Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f31392d3234203d3e20323632313732.roa
File:                     3139302e3134332e3139322e302f31392d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          fvyQUI4XpsGgSli1/gzk5VU6s8aei2pHMgmBHpb1yWI=
Subject key identifier:   6A:F9:99:E4:33:4A:17:C7:74:FF:E7:5E:9E:62:B9:94:C5:57:A3:94
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0FC8BD5F9872DE298EF0662A8B62599E53E056CA
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f31392d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:30 +0000
ROA not before:           Tue 04 Feb 2025 18:50:30 +0000
ROA not after:            Tue 03 Feb 2026 18:55:30 +0000
asID:                     262172
IP address blocks:        190.143.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c8:bd:5f:98:72:de:29:8e:f0:66:2a:8b:62:59:9e:53:e0:56:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:30 2025 GMT
            Not After : Feb  3 18:55:30 2026 GMT
        Subject: CN=6AF999E4334A17C774FFE75E9E62B994C557A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:fe:55:d7:8a:7a:e7:45:18:01:ad:18:ca:
                    ef:77:ff:a9:85:ad:f5:bf:fc:a2:a2:cb:e4:47:17:
                    1d:50:4f:bb:4c:78:a3:c5:2a:de:17:71:1e:4f:00:
                    77:08:47:e8:05:6d:93:d7:21:96:86:24:b1:c5:93:
                    02:cb:c1:b1:bb:6f:96:f6:3e:38:da:07:b7:ed:97:
                    59:d5:05:21:06:53:94:a5:65:72:c1:24:a2:ac:6b:
                    80:16:35:7f:8e:17:73:20:3a:ee:8b:05:8e:55:0b:
                    40:79:1f:32:18:4c:32:b1:c7:8f:39:86:a4:16:05:
                    12:95:04:39:45:3e:f4:b3:99:c7:84:5e:00:58:55:
                    9e:8d:88:6c:8a:13:48:31:26:36:1c:c2:a7:2d:f5:
                    f5:be:aa:76:1f:d8:19:b7:ef:79:54:d2:8a:f1:2d:
                    b5:dc:3e:0b:e5:77:3e:34:96:f5:ed:e0:72:2f:79:
                    94:7e:00:f1:2e:2b:54:9a:7a:a4:56:f2:27:52:31:
                    0a:7a:30:04:18:ff:8d:f8:2b:77:6d:14:af:3d:46:
                    06:02:4a:48:38:51:96:8d:55:90:90:1c:a4:a6:ce:
                    67:e8:ad:f2:74:bc:4e:ff:cb:63:8c:91:2f:1e:7d:
                    ec:1a:88:d3:73:ec:66:ea:7e:99:e2:ae:48:d0:4b:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:99:E4:33:4A:17:C7:74:FF:E7:5E:9E:62:B9:94:C5:57:A3:94
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3139322e302f31392d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:04:de:95:0c:1f:09:3c:58:16:84:43:8a:86:f7:4d:ea:
         32:35:28:c5:76:0b:81:94:e4:4d:c5:f6:66:a9:f9:a2:67:01:
         ab:82:d9:8a:d0:48:75:31:e4:94:bc:56:79:22:ab:23:6d:74:
         cc:c8:aa:e7:1f:66:d7:dd:fe:aa:cc:ab:3d:45:e7:7e:55:f5:
         4c:20:02:9b:74:65:77:e2:23:c8:81:32:14:9b:68:25:11:31:
         c2:ce:4f:9c:55:81:15:3b:02:43:46:1b:3a:72:9c:3d:97:b4:
         47:95:c9:82:47:49:b8:70:26:46:8e:7d:73:9e:0f:e0:88:38:
         38:14:7b:01:2e:65:4d:98:87:e4:91:95:00:a2:19:f8:52:3c:
         e0:0f:11:22:04:6f:cd:b0:31:06:1b:4f:da:dc:13:e4:5d:39:
         72:38:fb:c7:1e:4b:6a:37:c1:b3:a0:5f:6a:7a:1e:29:b1:48:
         1c:00:6f:39:ef:94:9d:05:13:92:7d:9f:e0:d6:f7:de:78:63:
         d8:7f:a2:c2:71:c4:99:a2:19:fc:a6:53:65:2a:a8:de:84:87:
         bd:0a:51:b9:43:2b:39:99:03:f9:ab:95:f8:4a:46:35:c5:fc:
         85:ad:81:d7:db:6a:86:2e:bf:13:45:bd:08:7c:71:26:b5:9f:
         24:4d:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:06:16 2025 by rpki-client