Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa
File:                     3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          jw+Ij50XiB7llpg0AoxLn4juiHsElGmduaXdQHkATOA=
Subject key identifier:   82:D7:C0:2C:AB:6E:C0:AA:D3:24:A8:CC:0A:2B:26:AB:22:68:6B:12
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       3BF009FF651D9D72D86C4019A2CC4F8134B590E8
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:30 +0000
ROA not before:           Tue 04 Feb 2025 19:59:30 +0000
ROA not after:            Tue 03 Feb 2026 20:04:30 +0000
asID:                     262191
IP address blocks:        190.131.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f0:09:ff:65:1d:9d:72:d8:6c:40:19:a2:cc:4f:81:34:b5:90:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:30 2025 GMT
            Not After : Feb  3 20:04:30 2026 GMT
        Subject: CN=82D7C02CAB6EC0AAD324A8CC0A2B26AB22686B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:c3:16:f8:73:ab:6a:72:ff:f2:64:98:ae:
                    5a:03:ed:49:fb:2c:62:90:66:b7:4d:fb:43:95:03:
                    e4:9c:28:81:0d:f9:e3:43:5f:c7:b2:32:dc:15:86:
                    d0:1f:4c:46:cf:78:96:2f:ad:39:76:5b:fc:d8:d0:
                    72:15:9e:37:ad:47:75:eb:9e:25:30:d5:d6:bd:1d:
                    0a:0d:1f:f4:bb:38:7f:93:2d:bb:2b:d5:0b:94:93:
                    f0:d0:a4:d6:33:5b:70:68:af:57:77:29:76:60:28:
                    12:d7:9e:bb:ba:2c:3c:27:ea:1d:e0:e6:37:1c:79:
                    10:57:87:7a:cf:4c:06:10:d7:0d:9a:3a:ca:52:5c:
                    d7:4f:11:dd:07:f4:d0:17:c1:75:f5:f5:c5:5d:bc:
                    31:83:67:b8:9e:8f:d3:ca:47:8a:1a:7b:e0:23:6a:
                    0c:38:97:40:e8:d6:73:5b:9a:4d:a9:c8:13:1c:d2:
                    be:7b:2b:63:dc:22:f8:27:8d:d5:17:1b:52:76:6e:
                    c8:ae:a2:0b:7a:fa:5e:c9:98:07:5d:04:9e:1b:de:
                    47:24:61:be:36:4d:6b:f6:96:fc:6c:c8:cd:db:59:
                    17:f7:c4:d3:18:0a:34:6a:a6:d0:89:a2:c2:ce:73:
                    ba:31:80:c7:1b:66:9e:2d:5a:86:64:c9:c5:ea:c9:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D7:C0:2C:AB:6E:C0:AA:D3:24:A8:CC:0A:2B:26:AB:22:68:6B:12
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:53:6f:c8:3e:89:c2:8b:5b:b6:ed:64:16:c5:7a:cc:c9:a4:
         96:95:8b:e0:9c:3b:87:2a:40:68:0b:40:b3:86:9a:e6:78:fc:
         f9:70:4d:56:fd:8e:95:88:05:22:d4:57:75:e2:bf:74:c8:c3:
         15:b1:ac:e4:df:12:cb:8b:f5:54:7f:b6:f4:2c:53:9c:2d:ea:
         ad:0d:1f:d2:60:88:b7:f9:f9:c5:fb:70:5f:27:6c:72:da:b5:
         38:ec:1e:24:02:e2:89:45:c9:4e:39:73:c3:a4:32:b5:eb:49:
         fe:15:8a:d0:55:8d:59:aa:fe:96:ca:51:a7:34:bf:ad:f2:6d:
         8c:bd:47:6c:4b:d5:64:59:b0:8b:9e:12:e4:ec:f0:8a:40:bc:
         21:3b:4c:d0:31:8f:b3:2c:62:6b:2a:3c:cc:00:f2:5f:65:cf:
         76:62:5f:c2:64:d5:ff:4f:1f:c6:29:83:cb:ad:85:ba:22:b4:
         05:23:db:45:5e:95:78:13:c9:06:9e:79:79:f9:d8:93:cc:5c:
         b0:f7:8d:8d:4f:b7:e0:16:f5:58:db:28:b5:49:e9:72:e4:3d:
         13:0e:57:2a:c1:e5:03:e5:13:8e:1f:0b:91:b0:c9:3a:8a:7d:
         cc:66:c1:6d:e7:d6:35:21:d1:07:63:55:b1:21:77:5f:f3:6f:
         20:d5:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:46:12 2025 by rpki-client