Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e35362e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          8Mcr9jLfFez7O44CoVLnHFLZKo0qE6iDP6gwgctqLus=
Subject key identifier:   36:65:27:EA:5C:15:40:95:6E:F1:61:3D:9E:B0:69:5F:66:6B:54:4F
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       0E4A622965DE4EDE6C5208DE2C029FBC18C3F533
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:27 +0000
ROA not before:           Tue 04 Feb 2025 19:57:27 +0000
ROA not after:            Tue 03 Feb 2026 20:02:27 +0000
asID:                     27773
IP address blocks:        190.150.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4a:62:29:65:de:4e:de:6c:52:08:de:2c:02:9f:bc:18:c3:f5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:27 2025 GMT
            Not After : Feb  3 20:02:27 2026 GMT
        Subject: CN=366527EA5C1540956EF1613D9EB0695F666B544F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:cc:d6:f9:3b:ea:96:d1:98:d9:f5:98:b0:
                    2c:6f:1a:be:59:b8:64:92:63:60:c8:61:a2:ed:da:
                    e8:f6:70:d0:10:15:90:43:8a:26:76:ca:9f:c8:26:
                    df:20:c6:0b:92:a4:c5:a0:bc:f8:2c:fd:3c:de:1e:
                    2a:74:9c:d2:43:78:2a:b1:25:48:01:11:fb:a3:be:
                    ad:5e:b6:67:2c:94:b3:c7:ce:ba:94:b4:bb:80:bd:
                    2a:e7:79:d7:96:d7:d4:e9:33:69:f4:7c:c5:c0:55:
                    55:1b:1e:c8:06:88:a9:48:6d:16:5a:b8:61:6e:9c:
                    db:de:c3:e7:92:76:9a:f4:4f:e5:04:74:4d:0c:ce:
                    2d:b5:4a:f6:2c:3f:98:0a:88:2c:09:7c:ca:27:57:
                    15:02:0e:d9:bf:0d:38:38:89:3f:ef:ea:e6:2d:4d:
                    6e:9b:a2:7e:48:b9:38:7a:57:50:82:ac:b0:f7:c3:
                    81:4b:45:8f:21:41:50:7c:3b:66:37:62:2e:0a:4e:
                    03:31:56:2f:d0:18:8e:4e:8c:a2:f8:be:49:72:f3:
                    5b:bf:4a:09:19:39:97:3b:1b:e6:55:ed:87:62:31:
                    d4:f3:de:7b:a7:16:18:fc:71:cf:f4:09:70:85:57:
                    cb:f5:ac:aa:b6:70:bb:52:28:4c:99:7a:a1:cc:9a:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:27:EA:5C:15:40:95:6E:F1:61:3D:9E:B0:69:5F:66:6B:54:4F
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:91:8e:fd:45:f0:09:e1:78:33:10:dc:fc:b2:cc:cc:d1:
         67:2f:4c:b9:6a:d5:c7:a3:53:bb:04:fa:fe:59:7f:6a:6c:d7:
         22:e8:7a:11:14:50:62:70:7c:34:16:44:cb:a2:53:4d:25:cf:
         ad:d3:5e:57:b6:5e:81:f7:14:68:a5:ad:da:e1:d6:b4:f0:0d:
         d0:16:51:c3:8f:e4:33:72:19:5d:a7:ce:22:15:93:0f:f5:26:
         f3:97:99:cf:7d:e0:14:76:d3:cb:b6:07:9a:2e:a5:71:99:4e:
         01:f8:be:ba:fe:37:cc:33:b6:01:0b:4e:a2:86:f5:d0:d0:c6:
         19:74:0e:16:aa:8d:bc:1a:f2:2f:af:fd:7d:21:39:6a:f7:0b:
         e6:c8:99:e0:ad:25:a9:27:3d:fd:58:bc:1f:bc:46:d6:b8:36:
         87:95:1a:4b:fa:50:69:ad:12:8f:dd:9c:1a:44:97:92:f0:53:
         b8:42:96:f9:a4:33:cc:17:e7:a3:b4:c0:7c:e4:32:44:42:80:
         73:a7:22:4e:4f:e3:98:0d:f0:cc:ad:42:d1:65:4c:53:c0:27:
         f3:54:91:3a:00:47:be:86:3b:5b:59:d1:bb:e9:dc:6b:df:5a:
         c3:23:7e:e3:02:69:c2:15:a5:a8:09:f2:3a:07:6d:af:b1:a4:
         f6:94:37:9a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDkpiKWXeTt5sUgjeLAKfvBjD9TMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MjdaFw0yNjAyMDMyMDAyMjdaMDMxMTAvBgNV
BAMTKDM2NjUyN0VBNUMxNTQwOTU2RUYxNjEzRDlFQjA2OTVGNjY2QjU0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9i8zW+TvqltGY2fWYsCxvGr5Z
uGSSY2DIYaLt2uj2cNAQFZBDiiZ2yp/IJt8gxguSpMWgvPgs/TzeHip0nNJDeCqx
JUgBEfujvq1etmcslLPHzrqUtLuAvSrnedeW19TpM2n0fMXAVVUbHsgGiKlIbRZa
uGFunNvew+eSdpr0T+UEdE0Mzi21SvYsP5gKiCwJfMonVxUCDtm/DTg4iT/v6uYt
TW6bon5IuTh6V1CCrLD3w4FLRY8hQVB8O2Y3Yi4KTgMxVi/QGI5OjKL4vkly81u/
SgkZOZc7G+ZV7YdiMdTz3nunFhj8cc/0CXCFV8v1rKq2cLtSKEyZeqHMmjVNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNmUn6lwVQJVu8WE9nrBpX2ZrVE8wHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzEzNTMwMmUzNTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM3MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA76WODAN
BgkqhkiG9w0BAQsFAAOCAQEAlS6Rjv1F8AnheDMQ3PyyzMzRZy9MuWrVx6NTuwT6
/ll/amzXIuh6ERRQYnB8NBZEy6JTTSXPrdNeV7ZegfcUaKWt2uHWtPAN0BZRw4/k
M3IZXafOIhWTD/Um85eZz33gFHbTy7YHmi6lcZlOAfi+uv43zDO2AQtOoob10NDG
GXQOFqqNvBryL6/9fSE5avcL5siZ4K0lqSc9/Vi8H7xG1rg2h5UaS/pQaa0Sj92c
GkSXkvBTuEKW+aQzzBfno7TAfOQyREKAc6ciTk/jmA3wzK1C0WVMU8An81SROgBH
voY7W1nRu+nca99awyN+4wJpwhWlqAnyOgdtr7Gk9pQ3mg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:37:21 2025 by rpki-client