Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230362e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230362e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          6pxbtyhehrYQvWzxp6Zwo2ZOdaek8X/1tUSgeP0Dx5w=
Subject key identifier:   B5:1C:DB:F6:8C:EB:0A:DF:26:03:8B:1E:52:72:A7:CA:D6:70:44:CF
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       3A3797719256C5875EFCA108906BA061613E3F28
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230362e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 04 Feb 2025 18:15:15 +0000
ROA not before:           Tue 04 Feb 2025 18:10:15 +0000
ROA not after:            Tue 03 Feb 2026 18:15:15 +0000
asID:                     52330
IP address blocks:        190.184.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:37:97:71:92:56:c5:87:5e:fc:a1:08:90:6b:a0:61:61:3e:3f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:15 2025 GMT
            Not After : Feb  3 18:15:15 2026 GMT
        Subject: CN=B51CDBF68CEB0ADF26038B1E5272A7CAD67044CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:3a:35:fd:8f:70:40:43:8b:f7:c6:9a:5d:
                    8c:04:23:34:4e:1b:57:50:ec:4e:30:6d:41:61:e2:
                    7e:42:32:57:3f:4f:f8:d1:24:16:c7:c2:83:b7:e2:
                    7c:f3:4f:2b:a8:9e:9d:05:d0:be:e3:03:d0:f2:ee:
                    3a:a2:c6:85:94:a2:7d:f5:17:60:53:93:02:e6:f6:
                    99:5c:0d:c9:94:96:c6:7a:8c:14:5d:c9:64:6b:61:
                    71:7e:b9:b7:82:fb:a0:0a:eb:e4:ab:d2:54:06:76:
                    b9:bd:e4:74:02:22:70:ef:77:8b:90:bf:73:bb:58:
                    32:59:ac:a9:22:ac:ba:86:7d:f2:bb:7d:6b:73:6c:
                    58:65:47:80:b9:e7:66:3f:f5:6f:2f:66:4a:e3:a4:
                    29:34:a7:94:be:84:3c:cc:06:93:e4:5f:ad:f1:16:
                    8b:1b:4a:51:22:3c:08:be:6a:bf:4a:0f:82:df:81:
                    c1:2d:01:c6:dc:28:c4:b1:5c:d1:e5:64:da:89:c1:
                    eb:03:2f:3e:4e:4e:be:68:1e:39:74:76:30:b9:88:
                    0f:23:90:24:3c:82:25:36:04:ea:20:ad:28:29:8c:
                    93:72:a6:d3:cd:82:25:66:c0:75:88:2d:70:ef:ae:
                    c0:e0:b4:17:1e:fe:04:fb:62:12:84:5e:a8:e8:f9:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1C:DB:F6:8C:EB:0A:DF:26:03:8B:1E:52:72:A7:CA:D6:70:44:CF
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230362e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:75:48:75:a5:11:20:eb:44:cc:11:b2:b5:f8:16:64:72:b5:
         3c:8b:95:f8:1b:09:a8:b8:bd:71:88:7c:a2:88:22:36:3d:ed:
         eb:48:88:80:f1:ef:f6:2b:6e:30:ca:9d:06:65:55:ab:ac:ac:
         bd:5b:d0:05:e9:5e:81:1f:f8:59:9b:bb:67:99:41:43:5b:87:
         5f:1e:00:01:7f:20:85:89:45:f6:fd:9a:fa:35:d1:96:3d:fd:
         0e:52:d6:69:7b:4f:bd:85:2e:c6:be:53:f6:b3:d2:9d:a6:d7:
         fa:3b:b6:d1:65:12:71:38:8e:a9:c5:ad:6f:6b:7c:34:d5:77:
         ff:c8:7d:97:82:59:80:d5:2d:da:f5:02:3c:6c:c4:b3:ad:cc:
         60:98:a9:c6:52:56:de:49:3d:f1:c1:90:6f:e7:3f:36:a4:e8:
         e5:fe:de:d1:9c:f7:cb:e7:78:64:b7:7b:a2:31:ae:83:a1:ef:
         f4:21:e5:de:75:49:2b:54:38:af:a2:cb:75:26:12:43:f0:e7:
         ef:75:e3:5a:d6:3d:ec:60:b3:bc:00:27:70:c2:b6:5c:a7:31:
         e0:1b:86:de:c8:74:a4:e7:32:20:28:c2:b0:7b:b4:ee:8a:e4:
         6e:6b:f4:d2:39:3f:24:2e:03:09:69:e5:d6:e2:b3:e1:7f:75:
         2a:20:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:51 2025 by rpki-client