Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e352e33322e302f31392d3234203d3e203237393031.roa
File:                     3139302e352e33322e302f31392d3234203d3e203237393031.roa (raw, json)
Hash identifier:          wAj5Qe2STJweOc4vaiJ1+QsKASKPXpWLminCsiScb9Q=
Subject key identifier:   8E:8D:7A:16:C2:1D:9A:5A:24:1B:B5:51:C3:7B:70:09:9B:8A:1E:3C
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       56FDBAE1E2579BC5361ABFCC5E495E16561DC334
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e352e33322e302f31392d3234203d3e203237393031.roa
Signing time:             Tue 04 Feb 2025 18:54:16 +0000
ROA not before:           Tue 04 Feb 2025 18:49:16 +0000
ROA not after:            Tue 03 Feb 2026 18:54:16 +0000
asID:                     27901
IP address blocks:        190.5.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fd:ba:e1:e2:57:9b:c5:36:1a:bf:cc:5e:49:5e:16:56:1d:c3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Feb  4 18:49:16 2025 GMT
            Not After : Feb  3 18:54:16 2026 GMT
        Subject: CN=8E8D7A16C21D9A5A241BB551C37B70099B8A1E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:39:37:f9:65:fd:55:d8:e9:bf:82:98:d6:
                    22:5e:89:c5:4e:01:30:8a:87:73:57:06:61:7d:44:
                    ca:59:88:ab:03:f5:48:4c:c8:51:c5:4e:5d:a1:d4:
                    8a:d6:d4:53:31:0f:43:91:09:2a:90:c6:59:40:fa:
                    6d:54:42:a0:a0:c4:48:7b:0c:f2:6c:c8:2c:eb:01:
                    de:22:e6:12:9b:fc:9d:46:fa:bf:ca:fa:02:5c:df:
                    62:1e:4d:d2:65:ff:2e:4a:6e:57:05:c3:fb:8b:55:
                    f2:b3:5c:8f:a3:56:3e:54:2c:89:26:d7:33:b7:d4:
                    ed:ea:be:fa:af:5e:03:5c:4a:91:68:3d:c5:67:d0:
                    da:dc:76:36:5f:d4:33:aa:85:98:72:31:ee:90:da:
                    4e:8e:07:63:f9:00:ac:c0:ea:0c:79:03:dd:33:06:
                    93:74:43:a4:51:d8:68:2b:c9:f1:a3:60:3f:b1:cd:
                    2c:2d:80:94:22:82:9b:67:de:ee:5a:7f:d7:63:31:
                    25:12:55:f7:6a:60:4c:5a:31:2e:ad:10:5a:0f:a2:
                    f3:1e:99:6e:62:59:48:27:24:03:0a:91:39:a8:20:
                    d1:2c:23:85:53:f9:91:fb:1d:37:89:60:56:52:60:
                    e5:de:be:6b:0b:e1:5b:ba:27:20:63:95:25:c4:d1:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:7A:16:C2:1D:9A:5A:24:1B:B5:51:C3:7B:70:09:9B:8A:1E:3C
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e352e33322e302f31392d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:14:cb:d6:d9:2b:98:e5:49:02:bf:30:a7:38:42:4e:d5:f3:
         db:7b:dd:90:57:ff:2d:e5:ab:d9:c3:60:ad:07:68:81:c4:c3:
         68:89:2b:14:1b:0e:1d:9b:b3:fb:38:2d:2a:b0:83:a7:ac:a8:
         23:57:9f:a7:12:31:f8:21:f4:83:0f:ef:12:eb:e8:89:79:73:
         8c:f6:03:0c:61:74:09:67:85:af:5e:f6:a8:5b:23:d5:69:f3:
         ea:98:06:87:97:4d:fc:21:d5:f2:66:ff:87:a7:e7:c2:62:dc:
         0b:e5:94:da:10:18:64:82:f9:8e:c6:b7:85:20:e3:91:1f:21:
         56:04:2e:50:0f:5c:67:8d:ed:ef:b9:23:28:fa:26:7a:cc:bd:
         08:93:e8:d5:92:fe:9b:e6:e3:7b:56:ad:d8:a4:fa:5d:dc:3b:
         0f:71:45:df:0d:43:e4:70:ff:d1:40:e8:b0:89:4d:18:a9:39:
         2f:22:ff:6a:4c:15:2f:1b:a9:dd:db:e8:26:13:23:8e:3e:9b:
         e9:55:cb:26:8c:f3:70:35:9c:18:d0:c6:a7:50:1b:50:27:70:
         e9:a1:f9:6f:b8:4d:64:ea:1d:db:94:62:9f:b9:d5:a4:ab:ca:
         f0:c9:b6:da:62:cd:de:44:f5:c6:65:79:b5:93:61:79:b1:67:
         f8:46:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:40 2025 by rpki-client