Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35392e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          ZfN2zXZCRyeVOXGR2WOy+0wljkEOj+Ya3wQriV/Fsvw=
Subject key identifier:   BD:5D:B4:86:53:37:04:22:C3:E2:B5:B1:5B:00:37:4A:E6:8E:66:11
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       631B24924A71EF1E14DF714E55B3984247DBB72B
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Mar 2025 20:11:19 +0000
ROA not before:           Tue 04 Mar 2025 20:06:19 +0000
ROA not after:            Tue 03 Mar 2026 20:11:19 +0000
asID:                     27947
IP address blocks:        192.188.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1b:24:92:4a:71:ef:1e:14:df:71:4e:55:b3:98:42:47:db:b7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  4 20:06:19 2025 GMT
            Not After : Mar  3 20:11:19 2026 GMT
        Subject: CN=BD5DB48653370422C3E2B5B15B00374AE68E6611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:e9:3e:f4:f9:c1:7d:fb:46:29:fb:50:23:
                    b9:55:75:8e:80:fa:52:38:c8:4d:33:bd:f6:8c:55:
                    d0:9d:c6:dd:b9:c9:68:1a:51:9c:58:19:91:ad:83:
                    de:b5:ed:92:5d:8c:5e:a4:84:1e:41:ce:84:5d:85:
                    ff:29:67:59:86:e5:86:b3:ce:fd:bb:42:6f:7a:51:
                    6d:4e:d9:82:bc:01:d0:e9:59:ad:91:eb:68:57:1d:
                    41:f6:5c:07:47:f3:b1:6c:9a:17:f0:dd:bd:b2:1d:
                    86:23:ba:67:4c:19:da:bb:85:c3:31:47:b8:f4:00:
                    7c:7a:7e:58:9f:a0:2e:6a:9a:ca:51:05:8a:da:b3:
                    5d:7f:1a:cd:47:ff:a6:db:51:ad:cc:ec:71:61:27:
                    25:14:a3:41:d7:c1:f9:ad:06:7a:74:85:a0:ff:b3:
                    26:08:a9:8f:dc:eb:16:fd:86:d3:c8:11:fc:60:13:
                    62:e2:28:99:93:3c:c5:e1:7e:b5:a2:02:33:13:e5:
                    c0:89:ea:7d:7c:ed:0e:99:63:5a:2a:43:71:56:ac:
                    47:b7:8a:06:32:be:74:10:52:9d:49:90:e8:0b:5e:
                    ff:ec:c3:0d:94:2b:b5:67:a2:28:4f:6a:ef:96:41:
                    f6:f5:e2:a3:1a:02:bf:34:fc:34:15:6a:a1:eb:c3:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5D:B4:86:53:37:04:22:C3:E2:B5:B1:5B:00:37:4A:E6:8E:66:11
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:49:94:ca:29:79:f1:5e:d9:e2:43:e3:e3:0d:3f:81:9f:1a:
         2b:3d:49:cc:08:4c:47:03:b7:08:5b:88:4c:84:4a:d5:53:e8:
         3a:b3:c7:7b:d2:8e:06:68:d0:c0:d9:2d:d2:f6:8a:04:ef:37:
         4b:9e:77:67:ed:f0:46:cb:19:e4:ee:fd:72:df:ee:76:9f:4e:
         4d:c3:6a:4d:48:42:49:6b:17:08:b7:47:84:dd:cd:0f:d5:82:
         e0:82:6e:1a:40:14:1c:e7:fb:ee:74:a3:1f:a8:62:93:98:fc:
         dc:ad:b7:87:5d:d8:c5:5a:14:9d:4c:98:85:6f:fd:ab:5b:9b:
         97:ae:08:06:5b:60:d9:af:c6:27:ce:7e:c3:77:ff:8a:d5:c0:
         e4:57:08:af:02:7b:08:7a:2a:50:ff:76:aa:be:dd:5d:70:87:
         2b:ce:09:d8:82:c8:fa:19:c4:10:f8:79:5e:49:d6:1a:17:65:
         13:67:2c:f0:8c:dd:9d:27:c0:45:28:71:52:7c:c8:d3:05:fa:
         7b:05:87:d9:9a:ff:05:92:71:03:a6:18:b5:3c:1e:2e:50:e5:
         52:c9:4d:e4:ce:97:75:9f:1b:cf:5e:81:75:81:33:38:87:e0:
         fa:f7:84:71:51:15:0e:2a:82:ea:67:9d:d9:c3:2c:ac:74:6d:
         7e:ce:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:54 2025 by rpki-client