Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234302e302f32342d3234203d3e203237383839.roa
File:                     3139302e37362e3234302e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier:          Aqc3BuGqr0Bc++dqGTPgE47pvlbiiPdB1X60oBIgfm0=
Subject key identifier:   B1:3E:6D:39:BA:2B:BF:C7:60:9B:3A:B1:51:24:EF:13:79:65:E2:42
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       6CCBE87AF415A5779CD29DFA30030BDEF2C68167
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234302e302f32342d3234203d3e203237383839.roa
Signing time:             Tue 04 Feb 2025 18:55:36 +0000
ROA not before:           Tue 04 Feb 2025 18:50:36 +0000
ROA not after:            Tue 03 Feb 2026 18:55:36 +0000
asID:                     27889
IP address blocks:        190.76.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cb:e8:7a:f4:15:a5:77:9c:d2:9d:fa:30:03:0b:de:f2:c6:81:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Feb  4 18:50:36 2025 GMT
            Not After : Feb  3 18:55:36 2026 GMT
        Subject: CN=B13E6D39BA2BBFC7609B3AB15124EF137965E242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ee:6b:fd:c3:35:78:62:82:80:e2:1f:e8:8c:
                    56:20:60:a7:4b:25:4b:a5:2b:01:93:49:0c:e4:9a:
                    fb:38:64:8b:d7:64:da:47:65:22:12:48:33:08:30:
                    fa:de:05:9a:b6:36:c2:9c:ae:73:c6:bf:4a:d8:8d:
                    50:38:ce:79:6e:0f:59:12:6a:74:84:92:6c:ae:9a:
                    34:df:a3:d6:47:ff:e9:2e:ef:19:ad:f3:cc:08:7a:
                    a1:97:f0:1d:79:57:aa:28:22:1a:55:1a:48:0d:03:
                    9d:da:9f:4a:30:8e:3c:d9:c7:d4:57:c1:28:31:a5:
                    e9:6b:c4:78:8a:ae:20:29:3f:00:fa:ce:25:bb:ba:
                    22:08:f2:32:fe:e7:dc:7d:47:c4:4d:a7:e0:c6:d5:
                    18:b6:3e:64:99:ad:b9:2a:2c:a6:e2:53:0e:0f:b5:
                    c5:23:f7:4e:71:05:af:19:73:ff:b2:ff:6e:18:45:
                    e9:ab:a0:c5:b8:de:24:40:cd:86:38:54:2a:2e:8d:
                    a5:c9:22:6d:92:f5:47:f7:fb:62:ce:39:0d:8d:45:
                    23:69:26:29:da:9c:90:8f:4c:c9:e7:ce:73:14:9d:
                    73:44:05:31:ed:33:b0:1a:0c:e2:20:c2:b5:e2:c9:
                    81:f8:94:1b:9d:94:05:9e:e4:ab:6c:15:69:d6:e1:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:6D:39:BA:2B:BF:C7:60:9B:3A:B1:51:24:EF:13:79:65:E2:42
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234302e302f32342d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f2:f2:f1:10:77:83:c1:90:33:bf:43:e0:c6:c8:de:3d:9b:
         9e:09:c4:3c:08:57:c8:40:2d:10:58:01:e2:42:e9:33:c5:f9:
         89:a5:22:b2:24:53:55:f7:2b:34:e2:8e:a8:36:68:57:64:5e:
         62:46:88:ff:7e:19:63:fd:8d:77:37:93:22:47:5b:13:b9:21:
         3e:b2:84:e0:bd:59:41:39:86:e8:3b:81:85:50:24:ee:7f:49:
         f3:d2:50:56:82:5f:a7:9b:bf:2e:96:7f:a0:33:41:05:3f:60:
         f2:94:81:e6:a8:db:08:8e:26:fe:32:eb:17:6b:53:96:c1:e7:
         df:3a:b3:17:a3:18:1b:1e:75:7f:be:7e:0e:3b:70:79:c6:65:
         90:27:3f:a6:0e:70:f9:d3:65:37:54:63:78:61:6c:7b:07:9b:
         80:dd:c7:c1:d8:9b:63:16:06:4c:f6:70:65:df:64:b9:c5:83:
         55:a0:b9:7d:83:43:84:96:cd:ad:17:cc:09:2b:0b:35:8d:8a:
         7a:f1:64:58:bf:a7:ee:0a:1f:f0:e7:4d:f6:fa:0d:09:ed:b2:
         81:b6:e6:21:d4:7f:c4:41:9f:85:ee:c1:61:ef:16:89:0e:e6:
         99:8b:d1:04:c8:cd:b0:07:a4:c4:29:6b:5a:fd:59:18:d7:4d:
         33:ba:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:04 2025 by rpki-client