Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35312e302f32342d3234203d3e203130323639.roa
File:                     3139302e3139372e35312e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          XZuDOqnjPo9pP9twNe6HaVGIL4SOV01kc1EofunhPDU=
Subject key identifier:   B4:46:88:93:82:02:63:AE:B1:E1:5E:31:F9:B7:4B:A3:54:84:36:D2
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       7BC8CFE1A6BDDCC0487D1F46697AD651F86C3747
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35312e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:19 +0000
ROA not before:           Tue 04 Feb 2025 18:07:19 +0000
ROA not after:            Tue 03 Feb 2026 18:12:19 +0000
asID:                     10269
IP address blocks:        190.197.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c8:cf:e1:a6:bd:dc:c0:48:7d:1f:46:69:7a:d6:51:f8:6c:37:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:19 2025 GMT
            Not After : Feb  3 18:12:19 2026 GMT
        Subject: CN=B4468893820263AEB1E15E31F9B74BA3548436D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:bb:e0:29:a1:85:f9:16:fa:6d:e0:02:ed:
                    aa:71:aa:c9:e6:73:9d:a1:5e:20:d4:a2:4d:d9:17:
                    f0:3a:f3:71:4b:44:84:a5:cf:33:c5:ae:52:05:a1:
                    f1:d2:0c:82:df:a5:f9:d0:b5:30:bc:78:d2:41:64:
                    cf:85:10:c1:b7:a3:b8:35:04:55:6e:b0:ff:41:cd:
                    c8:c4:5b:07:06:9e:a7:57:96:0e:0f:d4:f3:33:0e:
                    33:7a:bc:1f:d1:44:08:ce:40:a9:76:16:2a:89:e6:
                    6e:30:88:97:01:7b:1b:2c:8f:cc:00:8e:c8:5c:c7:
                    94:ac:27:3b:32:c4:5a:dd:1a:a5:6e:d0:2a:ca:ec:
                    b2:d9:bd:5d:ce:61:ce:1b:13:68:21:f7:e4:36:d7:
                    6f:c5:f6:dd:53:c3:49:8d:12:e0:8b:d8:96:3c:5a:
                    f1:e6:aa:0b:0d:9d:63:82:ac:7d:79:32:06:16:8b:
                    d3:2d:ec:a3:98:69:96:66:b7:95:f7:2b:4e:ef:e5:
                    bb:71:1e:36:5d:75:c9:14:1f:a5:7c:ae:54:94:2b:
                    fe:e6:0d:98:40:f0:b7:5d:7f:f0:4d:94:4e:16:9c:
                    c8:06:29:19:15:6a:b8:74:2b:a5:ea:72:fa:88:33:
                    8f:d3:54:41:84:78:b4:6c:92:b9:ef:eb:1b:b7:81:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:46:88:93:82:02:63:AE:B1:E1:5E:31:F9:B7:4B:A3:54:84:36:D2
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35312e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:40:63:9d:f8:f7:ca:3c:d5:3b:3d:45:a8:c4:97:3f:3b:6a:
         4b:7d:0b:8c:81:a4:14:16:2f:81:c4:29:83:d4:61:8d:33:38:
         fb:98:30:36:a0:e5:6e:db:ef:fe:fc:7c:e5:e8:b0:fb:50:db:
         b1:52:11:f2:5e:cc:ce:0c:7a:c6:14:c3:2a:53:bc:68:2f:4c:
         45:f4:4f:94:46:18:12:b6:5d:d5:5a:03:aa:4d:4c:11:cf:b5:
         ed:ef:8d:2d:b4:16:13:31:f4:95:da:72:1e:4d:2c:68:1e:5c:
         34:8b:4d:4a:1a:72:84:31:ee:9c:e9:6a:c6:80:e0:9b:a4:c3:
         4b:3e:6c:ea:ad:cf:b6:11:e1:fc:80:b6:21:ee:fc:41:f2:d7:
         d8:84:26:da:6b:bd:de:06:94:a0:6a:82:6b:29:7b:6c:52:87:
         cb:a2:81:8a:ce:57:d0:12:f5:e1:e2:2e:43:de:dc:6e:ac:93:
         93:a8:7a:e5:74:69:2e:35:34:f4:f2:91:db:92:7e:55:06:2b:
         8d:d4:12:06:32:59:e7:54:3e:3f:66:d7:03:b2:0b:0a:5f:08:
         ab:7f:34:ed:47:77:4b:cf:e4:81:92:1e:31:75:cc:63:db:48:
         85:bd:7b:e9:52:97:f4:99:2b:06:ce:d4:8d:4d:4b:ec:0a:47:
         bd:d3:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:07 2025 by rpki-client