Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa
File:                     3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa (raw, json)
Hash identifier:          rihQQJVFtZKUDCwHDYSaMs0ULFC3fG8dHmriGQNp/VM=
Subject key identifier:   C0:2D:A4:3D:D8:21:A4:52:4A:1D:69:96:CA:B5:35:47:D3:D9:24:7D
Certificate issuer:       /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
Certificate serial:       11DDE3BBA5D788467A753BE1A9ACB07381CCAE2B
Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa
Signing time:             Tue 04 Feb 2025 19:58:15 +0000
ROA not before:           Tue 04 Feb 2025 19:53:15 +0000
ROA not after:            Tue 03 Feb 2026 19:58:15 +0000
asID:                     271864
IP address blocks:        190.113.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:dd:e3:bb:a5:d7:88:46:7a:75:3b:e1:a9:ac:b0:73:81:cc:ae:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
        Validity
            Not Before: Feb  4 19:53:15 2025 GMT
            Not After : Feb  3 19:58:15 2026 GMT
        Subject: CN=C02DA43DD821A4524A1D6996CAB53547D3D9247D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:c0:0c:0c:47:e9:40:aa:c5:74:6d:8e:7c:
                    44:bc:f7:c0:16:74:0c:a8:e2:50:31:b0:a0:19:ba:
                    bc:7c:a6:29:af:31:18:84:85:e5:da:5d:fd:6f:2c:
                    f9:4d:fe:ba:4c:b0:bd:1e:c5:d6:82:ac:ce:ad:ec:
                    90:34:67:f8:f4:1f:7a:31:98:b9:7c:fc:22:4f:80:
                    71:65:c8:a2:53:2d:a7:ca:2d:91:e5:05:10:e5:bb:
                    65:0e:34:41:24:bb:61:cf:26:75:a8:29:5e:f6:93:
                    39:ec:3c:5d:28:f2:28:96:c4:55:fa:8e:84:71:66:
                    44:e8:4b:c1:96:df:48:c3:03:64:eb:64:dc:8f:81:
                    a3:0c:ec:96:75:b8:a7:d2:70:2b:01:95:4e:8d:3b:
                    a4:6b:47:5d:b6:ce:04:ad:37:53:ab:b0:e9:d7:ba:
                    a1:c9:f5:10:5d:c9:5d:c5:1c:f8:55:ff:14:0b:02:
                    37:d8:30:a6:a2:8a:34:f7:b9:d9:e8:d7:23:14:90:
                    e7:e8:2f:8b:d7:37:58:66:cd:40:92:be:7f:87:9a:
                    45:4a:fc:56:a3:d3:26:23:97:19:14:c8:cd:76:66:
                    16:e0:30:c8:a2:97:89:ed:27:3b:96:5b:cb:22:a8:
                    0e:01:ba:1b:84:5a:c8:1b:98:a7:03:5f:fa:24:64:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:A4:3D:D8:21:A4:52:4A:1D:69:96:CA:B5:35:47:D3:D9:24:7D
            X509v3 Authority Key Identifier:
                keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:d7:ea:cf:2e:e2:a2:d2:68:e8:e7:5e:a3:1e:5a:c9:4c:
         cc:81:c8:6a:2a:e5:97:ce:2c:34:2f:f3:bd:65:86:50:9f:fa:
