Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36322e302f32342d3234203d3e203532323731.roa
File:                     3139302e3131322e36322e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          f9FxH7F8/lWyh81jN6bGq0hoaNcODO/+1bAqZlF4exs=
Subject key identifier:   85:43:B1:52:3D:F7:8A:C8:A5:71:E8:5E:50:F2:04:12:96:D5:29:5D
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       2CC3630C7725FEAB38927F6895D3C75EBAEC79A6
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36322e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:24 +0000
ROA not before:           Tue 04 Feb 2025 18:42:24 +0000
ROA not after:            Tue 03 Feb 2026 18:47:24 +0000
asID:                     52271
IP address blocks:        190.112.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c3:63:0c:77:25:fe:ab:38:92:7f:68:95:d3:c7:5e:ba:ec:79:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:24 2025 GMT
            Not After : Feb  3 18:47:24 2026 GMT
        Subject: CN=8543B1523DF78AC8A571E85E50F2041296D5295D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:04:f5:93:4b:2d:3f:16:85:36:bc:32:73:
                    89:21:f0:92:6c:91:d0:5e:3f:c9:a8:16:50:d5:41:
                    f4:96:a6:01:6a:ac:64:3f:d3:63:77:6a:d8:70:72:
                    69:20:75:ad:b3:3d:29:68:7d:29:f5:0a:3a:1e:ac:
                    a6:fd:78:9b:84:bb:fd:ee:5e:b9:4f:3c:31:07:bc:
                    ca:69:8a:03:06:59:ae:a8:fc:d4:10:09:13:b9:14:
                    71:31:7c:12:1d:f7:f6:29:fe:77:a4:ac:a5:95:92:
                    7e:e0:d1:16:2f:0b:6d:ee:85:f2:a7:7b:b1:30:29:
                    b6:12:e0:69:42:4f:f3:59:f9:45:cd:99:23:3c:89:
                    99:7e:b5:77:ae:92:2e:4a:e3:ab:06:e4:87:e8:4d:
                    e8:f0:53:ce:84:a6:a5:35:a4:3a:56:e9:96:ae:e6:
                    7b:e8:2b:f3:ff:c1:95:0e:5c:d4:ad:a2:42:c7:3b:
                    9c:ac:e4:c4:47:25:fb:9a:f5:c0:ab:a0:6b:ee:ed:
                    af:1d:07:c2:7f:6a:b1:d9:b6:1d:1a:df:4c:62:31:
                    8d:88:38:3e:8f:36:7c:b9:35:8e:ab:68:6e:89:79:
                    20:72:4e:3a:80:e5:69:52:7a:a2:ba:01:34:e8:e7:
                    62:48:57:e4:58:d5:6b:9c:3e:67:5c:66:4f:a0:1b:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:43:B1:52:3D:F7:8A:C8:A5:71:E8:5E:50:F2:04:12:96:D5:29:5D
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36322e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:10:d1:a6:e5:45:f9:24:81:56:a5:02:a1:ee:63:85:3d:d7:
         84:29:d3:af:16:f0:47:3c:7d:63:e7:81:68:31:ed:c6:df:ba:
         26:98:0e:4f:b5:c7:21:c8:83:96:02:a3:96:0c:7e:51:16:33:
         5c:6f:08:f1:43:64:5b:2e:ed:9f:11:57:40:c9:1d:c7:1f:19:
         1a:87:0e:7f:1d:25:30:62:a5:ec:80:dd:a0:6e:80:b6:ff:89:
         61:7f:ed:70:af:41:2b:ee:29:b7:60:a6:c9:ce:7a:07:76:08:
         03:36:9f:b7:d6:c0:cd:e2:0e:dc:ac:99:74:a3:31:71:5f:5c:
         3c:a8:6b:d2:16:df:bd:8d:d1:cf:35:48:05:27:e1:e5:a3:0b:
         fa:df:40:ae:a3:0b:c8:40:93:d5:9e:e8:6b:2b:ba:15:2f:f0:
         42:79:0d:a8:3c:a6:f0:fb:f2:ea:a7:df:0c:8f:77:10:8a:7a:
         ab:0a:a5:73:6d:6a:37:15:46:9f:7b:a0:76:f0:97:44:78:c1:
         e3:1b:07:6d:ee:bf:1d:0c:0a:3d:d6:1f:aa:d6:f8:a8:22:4e:
         9e:d3:9f:bd:01:26:51:0a:a2:6d:b2:2d:6d:ae:4f:1f:a3:ec:
         8d:97:97:82:0b:94:9a:53:70:a4:5f:e6:91:1a:c5:2a:89:e7:
         21:62:aa:9e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULMNjDHcl/qs4kn9oldPHXrrseaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNTAyMDQxODQyMjRaFw0yNjAyMDMxODQ3MjRaMDMxMTAvBgNV
BAMTKDg1NDNCMTUyM0RGNzhBQzhBNTcxRTg1RTUwRjIwNDEyOTZENTI5NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5igT1k0stPxaFNrwyc4kh8JJs
kdBeP8moFlDVQfSWpgFqrGQ/02N3athwcmkgda2zPSlofSn1CjoerKb9eJuEu/3u
XrlPPDEHvMppigMGWa6o/NQQCRO5FHExfBId9/Yp/nekrKWVkn7g0RYvC23uhfKn
e7EwKbYS4GlCT/NZ+UXNmSM8iZl+tXeuki5K46sG5IfoTejwU86EpqU1pDpW6Zau
5nvoK/P/wZUOXNStokLHO5ys5MRHJfua9cCroGvu7a8dB8J/arHZth0a30xiMY2I
OD6PNny5NY6raG6JeSByTjqA5WlSeqK6ATTo52JIV+RY1WucPmdcZk+gGyclAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhUOxUj33isilceheUPIEEpbVKV0wHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzkzMDJlMzEzMTMyMmUzNjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5wPjAN
BgkqhkiG9w0BAQsFAAOCAQEAZRDRpuVF+SSBVqUCoe5jhT3XhCnTrxbwRzx9Y+eB
aDHtxt+6JpgOT7XHIciDlgKjlgx+URYzXG8I8UNkWy7tnxFXQMkdxx8ZGocOfx0l
MGKl7IDdoG6Atv+JYX/tcK9BK+4pt2Cmyc56B3YIAzaft9bAzeIO3KyZdKMxcV9c
PKhr0hbfvY3RzzVIBSfh5aML+t9ArqMLyECT1Z7oayu6FS/wQnkNqDym8Pvy6qff
DI93EIp6qwqlc21qNxVGn3ugdvCXRHjB4xsHbe6/HQwKPdYfqtb4qCJOntOfvQEm
UQqibbItba5PH6PsjZeXgguUmlNwpF/mkRrFKonnIWKqng==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:52:39 2025 by rpki-client