Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/3139302e3132332e31362e302f32322d3234203d3e203532333839.roa
File:                     3139302e3132332e31362e302f32322d3234203d3e203532333839.roa (raw, json)
Hash identifier:          xYpYoT41YPxMEUXcuuIzrr0BLuivHlUcc0Iy2aF3H4c=
Subject key identifier:   EC:38:1E:9F:CC:80:41:52:F9:2C:4F:4D:EB:BC:E1:56:35:17:EC:0A
Certificate issuer:       /CN=C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8
Certificate serial:       5E72F72A6E13A9BA141ECB2739DA4C39CE8FB53A
Authority key identifier: C2:D0:E7:D1:A5:9D:2B:82:9A:F1:B2:62:94:9F:4B:94:C6:CE:F0:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/3139302e3132332e31362e302f32322d3234203d3e203532333839.roa
Signing time:             Tue 04 Feb 2025 18:11:49 +0000
ROA not before:           Tue 04 Feb 2025 18:06:49 +0000
ROA not after:            Tue 03 Feb 2026 18:11:49 +0000
asID:                     52389
IP address blocks:        190.123.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:72:f7:2a:6e:13:a9:ba:14:1e:cb:27:39:da:4c:39:ce:8f:b5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8
        Validity
            Not Before: Feb  4 18:06:49 2025 GMT
            Not After : Feb  3 18:11:49 2026 GMT
        Subject: CN=EC381E9FCC804152F92C4F4DEBBCE1563517EC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:d8:03:96:99:aa:f3:56:bc:ac:12:35:b1:
                    37:6b:a0:f2:21:b7:ea:66:ac:7c:d7:21:7a:bd:38:
                    49:b1:d7:a6:db:b8:0b:53:fc:5c:ab:61:29:86:ca:
                    e0:07:51:79:23:43:4d:b3:5f:88:f4:16:05:4b:73:
                    16:10:0e:c6:4a:a1:8c:ba:3f:10:27:31:a8:3c:16:
                    55:ee:79:6b:de:b6:72:a8:4e:e5:7e:09:da:3c:87:
                    14:71:d7:b9:79:f4:0a:46:7b:68:93:6c:8a:13:6a:
                    01:27:14:64:f9:dd:e6:e5:0e:f1:92:44:3c:a4:11:
                    e8:c2:f7:ed:68:92:7c:b5:21:b6:77:57:4b:d1:4d:
                    bf:7f:17:fa:d5:0b:6a:83:c5:3f:61:b2:c8:0c:8c:
                    e0:55:e2:75:46:43:be:12:99:96:51:49:66:ab:91:
                    f7:33:68:a0:c7:31:fa:22:8b:1d:e7:a3:f9:b4:90:
                    9e:ca:e7:31:88:8f:66:c5:20:ca:7e:fc:69:6e:8b:
                    f3:ed:1e:f8:b5:b1:f1:cd:40:80:4c:46:d1:c3:3b:
                    5b:fb:37:e1:ba:e0:c6:38:ba:64:23:d9:49:77:ae:
                    39:ef:42:7e:a9:2e:04:53:33:0a:d4:09:ec:1a:24:
                    5e:09:80:cb:2b:37:9c:84:a6:68:a8:66:4d:25:10:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:38:1E:9F:CC:80:41:52:F9:2C:4F:4D:EB:BC:E1:56:35:17:EC:0A
            X509v3 Authority Key Identifier:
                keyid:C2:D0:E7:D1:A5:9D:2B:82:9A:F1:B2:62:94:9F:4B:94:C6:CE:F0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/3139302e3132332e31362e302f32322d3234203d3e203532333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:49:ff:ce:0a:14:d8:f9:34:66:11:bd:b0:2f:db:fb:e9:fb:
         ca:8c:2a:93:a4:af:27:6c:c7:8a:21:a7:9c:68:86:0e:40:ca:
         2c:5f:71:6c:60:f1:f7:76:81:44:94:52:51:29:e4:fe:58:bd:
         b2:b8:d2:a1:57:6e:1d:53:48:0b:b4:44:f1:04:f1:bf:ab:a4:
         4d:29:0e:b4:df:e2:ea:5f:52:8e:d8:64:0b:71:fc:01:bd:e3:
         77:d3:16:82:df:13:e0:9e:3d:c2:e2:99:e5:ee:fe:63:cc:0a:
         2f:f4:7f:7a:6e:99:c8:cf:f4:fe:d5:be:39:bd:75:7d:09:51:
         5a:73:62:e5:ca:9d:83:31:89:ea:ae:6b:b9:10:2d:55:f5:7d:
         2c:d8:6e:10:2d:dd:76:e3:59:30:cc:79:b9:b2:a1:a2:39:cb:
         c5:89:e3:c4:25:ac:66:ce:5f:3f:7d:d0:f0:17:e5:a0:c4:e6:
         4d:96:9d:42:f1:9b:9e:34:85:87:e7:2d:74:d3:85:14:a4:bf:
         65:bd:83:1f:11:07:98:ef:94:bc:1b:3a:19:fb:6a:7a:73:97:
         ec:08:66:e9:14:9e:24:47:b6:02:f3:f4:e4:3a:b4:51:47:6b:
         63:f7:fa:f8:69:d4:7e:dc:51:10:b7:10:1b:cd:59:36:f5:85:
         33:96:59:7f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXnL3Km4TqboUHssnOdpMOc6PtTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJEMEU3RDFBNTlEMkI4MjlBRjFCMjYyOTQ5RjRCOTRD
NkNFRjBEODAeFw0yNTAyMDQxODA2NDlaFw0yNjAyMDMxODExNDlaMDMxMTAvBgNV
BAMTKEVDMzgxRTlGQ0M4MDQxNTJGOTJDNEY0REVCQkNFMTU2MzUxN0VDMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgdgDlpmq81a8rBI1sTdroPIh
t+pmrHzXIXq9OEmx16bbuAtT/FyrYSmGyuAHUXkjQ02zX4j0FgVLcxYQDsZKoYy6
PxAnMag8FlXueWvetnKoTuV+Cdo8hxRx17l59ApGe2iTbIoTagEnFGT53eblDvGS
RDykEejC9+1okny1IbZ3V0vRTb9/F/rVC2qDxT9hssgMjOBV4nVGQ74SmZZRSWar
kfczaKDHMfoiix3no/m0kJ7K5zGIj2bFIMp+/Glui/PtHvi1sfHNQIBMRtHDO1v7
N+G64MY4umQj2Ul3rjnvQn6pLgRTMwrUCewaJF4JgMsrN5yEpmioZk0lEHQ7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7Dgen8yAQVL5LE9N67zhVjUX7AowHwYDVR0j
BBgwFoAUwtDn0aWdK4Ka8bJilJ9LlMbO8NgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkQ3NDVERTZDQjI0OTU1QjM4RDRBQTUzNDZEOTM0NkE5
MjZBNzBDQTA2NTc1MkU3NUJFRDEzNDcwQTVGNDg3LzAvQzJEMEU3RDFBNTlEMkI4
MjlBRjFCMjYyOTQ5RjRCOTRDNkNFRjBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkQwRTdEMUE1OUQyQjgyOUFG
MUIyNjI5NDlGNEI5NEM2Q0VGMEQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJENzQ1REU2Q0IyNDk1NUIzOEQ0QUE1MzQ2RDkzNDZBOTI2QTcwQ0Ew
NjU3NTJFNzVCRUQxMzQ3MEE1RjQ4Ny8wLzMxMzkzMDJlMzEzMjMzMmUzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr57EDAN
BgkqhkiG9w0BAQsFAAOCAQEAWEn/zgoU2Pk0ZhG9sC/b++n7yowqk6SvJ2zHiiGn
nGiGDkDKLF9xbGDx93aBRJRSUSnk/li9srjSoVduHVNIC7RE8QTxv6ukTSkOtN/i
6l9SjthkC3H8Ab3jd9MWgt8T4J49wuKZ5e7+Y8wKL/R/em6ZyM/0/tW+Ob11fQlR
WnNi5cqdgzGJ6q5ruRAtVfV9LNhuEC3dduNZMMx5ubKhojnLxYnjxCWsZs5fP33Q
8BfloMTmTZadQvGbnjSFh+ctdNOFFKS/Zb2DHxEHmO+UvBs6GftqenOX7Ahm6RSe
JEe2AvP05Dq0UUdrY/f6+GnUftxRELcQG81ZNvWFM5ZZfw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:38 2025 by rpki-client