         09:2e:74:50:df:9b:63:de:c0:6a:be:16:5b:a4:6f:e8:88:1c:
         ec:24:73:08:2c:3b:26:15:0f:2c:79:b2:4b:27:5f:44:cc:f4:
         8e:f1:36:16:0d:bc:e3:7b:37:dd:ce:d2:2e:f7:af:3c:4c:de:
         3b:d6:fd:f0:26:9b:76:a2:c9:2a:8e:90:9c:52:15:21:6e:91:
         7f:41:f7:f2:74:fd:e3:2d:05:71:7b:51:23:b1:31:81:58:6a:
         0a:84:23:c4:dc:14:eb:52:8f:c1:f1:6e:b3:89:2b:cd:fc:b0:
         89:9f:15:61:4a:9b:05:85:ea:9d:79:c5:3c:53:7d:cc:73:7e:
         ee:21:74:43:b1:e9:03:43:18:c5:2a:85:bc:63:49:b7:01:88:
         a6:ee:c0:2c:d0:99:16:f1:82:b9:f9:13:f1:3d:ba:92:04:c3:
         70:4b:48:3d:b1:d0:c8:e8:2d:ff:e6:2f:90:95:2c:ea:cc:55:
         72:12:e6:c8:06:ea:07:c3:b8:cc:0e:32:f4:01:08:ba:17:7c:
         e6:c0:bb:48:e7:80:48:43:b4:1c:20:6d:75:47:cc:48:0d:94:
         64:61:e7:57
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEd3ju6XXiEZ6dTvhqaywc4HMriswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE1MTdENEJBQUI4NUQzQzhGNTAwOEY0MEJDNDhCMjFD
QkVBNzJCODAeFw0yNTAyMDQxOTUzMTVaFw0yNjAyMDMxOTU4MTVaMDMxMTAvBgNV
BAMTKEMwMkRBNDNERDgyMUE0NTI0QTFENjk5NkNBQjUzNTQ3RDNEOTI0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZMAMDEfpQKrFdG2OfES898AW
dAyo4lAxsKAZurx8pimvMRiEheXaXf1vLPlN/rpMsL0exdaCrM6t7JA0Z/j0H3ox
mLl8/CJPgHFlyKJTLafKLZHlBRDlu2UONEEku2HPJnWoKV72kznsPF0o8iiWxFX6
joRxZkToS8GW30jDA2TrZNyPgaMM7JZ1uKfScCsBlU6NO6RrR122zgStN1OrsOnX
uqHJ9RBdyV3FHPhV/xQLAjfYMKaiijT3udno1yMUkOfoL4vXN1hmzUCSvn+HmkVK
/Faj0yYjlxkUyM12ZhbgMMiil4ntJzuWW8siqA4BuhuEWsgbmKcDX/okZOSLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwC2kPdghpFJKHWmWyrU1R9PZJH0wHwYDVR0j
BBgwFoAU6lF9S6q4XTyPUAj0C8SLIcvqcrgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QTNDNjVFMDExMzhBNzk3Q0MxQ0Q4OEI3QjMyQTgwRjE1
NjQyMzE2MDg3QzI5NTEzRDNEQUMyQjExMTdBMzY4LzAvRUE1MTdENEJBQUI4NUQz
QzhGNTAwOEY0MEJDNDhCMjFDQkVBNzJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQTUxN0Q0QkFBQjg1RDNDOEY1
MDA4RjQwQkM0OEIyMUNCRUE3MkI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEEzQzY1RTAxMTM4QTc5N0NDMUNEODhCN0IzMkE4MEYxNTY0MjMxNjA4
N0MyOTUxM0QzREFDMkIxMTE3QTM2OC8wLzMxMzkzMDJlMzEzMTMzMmUzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnEg
MA0GCSqGSIb3DQEBCwUAA4IBAQCeLtfqzy7iotJo6Odeox5ayUzMgchqKuWXziw0
L/O9ZYZQn/oJLnRQ35tj3sBqvhZbpG/oiBzsJHMILDsmFQ8sebJLJ19EzPSO8TYW
DbzjezfdztIu9688TN471v3wJpt2oskqjpCcUhUhbpF/QffydP3jLQVxe1EjsTGB
WGoKhCPE3BTrUo/B8W6ziSvN/LCJnxVhSpsFheqdecU8U33Mc37uIXRDsekDQxjF
KoW8Y0m3AYim7sAs0JkW8YK5+RPxPbqSBMNwS0g9sdDI6C3/5i+QlSzqzFVyEubI
BuoHw7jMDjL0AQi6F3zmwLtI54BIQ7QcIG11R8xIDZRkYedX
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:45 2025 by rpki-client