Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa
File:                     3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          8dOuExnSN1KZwYY3syVSDHaYhvXJSWDlVUnZ/WXy1Tk=
Subject key identifier:   DD:C4:DC:0E:9C:81:24:C6:46:AB:CD:F3:01:11:70:F6:FA:C4:4C:16
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       6C4176CCC397A1D2DECBCB654EB9626CCB7092AA
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:31:58 +0000
ROA not before:           Tue 04 Feb 2025 18:26:58 +0000
ROA not after:            Tue 03 Feb 2026 18:31:58 +0000
asID:                     16629
IP address blocks:        190.171.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:41:76:cc:c3:97:a1:d2:de:cb:cb:65:4e:b9:62:6c:cb:70:92:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:58 2025 GMT
            Not After : Feb  3 18:31:58 2026 GMT
        Subject: CN=DDC4DC0E9C8124C646ABCDF3011170F6FAC44C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:de:c9:b9:6e:47:9d:ef:cb:52:cc:0d:39:
                    10:6a:f0:38:5b:2b:53:d2:8d:32:89:e3:bd:ca:ca:
                    33:6c:f6:58:9a:9b:ab:03:d0:19:fc:23:8c:1a:56:
                    25:48:ca:44:b6:7b:fe:bb:71:26:33:69:d9:e0:05:
                    56:6c:d9:73:4b:4a:c3:b1:b7:ce:d9:4d:f6:2a:ef:
                    8b:9c:47:1d:1e:bb:9c:ca:49:1c:f7:49:e4:2c:35:
                    c6:a5:95:b7:ad:3a:11:6f:c7:46:c8:5b:cb:0c:e4:
                    35:88:27:f2:fb:43:c7:ce:0c:b8:bc:ea:ff:6a:38:
                    9f:25:69:03:ec:49:91:c1:fc:00:8f:82:e9:2f:2d:
                    fd:98:67:a3:a9:76:9a:6b:b1:af:e2:16:30:c9:d0:
                    1b:de:2c:08:cc:4d:da:07:5a:19:af:81:f8:fe:16:
                    2a:8c:43:fb:14:25:d8:07:a0:7c:f8:4b:41:6e:c7:
                    74:23:56:bd:f0:da:41:45:5b:dc:5b:54:17:dc:ec:
                    86:81:41:c9:d9:e4:d5:9f:f4:ee:e8:98:4b:75:f7:
                    80:6f:be:56:9f:5f:1b:c1:b5:5b:31:3a:90:75:0a:
                    7d:40:dc:6b:a6:4a:7a:28:b2:e0:96:a7:c6:bb:3d:
                    c8:33:13:b9:8c:cf:c2:53:d4:46:28:65:19:3c:c4:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C4:DC:0E:9C:81:24:C6:46:AB:CD:F3:01:11:70:F6:FA:C4:4C:16
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:2a:c7:6e:aa:34:65:db:0f:7b:ec:1f:c6:37:1b:ad:8f:5d:
         d4:d8:da:98:38:0c:1b:fe:73:79:c8:d4:c6:92:cf:41:ab:47:
         f6:7b:27:be:22:05:45:c9:b9:a0:29:b9:d8:39:2d:a5:fc:93:
         18:76:76:f9:25:f9:a3:bd:c6:10:54:20:57:a6:cb:e0:f1:24:
         1f:f8:16:af:64:34:6b:75:d1:1c:6f:9f:4b:80:19:f8:38:61:
         79:f5:3d:a2:c2:45:a8:4c:67:10:26:86:38:3f:96:5a:93:6c:
         9c:b4:af:a7:c9:bd:ed:6e:70:3c:55:10:ab:82:4a:47:f6:96:
         2e:89:64:7c:de:90:d5:ce:97:c3:fe:98:a3:4b:5c:c6:64:3a:
         85:62:2c:70:72:a2:1b:ff:18:02:a4:41:aa:22:67:a6:62:8b:
         61:a9:58:1c:9f:a1:e3:bf:9e:b2:2c:71:38:ae:08:ad:38:2e:
         84:cf:4c:11:77:c0:23:d2:a9:c1:cf:d5:2c:46:a9:d3:4b:f8:
         75:6e:e0:6a:73:5d:b3:46:3f:60:66:8f:61:9e:a4:47:05:39:
         b5:6e:7e:e1:0d:64:f0:2e:eb:8f:ad:f0:56:bc:f0:4e:cf:6b:
         c2:34:17:bf:61:c6:b1:35:b1:1c:7a:10:52:88:c3:8e:82:5b:
         95:66:ba:e5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbEF2zMOXodLey8tlTrlibMtwkqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNTAyMDQxODI2NThaFw0yNjAyMDMxODMxNThaMDMxMTAvBgNV
BAMTKEREQzREQzBFOUM4MTI0QzY0NkFCQ0RGMzAxMTE3MEY2RkFDNDRDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVnt7JuW5Hne/LUswNORBq8Dhb
K1PSjTKJ473KyjNs9liam6sD0Bn8I4waViVIykS2e/67cSYzadngBVZs2XNLSsOx
t87ZTfYq74ucRx0eu5zKSRz3SeQsNcallbetOhFvx0bIW8sM5DWIJ/L7Q8fODLi8
6v9qOJ8laQPsSZHB/ACPgukvLf2YZ6Opdpprsa/iFjDJ0BveLAjMTdoHWhmvgfj+
FiqMQ/sUJdgHoHz4S0Fux3QjVr3w2kFFW9xbVBfc7IaBQcnZ5NWf9O7omEt194Bv
vlafXxvBtVsxOpB1Cn1A3GumSnoosuCWp8a7PcgzE7mMz8JT1EYoZRk8xEszAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3cTcDpyBJMZGq83zARFw9vrETBYwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMxMzkzMDJlMzEzNzMxMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvquA
MA0GCSqGSIb3DQEBCwUAA4IBAQBCKsduqjRl2w977B/GNxutj13U2NqYOAwb/nN5
yNTGks9Bq0f2eye+IgVFybmgKbnYOS2l/JMYdnb5JfmjvcYQVCBXpsvg8SQf+Bav
ZDRrddEcb59LgBn4OGF59T2iwkWoTGcQJoY4P5Zak2yctK+nyb3tbnA8VRCrgkpH
9pYuiWR83pDVzpfD/pijS1zGZDqFYixwcqIb/xgCpEGqImemYothqVgcn6Hjv56y
LHE4rgitOC6Ez0wRd8Aj0qnBz9UsRqnTS/h1buBqc12zRj9gZo9hnqRHBTm1bn7h
DWTwLuuPrfBWvPBOz2vCNBe/YcaxNbEcehBSiMOOgluVZrrl
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:32:16 2025 by rpki-client