Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B06EB175BB4D5ADCB7D5AA65459A85DEE9911DEDA61982866869E2FB5410875/0/3139302e3130372e38302e302f32312d3234203d3e20323633323433.roa
File:                     3139302e3130372e38302e302f32312d3234203d3e20323633323433.roa (raw, json)
Hash identifier:          lXUP9s6qoSHNzMmiLKiMjEtZu90cIX1P+6lBB9TQ+oE=
Subject key identifier:   7F:92:41:23:12:C6:BE:B8:3F:61:23:9B:D3:25:F6:33:EC:01:AD:4D
Certificate issuer:       /CN=44080814E1A4EAB73D7C867276333AA581FCF502
Certificate serial:       32FF2C544F9FFAB25951FB4D230D6426458C2B68
Authority key identifier: 44:08:08:14:E1:A4:EA:B7:3D:7C:86:72:76:33:3A:A5:81:FC:F5:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44080814E1A4EAB73D7C867276333AA581FCF502.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B06EB175BB4D5ADCB7D5AA65459A85DEE9911DEDA61982866869E2FB5410875/0/3139302e3130372e38302e302f32312d3234203d3e20323633323433.roa
Signing time:             Tue 04 Feb 2025 20:05:30 +0000
ROA not before:           Tue 04 Feb 2025 20:00:30 +0000
ROA not after:            Tue 03 Feb 2026 20:05:30 +0000
asID:                     263243
IP address blocks:        190.107.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B06EB175BB4D5ADCB7D5AA65459A85DEE9911DEDA61982866869E2FB5410875/0/44080814E1A4EAB73D7C867276333AA581FCF502.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B06EB175BB4D5ADCB7D5AA65459A85DEE9911DEDA61982866869E2FB5410875/0/44080814E1A4EAB73D7C867276333AA581FCF502.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44080814E1A4EAB73D7C867276333AA581FCF502.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ff:2c:54:4f:9f:fa:b2:59:51:fb:4d:23:0d:64:26:45:8c:2b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44080814E1A4EAB73D7C867276333AA581FCF502
        Validity
            Not Before: Feb  4 20:00:30 2025 GMT
            Not After : Feb  3 20:05:30 2026 GMT
        Subject: CN=7F92412312C6BEB83F61239BD325F633EC01AD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:0c:2d:7d:b6:07:38:36:7d:a7:d7:07:32:
                    86:25:43:1e:6a:15:a6:67:bc:aa:83:ba:02:65:28:
                    76:04:68:73:66:41:5a:f0:49:72:71:a0:f5:89:55:
                    3d:bc:10:54:80:a9:cb:ca:2d:d5:33:b8:a3:bb:1f:
                    4a:a3:0e:26:a2:db:8a:5b:02:1b:01:c2:53:aa:be:
                    8a:81:37:f8:d0:85:e7:67:23:18:97:6f:dc:07:4d:
                    9c:b2:2c:ee:f1:ad:bd:65:92:78:17:1a:ce:b2:fe:
                    99:6e:c9:08:17:f5:8c:45:13:b7:34:dd:66:b6:8e:
                    01:c4:73:b7:68:a4:51:07:cf:aa:ea:fe:c7:49:b5:
                    7f:90:c3:1f:76:c3:5b:43:75:44:70:f1:7d:9f:d4:
                    3a:33:dc:d1:c0:98:dd:bf:f8:fe:f8:7d:c4:dd:e9:
                    d7:fb:5a:21:b8:cc:82:8f:bb:76:d1:8a:77:30:6e:
                    ac:16:aa:ca:0d:29:df:a4:dd:88:91:2b:ee:0c:b5:
                    b4:44:e3:65:27:31:a3:eb:7c:a9:7f:9d:06:af:06:
                    fe:f3:8c:11:e1:24:fe:b7:55:28:4f:08:ef:64:6a:
                    40:51:a2:65:92:78:1c:a3:b9:f9:48:c3:5e:57:c1:
                    e9:39:22:eb:ce:69:60:74:b0:b2:0a:4f:e3:13:48:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:92:41:23:12:C6:BE:B8:3F:61:23:9B:D3:25:F6:33:EC:01:AD:4D
            X509v3 Authority Key Identifier:
                keyid:44:08:08:14:E1:A4:EA:B7:3D:7C:86:72:76:33:3A:A5:81:FC:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B06EB175BB4D5ADCB7D5AA65459A85DEE9911DEDA61982866869E2FB5410875/0/44080814E1A4EAB73D7C867276333AA581FCF502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44080814E1A4EAB73D7C867276333AA581FCF502.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B06EB175BB4D5ADCB7D5AA65459A85DEE9911DEDA61982866869E2FB5410875/0/3139302e3130372e38302e302f32312d3234203d3e20323633323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:97:8b:b8:a6:b3:87:93:15:94:89:60:bd:73:7c:76:47:09:
         b7:d3:ff:fa:12:73:99:7a:a6:e9:3a:45:cc:e7:1c:6e:91:71:
         41:c4:ff:97:d7:62:1d:41:76:18:be:0e:a4:2b:1a:5a:5c:ab:
         df:12:61:53:59:4e:c5:44:b6:f1:54:95:1d:f8:02:83:e4:7b:
         ef:93:d2:be:09:96:70:ac:19:ae:74:6b:09:e2:a6:45:8c:c2:
         fd:39:7f:32:5c:05:40:f7:f9:8e:2f:1e:68:fe:28:69:6c:99:
         67:a9:17:0f:32:ec:da:08:5b:21:d7:63:a4:df:87:fb:f9:d3:
         9c:9e:f4:88:91:ab:b3:01:c8:7c:e5:c7:f3:da:b0:8b:47:e2:
         48:9e:3b:d4:bf:63:40:1b:7c:99:f0:a8:7c:f6:d8:d8:b8:65:
         0a:95:8e:82:06:b2:71:5a:34:9e:64:54:a6:8e:dc:33:28:17:
         90:09:83:c9:97:73:72:a9:f3:f6:73:c4:62:8c:05:89:f4:62:
         59:ea:57:0a:88:6a:59:b8:ca:23:9d:0e:6d:b7:10:94:15:3b:
         bd:b7:ae:8e:38:58:6a:ff:73:03:8f:d3:1a:8c:1d:71:2d:5c:
         91:de:ff:24:6c:41:ba:cd:14:ab:b4:a5:1d:c2:89:f4:55:ae:
         b8:2c:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:43:58 2025 by rpki-client