Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e38302e302f32302d3234203d3e203237373733.roa
File:                     3139302e3135302e38302e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier:          qHYuF59rVlfdJPJB2Sq06sgnqp1uTL6g6EbI2jP9cHc=
Subject key identifier:   55:89:77:C2:3D:9F:2F:2D:7A:2D:03:88:7A:D2:EE:E2:B9:7B:08:8B
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       58F229274CC9163CEDE44F9896195BB847B44800
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e38302e302f32302d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:23 +0000
ROA not before:           Tue 04 Feb 2025 19:57:23 +0000
ROA not after:            Tue 03 Feb 2026 20:02:23 +0000
asID:                     27773
IP address blocks:        190.150.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f2:29:27:4c:c9:16:3c:ed:e4:4f:98:96:19:5b:b8:47:b4:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:23 2025 GMT
            Not After : Feb  3 20:02:23 2026 GMT
        Subject: CN=558977C23D9F2F2D7A2D03887AD2EEE2B97B088B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:77:b8:bd:f7:33:bf:42:22:70:92:0e:51:
                    58:73:0d:52:c8:a2:c9:aa:c4:8d:63:e3:b4:ce:07:
                    8e:22:ae:a6:e0:19:9a:4b:d1:60:74:a6:d6:9f:a8:
                    d3:b5:3c:4c:12:62:1e:27:25:92:d7:45:77:73:33:
                    a8:a8:a1:c9:70:31:ef:83:5f:c9:08:e6:7b:ec:94:
                    ec:78:a1:76:44:3d:52:3c:04:0b:9c:73:7d:8f:d6:
                    ad:5f:c4:07:ed:86:f3:ef:e5:9f:b8:66:1d:cb:d9:
                    56:0e:4c:68:0d:d5:40:3a:0f:b7:57:1f:16:98:6e:
                    4a:40:c2:ad:89:dd:75:85:9f:c9:da:d6:9a:83:1f:
                    29:ac:b3:6b:6a:ab:64:7d:64:be:96:53:d3:dc:3c:
                    c1:5a:54:5c:d1:cf:fa:ed:9f:22:aa:b1:44:79:68:
                    4f:17:78:2f:83:55:5c:33:fe:41:97:3e:54:22:63:
                    41:94:2e:7b:21:06:db:43:34:5b:11:fa:89:f3:62:
                    5f:b8:f8:33:8b:89:db:31:2e:a8:bc:0b:73:22:6b:
                    f4:6d:c8:3d:8e:41:4f:c9:49:f9:7c:b4:31:37:a6:
                    b8:c4:0d:89:d3:e1:23:8b:b8:fb:1d:ec:f8:67:23:
                    48:ea:fb:4c:33:7f:b4:ea:de:88:da:05:8e:5d:a4:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:77:C2:3D:9F:2F:2D:7A:2D:03:88:7A:D2:EE:E2:B9:7B:08:8B
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e38302e302f32302d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:47:66:fa:e9:aa:4c:4b:dc:b9:6d:be:9d:9b:29:96:67:9c:
         2e:38:17:68:ba:d7:cc:09:c8:6a:d9:9e:4a:73:ec:18:5c:1c:
         08:6d:6a:6c:26:be:d9:a7:5f:80:29:18:fa:d0:61:36:db:84:
         24:7d:54:98:1c:ee:02:63:90:f1:67:d7:e9:fb:42:db:18:89:
         f1:41:5f:9e:8d:ed:50:17:23:7a:3c:7d:ff:d1:69:06:f1:6b:
         43:85:c7:f2:00:72:41:2b:d6:30:4e:12:f4:64:1a:77:f7:a9:
         45:3b:7c:a1:e8:3c:ab:e9:e9:2e:fe:39:93:01:f0:8a:e3:4a:
         ff:fe:ec:21:73:f0:08:29:13:c7:3c:e5:59:5a:29:a3:29:70:
         65:95:49:bf:82:cf:8d:58:ee:bc:ef:0e:52:fd:f7:a8:bb:44:
         6b:f9:16:b1:f1:1b:48:46:33:dd:ac:d4:c0:80:f5:40:58:f1:
         f7:30:0e:10:bc:c2:d5:5b:5d:4f:ea:34:18:a1:ae:b5:7d:a3:
         8c:d4:33:eb:0f:cf:1f:b5:1d:db:1a:fd:27:0e:b8:af:c6:d2:
         60:8c:a8:95:f9:20:5a:bd:c5:38:f1:82:d8:fd:f7:f9:cb:41:
         92:4c:0f:2a:1d:f1:15:9a:76:48:af:16:c0:44:10:1e:ed:69:
         d8:17:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:12 2025 by rpki-client