Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa
File:                     3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa (raw, json)
Hash identifier:          oh+lnEp1h5tUhtqtGELI8hS9S/I5Azp4ttxd+8QlHkc=
Subject key identifier:   AE:62:70:58:65:66:70:2A:59:18:B1:27:4B:CA:0A:D1:DC:37:4E:CC
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       60FAECE03420E843A5A6FE81BE6B0CD59669D0DD
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa
Signing time:             Tue 04 Feb 2025 18:07:45 +0000
ROA not before:           Tue 04 Feb 2025 18:02:45 +0000
ROA not after:            Tue 03 Feb 2026 18:07:45 +0000
asID:                     273019
IP address blocks:        190.12.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fa:ec:e0:34:20:e8:43:a5:a6:fe:81:be:6b:0c:d5:96:69:d0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:45 2025 GMT
            Not After : Feb  3 18:07:45 2026 GMT
        Subject: CN=AE6270586566702A5918B1274BCA0AD1DC374ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:9b:20:e8:f1:de:36:53:60:28:13:f8:50:
                    aa:2b:96:34:d1:48:20:e0:41:45:0a:99:34:b1:54:
                    9f:80:a2:73:60:28:59:53:e1:5f:58:5a:48:44:82:
                    7b:e7:cd:41:68:dc:c8:df:ff:2e:99:44:fa:74:67:
                    76:7a:75:0b:7f:d5:52:75:e8:54:f6:f0:4c:2a:91:
                    22:08:46:92:16:b7:62:69:c2:25:7e:94:4d:6b:a9:
                    f5:31:75:d3:03:61:09:57:27:d8:60:6b:b0:0f:64:
                    15:77:c5:be:3d:ad:d9:de:67:e0:62:c9:7c:72:b3:
                    26:1f:56:ad:55:9c:b3:30:78:88:a0:05:4f:23:4b:
                    37:4a:70:62:0b:57:f4:f7:46:54:ab:36:ca:cc:4e:
                    d9:04:4b:99:9c:d7:4a:51:65:92:e3:63:a5:7a:97:
                    45:9c:42:f2:9c:4e:86:fb:28:43:c3:b8:79:88:11:
                    ea:a5:f3:f4:6e:61:85:a2:9c:3b:12:57:16:be:26:
                    19:9d:2c:e3:4e:55:8e:ea:39:e2:51:d3:b8:55:16:
                    09:c0:1a:39:a2:69:f6:41:e6:04:7a:48:80:62:a9:
                    1c:02:b7:88:19:34:4c:1e:03:ec:74:4b:15:bb:c3:
                    f6:66:05:55:ef:2d:d2:d0:43:1a:25:ed:1d:d6:72:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:62:70:58:65:66:70:2A:59:18:B1:27:4B:CA:0A:D1:DC:37:4E:CC
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:66:c5:d8:83:bb:b2:04:84:11:d0:51:30:c6:bb:61:3b:
         eb:e7:20:85:f2:30:f0:53:29:af:47:84:51:19:ab:0d:ff:19:
         e6:ff:06:6e:b3:35:24:47:2b:9d:1b:b4:de:86:af:48:0a:39:
         3e:19:4f:7d:50:94:bb:63:3f:52:d1:fd:ed:eb:7e:62:71:7b:
         70:2c:20:c6:71:d8:bf:3a:51:c4:34:9f:f7:24:e3:c1:44:1b:
         69:9e:e8:e0:f0:5e:83:84:1b:4d:76:c2:78:ba:88:88:3a:23:
         67:6e:f5:20:5f:55:f0:9b:b0:2a:1d:fd:0f:cf:27:06:ec:a2:
         8d:68:bd:5a:27:b6:b1:5d:af:25:69:05:79:64:15:79:39:6a:
         da:f1:57:f6:c6:11:f4:43:69:6b:a2:98:6b:46:c3:27:82:18:
         62:ab:b2:6c:73:52:d4:f4:20:76:73:99:cf:0e:1f:22:6f:1c:
         76:c0:66:3a:bc:4c:b2:9c:24:20:8c:79:f4:22:f8:7e:20:bd:
         f4:4d:6b:9a:fa:b0:fb:e6:93:1e:b0:35:00:73:73:ed:14:68:
         45:1c:97:bc:79:ab:66:c9:34:f3:65:79:a0:70:2a:b9:18:f7:
         45:2e:c3:a1:d9:e7:fa:be:85:27:37:1d:a8:f7:83:c7:70:3f:
         cb:d0:32:0f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYPrs4DQg6EOlpv6BvmsM1ZZp0N0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNTAyMDQxODAyNDVaFw0yNjAyMDMxODA3NDVaMDMxMTAvBgNV
BAMTKEFFNjI3MDU4NjU2NjcwMkE1OTE4QjEyNzRCQ0EwQUQxREMzNzRFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAZsg6PHeNlNgKBP4UKorljTR
SCDgQUUKmTSxVJ+AonNgKFlT4V9YWkhEgnvnzUFo3Mjf/y6ZRPp0Z3Z6dQt/1VJ1
6FT28EwqkSIIRpIWt2JpwiV+lE1rqfUxddMDYQlXJ9hga7APZBV3xb49rdneZ+Bi
yXxysyYfVq1VnLMweIigBU8jSzdKcGILV/T3RlSrNsrMTtkES5mc10pRZZLjY6V6
l0WcQvKcTob7KEPDuHmIEeql8/RuYYWinDsSVxa+JhmdLONOVY7qOeJR07hVFgnA
GjmiafZB5gR6SIBiqRwCt4gZNEweA+x0SxW7w/ZmBVXvLdLQQxol7R3Wcq7nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrmJwWGVmcCpZGLEnS8oK0dw3TswwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzkzMDJlMzEzMjJlMzEzNzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvgys
MA0GCSqGSIb3DQEBCwUAA4IBAQBNbGbF2IO7sgSEEdBRMMa7YTvr5yCF8jDwUymv
R4RRGasN/xnm/wZuszUkRyudG7Tehq9ICjk+GU99UJS7Yz9S0f3t635icXtwLCDG
cdi/OlHENJ/3JOPBRBtpnujg8F6DhBtNdsJ4uoiIOiNnbvUgX1Xwm7AqHf0PzycG
7KKNaL1aJ7axXa8laQV5ZBV5OWra8Vf2xhH0Q2lrophrRsMnghhiq7Jsc1LU9CB2
c5nPDh8ibxx2wGY6vEyynCQgjHn0Ivh+IL30TWua+rD75pMesDUAc3PtFGhFHJe8
eatmyTTzZXmgcCq5GPdFLsOh2ef6voUnNx2o94PHcD/L0DIP
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:24 2025 by rpki-client