Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35322e302f32322d3234203d3e203237373733.roa
File:                     3139302e3135302e35322e302f32322d3234203d3e203237373733.roa (raw, json)
Hash identifier:          5ayZ34Wut3V+oA4Khxc2HmN4JZKDdaKmTRmJCXNGRGI=
Subject key identifier:   85:E3:44:4D:44:BD:C6:6D:DE:EA:F1:DE:4B:0E:B2:DF:B1:F8:05:1A
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       680337F1629C5EB8BE71C1E9494DE0FFA49D9FE0
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35322e302f32322d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:21 +0000
ROA not before:           Tue 04 Feb 2025 19:57:21 +0000
ROA not after:            Tue 03 Feb 2026 20:02:21 +0000
asID:                     27773
IP address blocks:        190.150.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:37:f1:62:9c:5e:b8:be:71:c1:e9:49:4d:e0:ff:a4:9d:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:21 2025 GMT
            Not After : Feb  3 20:02:21 2026 GMT
        Subject: CN=85E3444D44BDC66DDEEAF1DE4B0EB2DFB1F8051A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:14:c5:ad:c2:f2:ea:2f:fe:d8:b5:57:39:
                    ae:7a:1f:89:cb:1a:53:8b:c7:37:0b:60:21:3a:c4:
                    3f:c1:62:d3:49:f4:38:c5:1b:18:6d:5d:28:15:49:
                    51:a4:25:47:2d:5b:11:b5:b7:e0:39:dc:60:52:64:
                    82:e3:a1:50:83:52:28:b7:78:5d:f8:64:b1:cd:95:
                    bd:9b:ed:0e:e3:96:d7:ac:92:6c:7e:60:c1:03:6e:
                    52:ee:8f:4f:f8:d9:a6:67:ba:5f:47:90:8f:fd:c0:
                    6c:ee:06:52:35:a5:37:3b:ed:43:46:56:b8:ac:c4:
                    e1:87:8c:27:9e:80:b2:72:07:23:7d:c2:42:11:fb:
                    4a:b2:6d:fd:16:32:a6:bb:cf:c9:0b:55:19:1b:f2:
                    1b:3a:24:90:02:eb:69:91:32:6d:a3:9d:c3:40:46:
                    f8:36:b7:eb:12:be:24:20:fc:55:11:44:1a:33:bd:
                    f5:a5:71:29:da:ad:86:3a:82:55:0b:d3:17:fc:cc:
                    26:6c:82:7e:1e:21:71:77:6f:a5:ac:9c:93:53:39:
                    b5:bb:64:7f:09:99:9b:49:dc:f7:05:57:40:74:d8:
                    f6:a3:49:e7:27:d1:fc:6b:19:6b:9e:40:d8:2d:9a:
                    55:a1:ac:9c:38:28:f3:40:c3:90:4a:83:38:59:82:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E3:44:4D:44:BD:C6:6D:DE:EA:F1:DE:4B:0E:B2:DF:B1:F8:05:1A
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35322e302f32322d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:0f:60:0e:08:86:48:53:d5:d7:cb:a1:89:a8:ef:da:8b:64:
         9b:2a:e6:85:cb:ed:93:4a:1d:84:31:9d:5c:6d:5c:b2:32:ce:
         f6:e3:d3:20:ff:78:12:fa:14:77:29:11:d8:d5:b8:85:03:67:
         14:25:e8:c6:4f:1a:08:00:89:f7:aa:57:9b:78:2c:21:ca:19:
         19:70:53:29:73:81:b6:6b:0a:84:18:76:f1:78:52:e0:da:c4:
         93:21:e8:8f:82:5e:9a:e2:73:fe:c9:04:92:3a:00:f1:f2:1f:
         24:38:37:e6:b8:e8:2f:22:7a:13:48:cb:9a:e1:e1:fc:58:0a:
         9a:11:04:35:0b:54:0c:5f:48:63:b1:92:48:00:5f:d2:9d:1c:
         d0:1b:26:4d:b9:16:67:da:d7:91:4a:17:d8:b1:19:24:09:c0:
         4b:43:c3:12:d2:e9:75:2d:9e:c3:d4:f1:7c:15:df:d2:1f:45:
         a7:12:bc:c5:11:19:91:60:51:53:a4:07:c9:19:fe:3b:f1:a9:
         8e:03:ce:d5:9d:9e:50:6f:5b:e8:2c:5b:64:80:30:d1:b4:6f:
         63:6b:86:5e:56:a4:3b:5a:ac:46:96:3f:dc:6e:fc:3d:89:a4:
         0f:9e:26:e6:c8:d2:21:eb:d5:54:5e:a8:38:e9:1f:c8:30:e6:
         a3:48:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:43 2025 by rpki-client