Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa
File:                     3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa (raw, json)
Hash identifier:          3Dr2oGh7JYGjFW77vNSai2cbP4g2Yd4KvX1lvITR1O8=
Subject key identifier:   6B:1A:0F:BC:51:64:24:26:F4:75:ED:63:91:F0:86:B8:E7:10:2F:BF
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       629F352E65331907FD8DA2838E97E4CEDF89107E
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa
Signing time:             Tue 04 Feb 2025 18:43:51 +0000
ROA not before:           Tue 04 Feb 2025 18:38:51 +0000
ROA not after:            Tue 03 Feb 2026 18:43:51 +0000
asID:                     27751
IP address blocks:        190.121.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9f:35:2e:65:33:19:07:fd:8d:a2:83:8e:97:e4:ce:df:89:10:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Feb  4 18:38:51 2025 GMT
            Not After : Feb  3 18:43:51 2026 GMT
        Subject: CN=6B1A0FBC51642426F475ED6391F086B8E7102FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:ea:68:34:6c:68:2a:5a:bb:0e:ee:be:ea:
                    ed:a3:e8:75:74:18:ca:1d:eb:81:85:d6:23:f1:62:
                    d3:3e:16:3b:49:b2:0b:2b:6a:d6:25:10:02:45:c8:
                    b4:28:55:61:ca:73:af:c4:15:ef:8c:f2:d7:01:b6:
                    93:ef:95:38:c6:ac:f2:b7:cd:15:9f:21:a7:fd:10:
                    24:28:b6:17:db:08:b1:12:d0:bd:01:b6:98:06:a2:
                    fb:84:a9:4a:69:be:0f:f8:d7:16:ef:28:26:c4:55:
                    b3:2e:38:f2:c6:74:22:4d:e9:e4:cd:3e:3a:55:1f:
                    ce:ca:51:e9:c4:1a:d5:6e:35:b3:bb:d8:14:9c:65:
                    90:d4:2c:b2:22:8d:ec:76:35:c4:4d:05:fa:65:6b:
                    a6:1b:18:b1:29:7a:0b:c3:a3:f3:35:df:c2:bf:eb:
                    3e:61:de:34:d6:0a:ed:aa:05:82:46:01:82:7d:ee:
                    9d:b8:94:72:19:33:e6:15:82:5b:53:32:e3:8c:80:
                    39:f9:ee:68:9b:b1:f0:b0:a6:44:e4:d8:ca:15:d0:
                    f1:c3:a6:7f:fe:3f:58:93:14:b5:8f:2b:e6:6b:0b:
                    12:36:04:e2:ec:bb:0e:8c:8c:c0:e2:80:df:64:77:
                    10:75:ef:8a:fc:fa:f9:52:79:83:54:a1:5c:6b:7c:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1A:0F:BC:51:64:24:26:F4:75:ED:63:91:F0:86:B8:E7:10:2F:BF
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:75:18:e9:9d:ec:f6:34:59:6f:29:8e:25:0b:a1:d8:64:a3:
         18:aa:af:4b:84:cd:eb:b5:e6:51:29:be:f6:83:84:2e:4b:71:
         16:35:76:b9:ac:c8:4a:f9:f3:4b:e9:0d:85:78:38:47:2e:dc:
         6f:fa:7a:cc:90:a7:4d:32:f0:70:47:44:4d:3a:76:1e:6d:74:
         d9:dd:f7:b3:0f:f1:86:0d:23:a8:6f:b0:b3:76:95:92:d2:5a:
         d9:5d:05:43:e8:01:00:3d:ca:4a:7c:a4:08:a4:d1:0e:b5:3e:
         17:30:65:4b:eb:04:b1:cf:ba:e7:d8:62:ad:8a:12:5d:f8:33:
         a1:24:8d:24:d4:b4:58:73:04:7b:57:96:fe:6a:ed:60:e8:13:
         65:77:67:5e:b2:9b:cb:c3:68:4a:cb:4f:d2:ba:ac:39:ec:33:
         1c:45:15:e2:61:08:be:10:e7:9c:29:57:35:1b:94:eb:81:7c:
         9c:b9:d0:f4:da:76:df:01:e9:8f:f5:64:9b:99:ac:4f:c9:db:
         6b:aa:fa:8b:2b:af:eb:da:b2:7e:29:b0:7d:3e:33:92:f3:63:
         4e:c3:bd:bd:01:0f:13:2a:fd:37:85:0b:23:25:5d:91:c9:b0:
         22:ee:fd:f1:b3:61:9b:ca:1e:07:9a:db:6f:f2:99:2e:07:f4:
         5e:54:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:05 2025 by rpki-client