Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36302e302f32322d3234203d3e203238303936.roa
File:                     3139302e392e36302e302f32322d3234203d3e203238303936.roa (raw, json)
Hash identifier:          A0PvqzylqzpA5GsI1Pav0sT0+OWbA2HW8PL/GRsSwHk=
Subject key identifier:   2F:94:2E:85:30:FE:3B:33:E0:FE:31:79:86:77:F4:7B:32:81:9D:0A
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       030121EFCC3AB299EBED2B3F5C53122FC46EE4A7
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36302e302f32322d3234203d3e203238303936.roa
Signing time:             Tue 04 Feb 2025 18:34:22 +0000
ROA not before:           Tue 04 Feb 2025 18:29:22 +0000
ROA not after:            Tue 03 Feb 2026 18:34:22 +0000
asID:                     28096
IP address blocks:        190.9.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:21:ef:cc:3a:b2:99:eb:ed:2b:3f:5c:53:12:2f:c4:6e:e4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Feb  4 18:29:22 2025 GMT
            Not After : Feb  3 18:34:22 2026 GMT
        Subject: CN=2F942E8530FE3B33E0FE31798677F47B32819D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:b2:f2:f0:62:d2:99:b7:e1:1d:5a:8d:75:
                    4c:c4:8e:37:25:0c:7a:f4:da:3c:ab:e3:ac:26:01:
                    a1:c0:02:d6:25:50:25:ed:6a:a7:7f:97:9c:e8:ba:
                    4d:b9:10:20:65:a8:5f:40:e7:e8:8c:33:d6:48:b5:
                    12:c5:1e:64:a6:01:c9:5b:0a:13:c6:f9:d9:27:ec:
                    7a:f9:6b:5f:bf:4f:b9:ef:3a:64:b7:84:b9:dd:09:
                    fc:92:80:91:f7:2e:fa:58:e9:4a:9b:52:58:0d:50:
                    e1:9b:f5:76:fe:40:0a:43:0a:32:94:95:b1:0c:7a:
                    02:d7:1f:64:70:65:c6:ae:99:9f:6f:96:f2:a6:92:
                    fd:05:c2:25:64:a7:1b:85:f6:a0:cf:a5:e6:50:dc:
                    fb:68:f0:b5:51:ca:ea:a0:86:c2:db:86:32:8f:53:
                    5e:e8:15:2d:db:bc:e8:38:18:ad:49:6d:2f:e0:c7:
                    e7:d4:fb:3d:b7:5e:fd:38:d8:92:22:b4:cd:07:76:
                    ae:03:f3:33:66:f0:76:24:ae:46:ae:73:0c:10:7c:
                    46:2c:9b:40:ed:e2:a2:23:10:81:ae:2c:ec:7a:3e:
                    cc:bd:ed:51:52:6a:9d:30:66:55:67:fe:44:c2:0b:
                    6a:73:4b:a5:2b:e5:52:52:1e:de:8a:1f:5b:71:c6:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:94:2E:85:30:FE:3B:33:E0:FE:31:79:86:77:F4:7B:32:81:9D:0A
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36302e302f32322d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:14:fd:9b:4f:fa:fa:c6:60:2a:00:8d:4f:4f:a1:a6:67:99:
         36:1e:a1:b3:dc:06:25:09:02:bd:a2:67:60:17:6d:37:e1:a0:
         83:00:ba:3d:aa:44:43:ed:23:a3:f6:1f:a7:dc:d1:b0:00:9e:
         9d:39:c6:18:fc:0d:35:7e:4f:d8:c2:55:43:64:0a:11:b5:4b:
         75:89:e4:db:3f:67:c8:07:c6:02:2e:98:15:fd:d8:bd:f0:94:
         35:26:97:ba:2e:8d:e6:00:27:5b:2b:5e:c9:6b:88:cf:3c:8c:
         72:b2:9e:01:10:fe:e1:3e:95:d7:ea:44:fe:de:7d:d8:02:ed:
         12:0c:28:38:c2:96:3d:47:60:1f:c0:f9:10:fc:b3:de:bb:21:
         7b:07:2e:86:25:0b:bd:92:e3:62:bf:01:4d:01:d0:94:42:20:
         e7:75:7c:a5:d8:3a:52:3f:dc:f1:da:94:a4:a3:cf:4f:6b:dd:
         3a:89:8e:58:49:22:ca:dd:87:6b:96:f5:fa:eb:a5:2c:d5:0a:
         74:d9:db:86:a3:ff:48:c5:e8:1a:78:b9:63:ae:ac:a6:5a:aa:
         7f:ce:13:a0:a3:96:b1:ca:6a:b6:1d:d6:ff:c6:09:72:47:41:
         a3:4d:bb:1e:b3:3e:35:64:0e:87:7c:dc:50:22:ef:8b:46:e2:
         34:ef:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:03:34 2025 by rpki-client