Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e35362e302f32312d3231203d3e203532323731.roa
File:                     3139302e3131322e35362e302f32312d3231203d3e203532323731.roa (raw, json)
Hash identifier:          x4Ds2NeShW9XgVQGWE/B5Ui8oR1RTYlOp+LqJqsm79s=
Subject key identifier:   B3:5A:81:66:D1:C6:1F:24:05:9D:9F:4F:3A:6D:C3:47:5B:4C:42:22
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       2461B5550A536EC2317E6D46A6D8E2477F39CE8E
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e35362e302f32312d3231203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:24 +0000
ROA not before:           Tue 04 Feb 2025 18:42:24 +0000
ROA not after:            Tue 03 Feb 2026 18:47:24 +0000
asID:                     52271
IP address blocks:        190.112.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:b5:55:0a:53:6e:c2:31:7e:6d:46:a6:d8:e2:47:7f:39:ce:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:24 2025 GMT
            Not After : Feb  3 18:47:24 2026 GMT
        Subject: CN=B35A8166D1C61F24059D9F4F3A6DC3475B4C4222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:36:df:fa:f2:37:27:70:b6:84:81:91:86:
                    92:b4:f2:7f:b0:5a:52:64:da:74:e1:63:e7:e1:2b:
                    e0:d2:9b:b0:ff:01:5a:44:09:32:0b:1d:f3:9b:e6:
                    f0:0c:48:54:f5:b2:22:33:46:f9:96:91:9d:4f:34:
                    3c:4f:33:44:a9:7f:6a:69:34:16:8f:94:84:3f:7f:
                    bd:47:26:91:d0:6d:48:18:c6:1d:ea:3a:02:52:b2:
                    92:5e:ee:36:e0:0c:f0:05:56:7c:b1:94:05:65:f1:
                    36:40:c5:b1:f2:01:84:62:73:2e:bc:3d:a4:73:2c:
                    78:67:fd:c8:b0:4d:aa:5c:6a:e8:fb:24:7d:79:5d:
                    16:a5:74:9e:3e:c6:b9:00:56:a4:ef:b1:3a:54:44:
                    2f:d4:eb:fd:04:6e:c6:f8:82:8f:ac:79:72:c9:d5:
                    89:f2:94:fa:13:e8:59:a5:b3:3b:24:25:02:2b:29:
                    6f:af:21:ae:db:05:fb:a3:4c:5b:1c:23:7f:8f:83:
                    98:31:dd:43:c2:1b:5b:7f:63:1d:bd:64:06:64:f3:
                    5c:79:ac:d5:3b:a8:87:24:aa:d5:b3:47:7f:d8:e5:
                    59:16:79:90:a0:b1:dd:0a:70:0a:7d:53:0b:f0:06:
                    a2:29:98:6a:56:10:b7:16:64:06:4c:91:31:0f:75:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:81:66:D1:C6:1F:24:05:9D:9F:4F:3A:6D:C3:47:5B:4C:42:22
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e35362e302f32312d3231203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:c6:9c:f9:56:15:92:af:17:56:65:3d:94:ee:89:b7:71:
         02:54:a4:f6:55:fa:d2:43:c0:ea:4a:78:d1:ef:71:22:12:87:
         0e:da:65:90:69:66:0d:90:18:71:4b:df:24:d3:4f:0c:bb:3e:
         b1:e3:8d:f8:da:69:ac:c3:08:60:02:80:07:9d:a7:af:8d:2b:
         37:ff:f3:b4:23:ac:48:9a:19:ef:9f:97:6a:f1:25:75:a9:62:
         b8:c2:9a:1e:c6:b6:18:2c:2c:80:9f:43:bd:b1:3f:89:22:ee:
         72:d7:e7:d0:2d:93:84:4a:62:f3:ca:e5:60:03:8b:ed:dd:34:
         57:96:de:db:4e:30:e3:e3:44:e1:b9:fe:82:17:88:ed:e1:0d:
         b8:f0:b9:86:69:bc:94:b6:86:63:20:e1:1c:20:9c:06:c6:c3:
         58:42:05:c0:8a:de:ee:83:59:87:be:0e:0f:32:18:d9:04:34:
         25:a9:36:85:38:bc:54:e5:0c:f3:48:ad:6d:f9:7c:6a:df:fb:
         70:d7:85:e6:ed:0f:43:21:af:4b:e0:60:1b:71:cd:6e:b4:cf:
         95:73:e0:2c:85:3e:1d:4d:00:6f:3d:1b:84:9c:57:ab:d9:c8:
         79:16:31:13:03:13:58:e6:d6:50:72:70:d7:f0:b6:0b:57:30:
         aa:79:57:15
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJGG1VQpTbsIxfm1GptjiR385zo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNTAyMDQxODQyMjRaFw0yNjAyMDMxODQ3MjRaMDMxMTAvBgNV
BAMTKEIzNUE4MTY2RDFDNjFGMjQwNTlEOUY0RjNBNkRDMzQ3NUI0QzQyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSljbf+vI3J3C2hIGRhpK08n+w
WlJk2nThY+fhK+DSm7D/AVpECTILHfOb5vAMSFT1siIzRvmWkZ1PNDxPM0Spf2pp
NBaPlIQ/f71HJpHQbUgYxh3qOgJSspJe7jbgDPAFVnyxlAVl8TZAxbHyAYRicy68
PaRzLHhn/ciwTapcauj7JH15XRaldJ4+xrkAVqTvsTpURC/U6/0Ebsb4go+seXLJ
1YnylPoT6FmlszskJQIrKW+vIa7bBfujTFscI3+Pg5gx3UPCG1t/Yx29ZAZk81x5
rNU7qIckqtWzR3/Y5VkWeZCgsd0KcAp9UwvwBqIpmGpWELcWZAZMkTEPdb/tAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUs1qBZtHGHyQFnZ9POm3DR1tMQiIwHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzkzMDJlMzEzMTMyMmUzNTM2MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzMjMyMzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA75wODAN
BgkqhkiG9w0BAQsFAAOCAQEASNTGnPlWFZKvF1ZlPZTuibdxAlSk9lX60kPA6kp4
0e9xIhKHDtplkGlmDZAYcUvfJNNPDLs+seON+NpprMMIYAKAB52nr40rN//ztCOs
SJoZ75+XavEldaliuMKaHsa2GCwsgJ9DvbE/iSLuctfn0C2ThEpi88rlYAOL7d00
V5be204w4+NE4bn+gheI7eENuPC5hmm8lLaGYyDhHCCcBsbDWEIFwIre7oNZh74O
DzIY2QQ0Jak2hTi8VOUM80itbfl8at/7cNeF5u0PQyGvS+BgG3HNbrTPlXPgLIU+
HU0Abz0bhJxXq9nIeRYxEwMTWObWUHJw1/C2C1cwqnlXFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:50:22 2025 by rpki-client