Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3139203d3e203238313134.roa
File:                     3139302e31322e3136302e302f31392d3139203d3e203238313134.roa (raw, json)
Hash identifier:          Oxe9F4uKrDf+/KCWAJVvA6EVzTOUot2kVqdh+8gecJ8=
Subject key identifier:   42:59:1B:7D:40:11:3C:5E:96:E9:23:0D:49:53:D7:F7:AD:01:83:C1
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       7ECEAE0E746B9B021D715C5F82A8D67F05CDF104
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3139203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:45 +0000
ROA not before:           Tue 04 Feb 2025 18:02:45 +0000
ROA not after:            Tue 03 Feb 2026 18:07:45 +0000
asID:                     28114
IP address blocks:        190.12.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ce:ae:0e:74:6b:9b:02:1d:71:5c:5f:82:a8:d6:7f:05:cd:f1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:45 2025 GMT
            Not After : Feb  3 18:07:45 2026 GMT
        Subject: CN=42591B7D40113C5E96E9230D4953D7F7AD0183C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:12:af:31:8b:57:6b:ae:aa:dc:0b:31:13:
                    52:8c:e3:68:4e:9d:b1:75:01:2a:49:61:af:57:a9:
                    74:97:a2:9c:85:95:ec:76:5e:d0:79:3e:ee:c3:65:
                    94:f4:20:c1:37:27:c6:61:41:86:14:ba:0a:a7:58:
                    05:71:6a:f7:40:ff:fd:44:ee:cb:99:e1:0a:49:de:
                    7d:9d:c6:80:90:e7:97:78:98:4b:af:dc:f3:03:ae:
                    05:80:e3:ef:d6:43:64:68:da:ae:ba:78:be:5a:60:
                    dc:4b:dc:31:bf:a9:85:9a:d8:0c:92:b8:9b:ab:a6:
                    41:68:0c:b5:3b:71:97:41:af:84:24:c9:b0:b8:c6:
                    ad:4e:a8:42:65:c9:bf:a9:63:9e:d3:a9:1f:13:d2:
                    7c:f7:20:ac:2e:f6:ad:27:2f:72:2e:fa:63:d7:e7:
                    c8:37:e0:7b:bc:ff:61:c4:90:d2:87:30:f1:04:4f:
                    92:16:3b:ac:19:cc:6d:79:28:05:55:7e:0d:30:3f:
                    f1:1d:0e:55:89:ee:07:4e:3d:c2:a9:89:e1:3e:cc:
                    84:a1:87:14:df:9b:59:b5:71:7c:df:fb:de:b2:04:
                    00:bc:37:3a:cd:45:e6:96:3e:19:5b:23:bd:cd:91:
                    1e:8b:04:c0:86:a8:fb:5f:68:5b:be:b4:d7:5c:3d:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:1B:7D:40:11:3C:5E:96:E9:23:0D:49:53:D7:F7:AD:01:83:C1
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3139203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:a9:d7:3c:8f:74:1d:e6:49:36:51:ea:f6:c6:14:84:a5:e4:
         91:0d:c9:e8:b4:b0:e0:90:3f:41:6a:55:92:83:62:4d:c8:3b:
         aa:9f:28:ed:de:b6:60:0c:40:d7:9d:55:ed:68:3f:6a:11:19:
         92:7d:ae:67:19:54:71:ba:07:25:32:07:9a:f6:47:f3:72:f1:
         70:0f:b9:89:1c:47:73:cb:43:a4:92:cd:64:38:f3:41:b2:97:
         16:ee:86:38:f5:7b:23:24:9f:7d:47:97:e3:91:3a:fc:70:5a:
         f8:4c:a5:17:78:d9:48:91:67:8c:97:65:6e:82:66:54:6e:66:
         4d:0b:62:68:33:e4:f5:0c:18:89:40:9b:1f:9a:2c:50:9e:f8:
         f9:29:4b:f4:8b:62:ff:a9:f3:59:fe:12:d9:07:ba:a1:58:07:
         4c:6b:b6:d6:a9:ec:e1:ef:fa:e5:53:85:b1:47:e9:97:ce:c9:
         16:0a:0c:a8:7c:a7:03:5d:3b:64:e4:b0:13:56:58:37:55:3d:
         c6:08:20:6b:2c:0b:ea:5a:6a:22:a9:26:4d:73:9b:93:ff:24:
         d8:68:18:71:ce:58:e8:40:54:b1:0a:11:0c:f0:f3:82:6a:4e:
         65:0f:57:94:0b:45:d3:ab:a2:98:73:c3:44:3a:3d:2f:0e:2d:
         a1:d3:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:39 2025 by rpki-client