Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e31392e302f32342d3234203d3e203130323639.roa
File:                     3139302e3139372e31392e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          8IekG6oHF738nns1t2FhXOzuW6nIMwnZQhhKnEWb4Cw=
Subject key identifier:   7F:D7:86:E4:CB:F8:5A:B6:48:5C:6B:F3:66:B4:C3:CE:C4:C3:19:98
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       77A5481AB9A03BA8A36742E93E5A4BCBEB04ED23
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e31392e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:19 +0000
ROA not before:           Tue 04 Feb 2025 18:07:19 +0000
ROA not after:            Tue 03 Feb 2026 18:12:19 +0000
asID:                     10269
IP address blocks:        190.197.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a5:48:1a:b9:a0:3b:a8:a3:67:42:e9:3e:5a:4b:cb:eb:04:ed:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:19 2025 GMT
            Not After : Feb  3 18:12:19 2026 GMT
        Subject: CN=7FD786E4CBF85AB6485C6BF366B4C3CEC4C31998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:db:52:29:19:ef:01:29:b5:c9:bc:43:09:
                    59:09:d6:22:00:be:ac:4b:52:3f:41:08:50:08:10:
                    30:5e:c7:20:d8:ba:99:0b:5f:39:83:4f:89:1e:06:
                    4f:19:36:42:65:0d:d3:ff:ba:ce:c4:f3:e1:4b:5e:
                    a9:66:2c:fb:de:c9:8c:01:88:95:cb:90:5e:ce:8a:
                    8f:26:df:de:b8:3f:c0:13:92:e5:b1:eb:4b:47:17:
                    58:ea:b8:b8:fd:c1:71:b0:ff:e2:55:28:c8:fb:41:
                    96:fd:3f:7b:01:b2:79:70:ce:50:3d:4f:d3:66:72:
                    b9:ca:11:8f:ae:af:7d:1b:d2:27:ec:ca:16:95:19:
                    73:d0:5e:85:e1:2b:bc:ce:a9:f7:f7:e1:01:2e:b5:
                    77:be:db:cd:3e:df:57:d7:26:b2:00:20:dd:3c:70:
                    bb:8d:1b:46:5c:1f:77:d3:47:82:e0:26:54:93:42:
                    a9:87:f6:c2:f4:0c:9c:5c:1f:e7:2a:b9:9e:95:37:
                    92:79:11:d2:6f:cf:44:0d:60:12:e7:5b:40:9e:df:
                    23:39:09:70:cb:ca:03:f8:c1:69:a2:d7:46:c0:59:
                    31:fe:c2:b4:46:d9:1d:14:97:02:90:ab:2f:ea:6f:
                    7f:da:71:9d:b6:64:34:e6:c7:88:87:01:ac:7e:61:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:86:E4:CB:F8:5A:B6:48:5C:6B:F3:66:B4:C3:CE:C4:C3:19:98
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e31392e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:6b:0d:98:19:4b:34:43:2e:a4:a6:9c:61:41:b9:6c:5f:
         01:f8:01:24:3d:26:e2:22:27:69:5f:f8:78:f9:5e:f3:96:d1:
         03:a3:64:9c:e5:39:a4:fe:95:6e:d6:a4:f2:d0:b5:48:da:fb:
         53:b2:c9:2f:04:bc:9d:4d:39:13:bf:c4:8a:f1:42:79:26:bf:
         4f:6a:24:61:75:f3:fe:6f:a9:29:83:42:90:36:bd:81:e0:eb:
         2f:a4:1c:56:3b:0a:4a:e6:7e:23:78:f8:3c:31:a9:df:31:4a:
         3b:3f:ee:e9:e5:a5:a1:dc:85:ad:ea:01:f4:ba:1f:fe:d1:63:
         fb:1a:64:76:de:7f:74:2f:2e:60:91:be:28:84:46:be:71:ed:
         56:6a:ab:34:0f:0b:50:89:5f:83:88:27:fc:ad:93:34:81:ee:
         20:45:70:1b:89:d0:bd:ea:64:bb:1d:6b:62:d7:5b:0b:ab:3b:
         e0:5c:f5:54:bf:aa:00:8a:23:43:62:60:d7:63:4c:b6:46:9f:
         a2:d7:ea:76:dd:66:20:3b:b5:1c:78:1e:e9:30:82:8a:57:b0:
         53:ff:d2:29:62:a8:28:29:df:f3:70:21:33:7b:78:17:3d:73:
         02:3a:2b:0a:df:58:19:4e:2c:0d:11:16:78:47:48:97:c8:cb:
         4f:42:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:34 2025 by rpki-client