Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3130342e36372e302f32352d3235203d3e20323733383830.roa
File:                     3139302e3130342e36372e302f32352d3235203d3e20323733383830.roa (raw, json)
Hash identifier:          VqnQvuGsld0TicXy/gvZP00277ATFk/rNRnRdI5p7YY=
Subject key identifier:   C3:00:FF:61:81:98:99:8E:78:E6:88:F8:7D:75:E0:A7:F8:A9:F5:D5
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       71EBF3A916545D43BE1B33CF05322B3F1819859A
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3130342e36372e302f32352d3235203d3e20323733383830.roa
Signing time:             Tue 11 Feb 2025 11:25:00 +0000
ROA not before:           Tue 11 Feb 2025 11:20:00 +0000
ROA not after:            Tue 10 Feb 2026 11:25:00 +0000
asID:                     273880
IP address blocks:        190.104.67.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:eb:f3:a9:16:54:5d:43:be:1b:33:cf:05:32:2b:3f:18:19:85:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Feb 11 11:20:00 2025 GMT
            Not After : Feb 10 11:25:00 2026 GMT
        Subject: CN=C300FF618198998E78E688F87D75E0A7F8A9F5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:10:3c:da:46:e7:85:97:20:65:cf:3a:5c:
                    23:35:4d:31:6b:2c:94:9f:c8:5d:73:c9:e1:48:d0:
                    dd:86:f6:14:41:c5:6e:7e:cd:6d:f2:97:5c:cd:35:
                    9d:17:19:94:10:b1:eb:e2:e6:a0:ba:78:92:fe:8c:
                    c3:26:df:e8:71:d7:2f:3f:b5:89:33:a5:00:f5:1e:
                    f3:59:22:dd:2e:7b:e1:e9:8d:88:28:aa:0b:55:56:
                    f4:53:b0:e7:5b:fc:fc:d7:73:ed:4b:af:56:f0:d5:
                    2c:da:d7:ee:73:70:7b:c5:30:fa:1e:c8:06:7c:9b:
                    16:26:99:8b:5f:0b:32:70:a2:2e:f6:a5:58:4f:3c:
                    7b:8f:c9:5c:1b:99:52:61:9b:46:df:a6:f9:e2:22:
                    fc:53:b8:cc:6b:68:f8:8d:72:9b:a7:54:28:96:8b:
                    ff:db:e4:ac:cd:a0:d9:2d:5b:a0:00:4f:b1:2a:14:
                    cb:a0:2b:20:28:18:96:bc:89:d0:08:4c:8a:ee:85:
                    f2:0f:90:a9:b6:13:55:60:48:9d:f1:a7:3e:8c:11:
                    76:cb:74:b7:d5:40:07:60:ee:d8:b7:bf:10:fd:62:
                    f1:99:97:61:29:99:b2:e7:3d:7e:ad:ac:2f:a9:fc:
                    70:70:94:2c:04:39:63:f5:2c:c8:88:12:28:71:75:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:00:FF:61:81:98:99:8E:78:E6:88:F8:7D:75:E0:A7:F8:A9:F5:D5
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3130342e36372e302f32352d3235203d3e20323733383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.67.0/25

    Signature Algorithm: sha256WithRSAEncryption
         12:69:46:67:f3:46:05:7a:e5:dc:cc:82:df:48:8a:62:37:64:
         6b:2f:6b:e8:b9:d1:0c:11:d7:0c:a7:e2:14:54:d5:e6:4c:f7:
         b8:13:84:4b:ed:72:5c:0a:f0:89:04:f0:2e:a5:8e:2d:c2:ae:
         d3:c4:02:9d:30:43:f9:09:60:ec:af:78:e5:e4:00:e6:09:fb:
         71:a8:6f:ea:1f:f3:bc:72:3e:6a:81:88:c1:ae:ff:37:3b:94:
         fe:4c:9f:1c:c7:f3:5d:59:b9:9e:6b:88:27:e7:92:21:f1:1a:
         dd:fa:16:32:44:45:ef:35:c2:54:1d:e3:02:b7:04:a4:bd:62:
         a8:2c:e0:14:b8:13:bf:94:d9:2b:91:de:ef:6f:ff:d9:22:b5:
         63:32:51:c9:15:f2:f5:6b:13:50:8b:ae:a8:de:e3:99:cb:15:
         94:3c:30:cb:c8:ab:6f:49:29:87:a7:0b:ab:3d:6c:45:a6:e3:
         08:3b:55:20:11:12:3a:a5:23:ba:ea:e3:d4:44:b4:d9:d1:8f:
         50:1b:4f:55:18:7f:01:53:b7:70:f5:a0:dc:31:0c:f9:9a:21:
         ba:08:76:10:4d:e8:47:82:45:2b:ba:55:9c:f5:68:db:ba:4c:
         77:a7:fe:4b:b5:51:a8:8a:a7:73:42:e8:9d:57:1d:79:84:9b:
         5c:bd:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:47 2025 by rpki-client