Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3234203d3e203238313134.roa
File:                     3139302e31322e3136302e302f31392d3234203d3e203238313134.roa (raw, json)
Hash identifier:          k/k5/T2Ucp/iEKxpnieFCRQPD+EAlniDFCILUxZFi3w=
Subject key identifier:   8E:01:E4:74:D3:89:54:B6:6F:07:D2:7F:EE:B1:64:A6:AA:81:AE:73
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       270C52F8CC44266F916C1EFFDCEC1DE9FA41B4F3
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:42 +0000
ROA not before:           Tue 04 Feb 2025 18:02:42 +0000
ROA not after:            Tue 03 Feb 2026 18:07:42 +0000
asID:                     28114
IP address blocks:        190.12.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0c:52:f8:cc:44:26:6f:91:6c:1e:ff:dc:ec:1d:e9:fa:41:b4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:42 2025 GMT
            Not After : Feb  3 18:07:42 2026 GMT
        Subject: CN=8E01E474D38954B66F07D27FEEB164A6AA81AE73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:7e:77:7b:48:c8:0a:97:44:af:bc:70:d2:
                    e4:fd:91:8e:fa:ee:29:06:24:6c:2a:17:28:92:44:
                    15:fe:0a:f0:47:6b:a0:5d:8a:b4:0f:28:eb:01:a8:
                    5f:cd:ef:2f:0d:b5:54:c5:d3:99:b3:04:91:a5:a1:
                    06:b1:7f:7c:b8:5d:0b:97:80:c3:03:c5:04:94:d2:
                    72:73:36:a7:5a:78:1d:c1:9b:fd:7d:b7:c9:63:ca:
                    64:12:3c:bb:72:0b:72:4f:67:d8:b4:10:34:5c:0e:
                    ef:ff:ac:84:43:14:81:54:7b:2d:a4:4c:50:b0:33:
                    73:d2:4b:72:67:2b:23:c7:54:0b:7b:e3:6e:ff:b8:
                    9f:22:b6:95:ed:28:e1:30:f6:d1:51:70:ee:2b:23:
                    b7:f1:6e:75:e4:3b:9a:30:ec:72:71:c8:bc:fb:8c:
                    df:8d:21:fc:1b:f2:5a:0f:fc:58:37:4d:4c:8d:74:
                    0c:8b:af:28:7a:43:52:80:b2:54:45:46:4f:2b:15:
                    31:ea:aa:79:85:64:95:09:f2:34:fb:41:1a:aa:23:
                    a1:fc:a1:17:d8:79:67:54:1c:b2:a1:ec:cc:9d:0d:
                    4c:f0:77:41:e0:33:95:04:69:5f:f4:98:45:8a:8e:
                    5d:1e:52:f8:75:9f:17:e6:a7:6d:eb:b4:b8:e6:2f:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:E4:74:D3:89:54:B6:6F:07:D2:7F:EE:B1:64:A6:AA:81:AE:73
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:8c:68:f9:5d:57:ba:72:88:50:a6:08:e8:e9:39:42:35:
         a2:35:02:cc:7d:7f:1d:20:15:b1:39:d9:9a:8a:ba:68:58:a7:
         66:42:8a:31:10:5c:0b:26:63:7d:11:c8:b5:cd:1f:3a:45:ba:
         30:92:30:f9:a4:9d:ec:88:fd:a4:92:9c:89:4f:6a:c4:29:24:
         bd:6a:b5:d7:ce:0e:27:87:c3:35:f3:d4:c3:c8:07:6f:be:ad:
         9c:93:33:b4:05:34:2e:79:a8:11:34:68:f9:87:d0:43:2a:83:
         20:96:32:72:82:92:1e:23:91:f4:97:d5:ef:c4:5b:d3:93:d1:
         53:e3:27:db:33:2d:a3:9e:24:32:46:5f:a7:a2:d8:1f:48:1e:
         61:64:82:05:c2:97:be:7e:da:11:e0:ec:de:1f:95:38:72:9f:
         0b:da:f1:ca:d4:65:13:71:23:02:f6:46:ab:10:7b:3e:a4:2e:
         f0:b4:d9:aa:33:7c:db:17:ad:7c:d6:7e:13:56:ad:1d:fa:c4:
         8b:f5:4e:9e:c8:40:be:64:83:28:10:f6:a5:d4:58:fa:19:85:
         46:10:07:19:63:1e:06:3a:af:2f:b8:17:64:8b:98:a2:b3:7d:
         85:72:7b:c6:2d:58:c5:19:b9:55:90:95:08:d6:e0:2e:70:1b:
         08:1e:5d:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJwxS+MxEJm+RbB7/3Owd6fpBtPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNTAyMDQxODAyNDJaFw0yNjAyMDMxODA3NDJaMDMxMTAvBgNV
BAMTKDhFMDFFNDc0RDM4OTU0QjY2RjA3RDI3RkVFQjE2NEE2QUE4MUFFNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBX53e0jICpdEr7xw0uT9kY76
7ikGJGwqFyiSRBX+CvBHa6BdirQPKOsBqF/N7y8NtVTF05mzBJGloQaxf3y4XQuX
gMMDxQSU0nJzNqdaeB3Bm/19t8ljymQSPLtyC3JPZ9i0EDRcDu//rIRDFIFUey2k
TFCwM3PSS3JnKyPHVAt7427/uJ8itpXtKOEw9tFRcO4rI7fxbnXkO5ow7HJxyLz7
jN+NIfwb8loP/Fg3TUyNdAyLryh6Q1KAslRFRk8rFTHqqnmFZJUJ8jT7QRqqI6H8
oRfYeWdUHLKh7MydDUzwd0HgM5UEaV/0mEWKjl0eUvh1nxfmp23rtLjmLzTpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjgHkdNOJVLZvB9J/7rFkpqqBrnMwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzkzMDJlMzEzMjJlMzEzNjMwMmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODMxMzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb4MoDAN
BgkqhkiG9w0BAQsFAAOCAQEAD/WMaPldV7pyiFCmCOjpOUI1ojUCzH1/HSAVsTnZ
moq6aFinZkKKMRBcCyZjfRHItc0fOkW6MJIw+aSd7Ij9pJKciU9qxCkkvWq1184O
J4fDNfPUw8gHb76tnJMztAU0LnmoETRo+YfQQyqDIJYycoKSHiOR9JfV78Rb05PR
U+Mn2zMto54kMkZfp6LYH0geYWSCBcKXvn7aEeDs3h+VOHKfC9rxytRlE3EjAvZG
qxB7PqQu8LTZqjN82xetfNZ+E1atHfrEi/VOnshAvmSDKBD2pdRY+hmFRhAHGWMe
BjqvL7gXZIuYorN9hXJ7xi1YxRm5VZCVCNbgLnAbCB5dMw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:09 2025 by rpki-client