Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          YWKCXdOBHLwCh/nogzuRaXMzajqa2uJQK9tSKuaXqaY=
Subject key identifier:   9F:09:FF:9D:84:CA:06:57:68:29:F8:7B:C4:D0:0E:2C:5F:64:C3:30
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       75EC2494937DB19A320A288985B86312B4A9FEA8
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 04 Feb 2025 18:50:25 +0000
ROA not before:           Tue 04 Feb 2025 18:45:25 +0000
ROA not after:            Tue 03 Feb 2026 18:50:25 +0000
asID:                     272150
IP address blocks:        192.141.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ec:24:94:93:7d:b1:9a:32:0a:28:89:85:b8:63:12:b4:a9:fe:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Feb  4 18:45:25 2025 GMT
            Not After : Feb  3 18:50:25 2026 GMT
        Subject: CN=9F09FF9D84CA06576829F87BC4D00E2C5F64C330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:87:99:5e:2e:7b:5f:dc:a4:50:3c:c1:38:
                    90:31:cd:60:08:73:15:5f:3f:5c:b1:59:71:03:9f:
                    91:37:12:7e:5d:af:57:16:f9:ca:21:74:39:b5:27:
                    b6:cd:9f:90:f2:1f:bb:92:bc:ed:1b:07:cd:66:ca:
                    58:11:90:e0:59:3e:4e:20:b4:c1:15:f0:6c:f4:63:
                    ff:a0:fb:fb:58:73:3b:38:09:6e:c9:2e:eb:42:e2:
                    17:2b:88:70:88:72:82:28:62:4a:78:98:9b:41:f3:
                    ae:4b:a0:db:5d:a2:c9:c0:80:6a:0d:46:99:8e:2b:
                    19:8b:f7:d4:32:64:7b:46:08:8b:86:ca:3f:46:98:
                    2c:98:67:3d:92:ab:38:8f:49:00:d8:03:9e:5d:06:
                    64:c5:26:5d:2e:f4:bc:cf:89:d5:94:dd:95:11:2f:
                    e1:2b:a5:4a:69:0d:a9:bc:14:31:39:dc:e2:96:a0:
                    0f:45:b8:10:94:52:4c:54:74:af:b7:a7:5b:e3:86:
                    b0:95:37:b4:ac:4c:58:ac:7c:6f:0e:80:66:dc:8a:
                    08:9b:54:f8:fd:6a:fb:0a:c8:63:48:1d:6f:15:8d:
                    11:60:90:2d:70:57:68:a5:e9:5a:82:fc:a0:1a:e1:
                    b3:f7:04:4f:d3:3b:17:f5:33:00:7b:91:2d:9d:d4:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:09:FF:9D:84:CA:06:57:68:29:F8:7B:C4:D0:0E:2C:5F:64:C3:30
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:d0:67:30:80:2a:c1:3c:1e:45:94:08:f4:00:75:f3:79:
         63:11:96:ea:21:69:db:eb:5b:a5:14:2b:d8:41:9e:b3:f1:fe:
         80:97:8d:f9:fa:b4:1b:3b:6d:fc:6c:23:a7:68:20:04:86:2b:
         bb:a1:c0:94:e1:fc:5c:e2:c9:da:1f:fd:3f:87:a3:76:89:86:
         37:fd:1f:6b:6b:a7:5b:fa:d1:b7:e0:93:e6:54:54:03:54:01:
         34:69:ec:0a:67:a0:ac:b2:e7:7d:af:11:91:9f:b0:e0:08:f8:
         df:c5:89:29:1f:2b:6c:18:13:c8:22:e7:b6:20:bd:dc:ab:65:
         b7:44:51:21:32:f8:18:41:52:e5:2e:da:28:35:6e:72:fc:08:
         f5:fa:55:5f:07:72:03:34:c8:3d:ff:b3:3e:2a:75:2b:da:54:
         7a:a4:fa:a2:11:7e:42:39:9e:88:fa:b6:22:2c:ae:b0:6d:47:
         71:5a:fb:2e:62:f2:bd:65:e3:63:1b:30:77:50:ac:db:7a:91:
         6b:7e:0d:45:62:98:7b:a1:06:a9:c1:c3:03:38:4f:bf:0e:a8:
         09:bc:85:3a:fe:5c:1f:63:89:08:16:9c:af:5f:d9:a7:96:32:
         72:1e:63:80:9e:de:53:71:f7:d8:b3:9a:08:87:93:71:54:ff:
         f3:7d:e0:17
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdewklJN9sZoyCiiJhbhjErSp/qgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk0NDg5Mjg4N0EyMjlGOTQ5NDdGQjMxQTNBMzJGRDU0
Mjk0MDE2RTAeFw0yNTAyMDQxODQ1MjVaFw0yNjAyMDMxODUwMjVaMDMxMTAvBgNV
BAMTKDlGMDlGRjlEODRDQTA2NTc2ODI5Rjg3QkM0RDAwRTJDNUY2NEMzMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdMIeZXi57X9ykUDzBOJAxzWAI
cxVfP1yxWXEDn5E3En5dr1cW+cohdDm1J7bNn5DyH7uSvO0bB81mylgRkOBZPk4g
tMEV8Gz0Y/+g+/tYczs4CW7JLutC4hcriHCIcoIoYkp4mJtB865LoNtdosnAgGoN
RpmOKxmL99QyZHtGCIuGyj9GmCyYZz2SqziPSQDYA55dBmTFJl0u9LzPidWU3ZUR
L+ErpUppDam8FDE53OKWoA9FuBCUUkxUdK+3p1vjhrCVN7SsTFisfG8OgGbcigib
VPj9avsKyGNIHW8VjRFgkC1wV2il6VqC/KAa4bP3BE/TOxf1MwB7kS2d1HovAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnwn/nYTKBldoKfh7xNAOLF9kwzAwHwYDVR0j
BBgwFoAUeUSJKIeiKflJR/sxo6Mv1UKUAW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODcxNjlEN0U3QjgzOTNGMDJDNzYxMjVCRkMzMUY3OTk3
RUMzNDdFNTdEQ0U4N0NDNEI5ODIyQzhGQTIxNDM4LzAvNzk0NDg5Mjg4N0EyMjlG
OTQ5NDdGQjMxQTNBMzJGRDU0Mjk0MDE2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTQ0ODkyODg3QTIyOUY5NDk0
N0ZCMzFBM0EzMkZENTQyOTQwMTZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg3MTY5RDdFN0I4MzkzRjAyQzc2MTI1QkZDMzFGNzk5N0VDMzQ3RTU3
RENFODdDQzRCOTgyMkM4RkEyMTQzOC8wLzMxMzkzMjJlMzEzNDMxMmUzMjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzEzNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwI0X
MA0GCSqGSIb3DQEBCwUAA4IBAQBvAdBnMIAqwTweRZQI9AB183ljEZbqIWnb61ul
FCvYQZ6z8f6Al435+rQbO238bCOnaCAEhiu7ocCU4fxc4snaH/0/h6N2iYY3/R9r
a6db+tG34JPmVFQDVAE0aewKZ6Cssud9rxGRn7DgCPjfxYkpHytsGBPIIue2IL3c
q2W3RFEhMvgYQVLlLtooNW5y/Aj1+lVfB3IDNMg9/7M+KnUr2lR6pPqiEX5COZ6I
+rYiLK6wbUdxWvsuYvK9ZeNjGzB3UKzbepFrfg1FYph7oQapwcMDOE+/DqgJvIU6
/lwfY4kIFpyvX9mnljJyHmOAnt5TcffYs5oIh5NxVP/zfeAX
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:05 2025 by rpki-client