Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e39342e302e302f31382d3138203d3e203237383035.roa
File:                     3139312e39342e302e302f31382d3138203d3e203237383035.roa (raw, json)
Hash identifier:          HHcIo1KwLWRC1PF7JkB4HQw7bB+Kmb6/nhwj5qACZEk=
Subject key identifier:   B0:CA:2A:89:40:1C:76:6C:C5:8B:A1:40:23:69:5C:5E:CD:B6:C4:B1
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       4010EDDDD1571519EE53785C053DCFCC5F8B1B78
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e39342e302e302f31382d3138203d3e203237383035.roa
Signing time:             Tue 04 Feb 2025 18:22:33 +0000
ROA not before:           Tue 04 Feb 2025 18:17:33 +0000
ROA not after:            Tue 03 Feb 2026 18:22:33 +0000
asID:                     27805
IP address blocks:        191.94.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 05:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:ed:dd:d1:57:15:19:ee:53:78:5c:05:3d:cf:cc:5f:8b:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:33 2025 GMT
            Not After : Feb  3 18:22:33 2026 GMT
        Subject: CN=B0CA2A89401C766CC58BA14023695C5ECDB6C4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:35:81:e7:ee:dc:92:f0:51:09:6f:5a:c4:
                    f3:23:53:4a:3e:37:74:bc:71:6f:29:b6:fc:7c:59:
                    d7:ef:80:35:15:6b:e7:88:ee:90:9e:14:48:9c:55:
                    ff:80:3b:81:6c:2e:5b:e6:c2:69:b4:c4:99:75:4c:
                    9c:b9:2c:c4:14:41:ea:19:8d:c7:e6:6c:d7:8d:08:
                    06:f1:44:cb:15:c2:b1:85:3d:1f:70:a2:5b:ab:5a:
                    08:e3:e9:4b:f8:91:fb:cc:5c:ed:21:cb:ba:87:38:
                    ab:d6:c4:86:a2:db:e6:89:17:d3:c0:b0:25:76:1a:
                    a8:22:49:2a:f3:3e:49:2d:77:10:52:67:98:b7:6d:
                    e9:fa:d6:d9:50:36:d0:90:88:11:11:5f:d8:18:25:
                    19:22:aa:84:7e:e9:ef:42:71:34:9b:9d:68:ad:3d:
                    22:d1:de:60:a2:09:9e:d0:51:98:cc:7b:bf:59:e1:
                    08:ef:71:8d:3f:c2:b2:8d:1d:0d:46:31:09:75:45:
                    0d:b5:7c:3c:d7:13:82:de:75:e5:30:00:88:9a:45:
                    23:0e:15:55:fa:de:8b:13:93:70:bc:0e:27:1e:24:
                    9c:e9:67:24:bf:5d:73:7f:a3:bb:59:d9:8b:d3:87:
                    db:dd:90:7e:42:6e:cb:9d:b3:61:1b:59:3c:2c:a0:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:2A:89:40:1C:76:6C:C5:8B:A1:40:23:69:5C:5E:CD:B6:C4:B1
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e39342e302e302f31382d3138203d3e203237383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.94.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:93:54:26:a7:41:73:c3:9d:2a:7d:39:71:6a:d0:7a:01:
         ce:74:22:f1:62:c6:cf:04:24:a0:c6:ab:f7:58:0a:17:d8:f3:
         15:a6:e7:f6:b0:04:d3:d0:64:b1:3f:8b:ed:32:d9:92:21:ba:
         c7:36:a5:fa:ea:3b:1a:91:f6:c4:8f:b0:46:23:4a:3a:15:6a:
         b9:f1:b5:b3:df:56:6d:f1:be:8e:65:fd:85:4a:1b:e4:55:d0:
         7e:61:94:b9:35:46:ca:df:10:31:cb:06:f0:e6:a0:28:37:0c:
         50:28:13:ae:77:8e:4e:0d:96:34:ef:d5:b0:c4:f6:71:d7:0c:
         b9:42:b1:79:8f:1b:d0:39:4c:b6:ae:5e:64:3e:fd:35:9f:3d:
         d5:dc:71:5b:c3:49:7c:2f:e4:20:44:0e:5d:4e:13:14:64:cb:
         cb:7a:2b:0f:70:cb:23:02:60:2f:b0:eb:df:51:b2:7c:97:95:
         2f:1b:a8:8a:0f:fc:f4:23:cf:1f:c9:63:98:ef:7a:b9:8c:78:
         ac:bf:67:43:e9:e6:9b:b2:1d:34:4c:ef:aa:38:91:23:32:f5:
         aa:10:b0:59:41:9c:ea:6b:c8:35:b7:f0:97:89:cf:b4:ee:e4:
         ab:2f:07:ce:60:6e:f9:df:d6:5b:0b:c2:b2:d2:45:30:b2:8c:
         c0:38:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:42 2025 by rpki-client