Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36312e302f32342d3234203d3e203532323731.roa
File:                     3139302e3131322e36312e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          vBjyIjMKt5YMNYW1GSDlezMof/HQUqgbIpFr/Ow0VOU=
Subject key identifier:   49:10:D3:BC:0B:F4:E0:9E:E0:EA:54:C6:79:DB:F7:44:5D:4A:B9:D3
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       06DE30674BB6B4D99B52258187FDCDC48E817085
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36312e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:26 +0000
ROA not before:           Tue 04 Feb 2025 18:42:26 +0000
ROA not after:            Tue 03 Feb 2026 18:47:26 +0000
asID:                     52271
IP address blocks:        190.112.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:de:30:67:4b:b6:b4:d9:9b:52:25:81:87:fd:cd:c4:8e:81:70:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:26 2025 GMT
            Not After : Feb  3 18:47:26 2026 GMT
        Subject: CN=4910D3BC0BF4E09EE0EA54C679DBF7445D4AB9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:0a:9e:50:8e:38:75:d7:58:8d:75:11:3c:
                    22:ca:ad:a3:bc:8c:e1:ed:20:a5:45:86:eb:c9:96:
                    d2:02:ca:59:70:a5:e3:7f:26:1a:16:cb:56:6a:69:
                    b2:d4:5e:4c:6a:e4:b6:b5:d2:b4:25:22:40:f3:72:
                    53:6f:c0:bb:83:fd:96:53:ae:06:8b:f3:42:f8:d3:
                    14:27:4e:86:f5:d2:e8:ca:f1:11:ae:ba:6b:e3:77:
                    8d:79:9b:85:c3:d3:24:3a:cd:c8:b7:33:79:f5:c2:
                    7b:55:a6:f4:8a:f4:af:24:b2:58:d9:21:91:37:b1:
                    05:43:04:87:76:96:4f:b0:f9:e1:17:df:3f:bf:85:
                    9a:17:2e:e8:51:8a:a8:2c:20:c1:9b:5d:1c:74:42:
                    bd:9f:66:97:48:12:4c:8c:64:d1:49:2d:5c:06:18:
                    95:ac:32:e1:16:0d:6f:32:59:b0:d9:c7:1f:72:82:
                    ca:e7:78:4c:07:a3:d8:86:e6:22:fc:ba:ec:dc:b0:
                    3c:1a:4e:ae:c7:cf:da:ff:0f:11:72:a4:20:e6:94:
                    15:4e:7f:6a:a9:d2:b2:5d:ae:cd:83:41:18:50:d8:
                    01:5a:91:26:d6:f5:63:80:ec:2a:f7:b4:57:1c:8a:
                    dc:79:7a:d6:da:e8:72:3c:f0:e4:3a:63:02:43:5e:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:D3:BC:0B:F4:E0:9E:E0:EA:54:C6:79:DB:F7:44:5D:4A:B9:D3
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36312e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:96:cd:db:8a:6b:15:6e:5b:7c:4c:0b:c5:a0:f5:f9:fa:1b:
         8c:3c:08:3c:f8:6f:90:01:ca:24:72:ca:f9:1c:c1:a5:3f:42:
         16:10:1d:ae:a4:00:e0:e8:05:26:91:95:64:c0:3f:c8:ad:9a:
         5a:99:08:ce:ce:df:ff:2f:20:41:db:c1:c1:89:9a:1e:30:ee:
         aa:a5:c1:cd:69:a0:4a:c1:5b:8d:ae:06:da:68:46:72:d1:2c:
         ef:8f:0e:c4:23:a4:2e:6a:1b:ab:4c:a0:e6:e6:1f:0e:de:29:
         4c:27:a3:e4:f0:ce:0f:49:d1:56:d7:5f:66:ee:13:6c:02:23:
         4d:c0:7d:dc:69:6a:a5:80:7c:13:1e:a0:cf:02:00:9d:0a:0c:
         94:01:44:80:14:b8:4d:3b:88:28:72:fa:48:8c:b6:42:6d:74:
         f5:bb:f5:64:c5:94:4c:6a:5e:13:3c:d6:d5:da:9c:ca:76:43:
         69:cf:ab:ae:e5:3f:01:1c:54:4a:3b:53:3d:38:f5:7a:52:3a:
         f9:99:f3:4d:e5:7c:35:c4:3f:14:87:e8:ec:71:57:70:30:e6:
         cd:69:4f:b1:b7:67:b5:8d:20:d3:ca:5b:40:94:8d:ee:d7:de:
         5b:30:d4:f3:90:91:57:6a:26:07:25:7c:00:cb:70:02:00:8f:
         29:a8:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:50:21 2025 by rpki-client