Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3230382e302f32302d3230203d3e203237383839.roa
File:                     3139302e37362e3230382e302f32302d3230203d3e203237383839.roa (raw, json)
Hash identifier:          wE1QuJce/k4XAy7s+MvJvdTKfoHG9DRrKPq1Ww8+UH4=
Subject key identifier:   F1:23:8C:30:82:76:3F:69:94:F2:E2:1E:65:5E:B2:D6:36:D7:32:07
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       328772F97B67686BE3D4FB5C6E5DB00B24822F05
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3230382e302f32302d3230203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:55:40 +0000
ROA not before:           Tue 04 Feb 2025 18:50:40 +0000
ROA not after:            Tue 03 Feb 2026 18:55:40 +0000
asID:                     27889
IP address blocks:        190.76.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:87:72:f9:7b:67:68:6b:e3:d4:fb:5c:6e:5d:b0:0b:24:82:2f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Feb  4 18:50:40 2025 GMT
            Not After : Feb  3 18:55:40 2026 GMT
        Subject: CN=F1238C3082763F6994F2E21E655EB2D636D73207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:04:48:ef:72:cf:62:7a:0c:2b:f1:97:d3:
                    30:e1:e9:a8:0c:e1:ec:43:90:ca:cf:90:67:fb:d2:
                    41:a0:e4:08:8c:e1:6c:8f:44:ad:35:0c:de:33:04:
                    71:b3:5f:d1:6a:ab:96:bf:92:f2:8b:b4:92:2c:9d:
                    1a:76:64:0b:f0:54:5b:39:6d:a2:c5:1a:56:a2:45:
                    8c:f8:d7:27:c1:ea:2f:c5:27:66:a2:7e:50:dc:3d:
                    fa:c4:b5:c7:b1:f1:85:aa:bd:32:4e:50:b3:55:63:
                    fc:67:f9:63:9f:b6:9f:26:84:9e:56:b2:74:47:b0:
                    ab:42:60:3d:b1:12:14:93:58:45:2c:5c:01:ef:fd:
                    45:83:8a:04:4a:80:88:e7:4c:86:81:9a:22:33:b7:
                    c6:cd:06:dd:90:9d:a3:f3:c2:e1:5d:9d:30:96:b5:
                    0c:04:6e:c6:96:bc:36:ec:6b:ab:31:7e:a8:34:05:
                    c8:21:08:90:a5:4f:9a:bd:7b:bf:7c:cd:fe:b4:6a:
                    2e:af:9e:ba:3f:c6:2f:95:d6:64:a2:c9:f6:0c:cd:
                    f9:10:42:be:ac:98:43:4c:bf:9b:e7:09:be:e6:6a:
                    95:c8:5d:73:11:2f:83:69:e8:4a:08:d0:b9:2c:87:
                    99:4d:1e:65:de:50:a6:6e:7e:51:f1:ae:4b:dd:f4:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:8C:30:82:76:3F:69:94:F2:E2:1E:65:5E:B2:D6:36:D7:32:07
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3230382e302f32302d3230203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:99:3a:b2:f5:73:ea:55:0f:a0:8c:bf:78:01:fc:84:1e:
         b3:16:81:2f:c7:51:38:bc:1b:59:ee:49:1e:64:f3:99:9b:05:
         e6:ed:40:f3:8c:01:0b:30:08:c7:5b:bc:1a:ff:84:84:fb:3e:
         38:a7:69:1b:a4:75:e2:41:4c:07:a3:9e:1f:a4:26:29:c1:61:
         65:e1:0d:a5:7e:bf:4c:6d:f4:0b:08:2a:64:46:0d:77:af:22:
         fb:0c:e3:47:50:5b:c6:5c:7b:e2:da:e6:ae:cd:ea:2e:97:8c:
         d9:cb:ee:b5:e8:b7:d9:a8:3d:1f:58:be:64:6d:f9:80:d9:ec:
         81:05:66:73:33:33:bd:41:13:1a:16:73:e9:56:fd:7a:f0:27:
         bb:f3:21:ab:ce:ef:57:c9:4d:78:04:5a:37:17:41:76:c7:3c:
         6d:63:53:93:be:3b:5d:6f:0f:8e:ec:05:98:a2:8d:e2:47:e7:
         ef:5f:49:3d:ea:f4:0a:82:de:79:90:bf:04:c5:68:de:c5:58:
         28:28:1a:6d:42:43:cb:b2:a0:6b:2e:7c:de:fc:d2:66:21:c9:
         d2:14:fc:d6:f0:5c:14:37:dc:5d:42:ae:a5:ea:11:a5:31:ca:
         97:7a:22:10:3a:4c:ce:76:4b:0c:fc:14:77:08:d9:cc:7c:c3:
         2d:9b:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:11 2025 by rpki-client