:60:9c:a3:58:9e:1a:
                    45:34:d1:fa:80:4e:df:24:b2:70:5a:13:40:bc:cf:
                    14:a1:1f:ff:08:cf:f3:97:64:34:88:fe:ba:cb:96:
                    20:df:f9:f0:d0:3d:f6:1d:9a:37:d3:17:19:68:cd:
                    68:08:55:46:dd:69:2e:42:9e:45:20:9c:bb:11:89:
                    47:9a:a4:21:ab:ee:3d:c0:13:89:dd:4f:a8:5b:a8:
                    c4:04:1e:13:de:47:ec:97:b1:c4:4b:66:b5:37:66:
                    c0:31:71:d8:e4:df:8f:f3:70:f0:41:06:91:4c:61:
                    b2:6d:e2:87:61:fb:16:42:4a:b1:bc:d9:90:9d:69:
                    9d:08:e1:60:bd:6e:c9:bd:67:14:26:14:c8:09:65:
                    82:52:ef:c1:1a:6b:55:d1:be:03:a8:45:a4:06:62:
                    e6:1f:51:cf:c0:de:7e:5b:7b:7d:88:78:11:71:9d:
                    34:c0:a7:da:07:79:d6:f9:48:f4:f7:27:8f:68:dc:
                    27:68:2f:a1:ae:3a:69:42:ea:50:ee:62:fa:9f:56:
                    5a:30:f0:49:64:3a:76:68:21:62:b8:e1:82:dc:9e:
                    58:48:72:66:37:db:1b:c8:6b:41:67:f1:bc:7b:ff:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:32:27:02:B5:A9:5C:84:80:E0:F1:29:AF:8C:23:91:66:78:1F:4D
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e3132382e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:38:67:0f:5d:14:6c:20:ec:99:34:e6:cc:50:0a:73:7e:
         4c:f6:22:81:ae:b8:1c:42:c2:f1:99:d7:0a:bd:bd:f0:94:e5:
         8c:8b:ed:c3:17:4f:4f:83:10:94:6f:0d:4a:da:93:12:69:51:
         15:b1:3c:25:26:9a:87:dc:19:f5:50:77:0f:00:bc:7e:93:c4:
         56:80:81:db:d2:72:86:dc:28:e7:96:e3:c0:68:7a:9d:6d:b8:
         66:8e:ee:51:41:aa:76:60:0e:62:01:3e:d1:73:8d:6a:f1:20:
         b0:88:f9:13:a5:4e:79:28:0e:ec:f0:da:31:8c:92:06:b5:62:
         a1:2b:1f:5f:bc:53:99:1e:40:d4:f2:a0:43:cf:23:ec:5a:75:
         22:cb:d2:7a:07:e7:ea:39:25:e5:55:38:23:86:d9:09:65:c3:
         35:64:2d:0f:52:77:f2:ee:15:30:dd:3f:2b:44:cd:26:31:5c:
         c4:63:8b:ad:2e:28:56:36:53:3a:f6:f9:c4:e7:dc:41:c5:94:
         98:c0:71:de:cc:36:d3:eb:26:d8:1a:70:be:32:e1:d3:6f:75:
         ce:4c:c8:c9:ee:46:42:15:c1:f2:a7:fe:f1:3c:a2:ef:53:87:
         63:9a:2b:6a:2c:bb:ba:b1:64:8a:95:6c:67:18:1b:a4:e6:56:
         d3:17:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:28 2025 by rpki-client