Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e36342e302f31382d3138203d3e203134373534.roa
File:                     3139302e3138342e36342e302f31382d3138203d3e203134373534.roa (raw, json)
Hash identifier:          yOiRdPYx4fBjNvXcYJrFeGDBE/pi60HFq7/7hVlZ/14=
Subject key identifier:   19:D1:05:EA:9D:75:98:E2:A2:C6:A9:D5:4B:3E:5C:08:0C:CB:4A:57
Certificate issuer:       /CN=A379859384774565F06B5085B32618E97FC5CFD1
Certificate serial:       22A009E70F0B005168D85816ADE9D5388374DF80
Authority key identifier: A3:79:85:93:84:77:45:65:F0:6B:50:85:B3:26:18:E9:7F:C5:CF:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e36342e302f31382d3138203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:36:55 +0000
ROA not before:           Tue 04 Feb 2025 18:31:55 +0000
ROA not after:            Tue 03 Feb 2026 18:36:55 +0000
asID:                     14754
IP address blocks:        190.184.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:09:e7:0f:0b:00:51:68:d8:58:16:ad:e9:d5:38:83:74:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A379859384774565F06B5085B32618E97FC5CFD1
        Validity
            Not Before: Feb  4 18:31:55 2025 GMT
            Not After : Feb  3 18:36:55 2026 GMT
        Subject: CN=19D105EA9D7598E2A2C6A9D54B3E5C080CCB4A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:7c:e6:e2:e4:ef:d3:fb:c1:f7:a0:ec:65:
                    ad:e0:1d:5d:16:5c:dd:b4:fd:63:94:1c:f3:c4:c8:
                    9c:4b:72:ed:1b:b8:2c:59:f2:7d:ec:d5:93:82:a8:
                    7a:d5:7a:4d:5a:50:43:56:b9:ef:fa:7d:ba:45:2a:
                    01:b6:7b:55:f3:84:2f:9e:ff:ee:41:08:78:05:a2:
                    df:a7:2a:1a:dd:37:76:74:07:f4:01:d9:2a:fb:12:
                    66:0d:b5:bc:e7:9c:3a:54:d3:55:d3:12:d3:2e:38:
                    5b:1b:4b:6b:ff:b2:22:2e:5d:7e:8d:3d:10:91:7e:
                    14:65:0b:ec:22:d1:66:b1:7e:e6:f8:83:a4:79:2b:
                    13:07:bd:e6:c9:e0:f0:24:02:ae:27:11:88:03:e0:
                    4d:bc:a4:37:29:c1:2a:08:e3:7d:e2:74:15:75:3a:
                    fd:c1:e7:60:e2:2b:30:44:c8:d8:a0:9f:93:03:95:
                    98:e9:79:40:3f:7f:33:ed:fc:8d:88:5d:cc:3d:14:
                    9b:77:aa:bb:b8:f2:bf:94:d6:42:02:06:65:45:fd:
                    a6:a5:f5:cc:d4:da:61:a9:c5:74:60:4e:9a:66:c4:
                    5e:94:dc:c3:3e:ec:89:f1:72:59:ef:91:03:e2:8f:
                    7f:8f:dd:a1:7c:cf:ae:c7:c8:c9:bc:04:0f:fd:b5:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D1:05:EA:9D:75:98:E2:A2:C6:A9:D5:4B:3E:5C:08:0C:CB:4A:57
            X509v3 Authority Key Identifier:
                keyid:A3:79:85:93:84:77:45:65:F0:6B:50:85:B3:26:18:E9:7F:C5:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e36342e302f31382d3138203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:57:b1:e7:26:53:10:94:8b:57:4a:27:4d:56:73:d5:80:42:
         e1:c6:7f:76:63:4f:64:a2:5c:c0:d3:b4:26:e8:97:42:81:4e:
         1b:02:72:29:8a:12:3c:79:e7:5a:49:74:dd:57:ea:b8:4f:2f:
         78:27:2c:43:6b:e2:6e:7a:35:d0:25:f2:93:ea:02:67:a8:da:
         23:4f:37:7b:8a:05:d7:59:a6:80:25:ef:29:a2:8e:d3:ba:9e:
         ec:55:b3:a5:1b:41:45:44:76:bd:86:f7:d0:12:7a:8a:9e:d6:
         44:f8:7c:7e:25:83:d4:9f:da:8e:ad:ae:77:84:47:58:be:28:
         1c:56:7d:53:38:ce:35:97:ba:7f:96:00:3c:fe:e0:d1:b3:5e:
         8c:63:de:34:ab:d8:ca:07:15:73:57:82:06:de:02:9d:cb:6e:
         ed:fa:44:40:88:67:73:c5:b7:c9:b6:2f:6c:fd:68:2c:e6:6d:
         37:8c:6e:74:dd:47:9c:90:4b:55:b6:9d:c4:1e:1c:f9:89:41:
         5b:49:64:c2:d9:74:20:16:91:8e:dd:9f:44:87:3a:4b:e4:19:
         8e:db:e7:40:c9:23:48:0d:e1:4a:6e:50:5c:49:8e:f6:13:8f:
         4a:96:0c:d8:1f:43:eb:45:0e:60:18:f0:16:7e:95:98:3a:aa:
         e7:f4:15:1d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIqAJ5w8LAFFo2FgWrenVOIN034AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM3OTg1OTM4NDc3NDU2NUYwNkI1MDg1QjMyNjE4RTk3
RkM1Q0ZEMTAeFw0yNTAyMDQxODMxNTVaFw0yNjAyMDMxODM2NTVaMDMxMTAvBgNV
BAMTKDE5RDEwNUVBOUQ3NTk4RTJBMkM2QTlENTRCM0U1QzA4MENDQjRBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkS3zm4uTv0/vB96DsZa3gHV0W
XN20/WOUHPPEyJxLcu0buCxZ8n3s1ZOCqHrVek1aUENWue/6fbpFKgG2e1XzhC+e
/+5BCHgFot+nKhrdN3Z0B/QB2Sr7EmYNtbznnDpU01XTEtMuOFsbS2v/siIuXX6N
PRCRfhRlC+wi0Waxfub4g6R5KxMHvebJ4PAkAq4nEYgD4E28pDcpwSoI433idBV1
Ov3B52DiKzBEyNign5MDlZjpeUA/fzPt/I2IXcw9FJt3qru48r+U1kICBmVF/aal
9czU2mGpxXRgTppmxF6U3MM+7InxclnvkQPij3+P3aF8z67HyMm8BA/9teNZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGdEF6p11mOKixqnVSz5cCAzLSlcwHwYDVR0j
BBgwFoAUo3mFk4R3RWXwa1CFsyYY6X/Fz9EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTZDOTlCNDJBNjNDRTI2RkEwNUI0ODZGNkQyNkNFODNE
QkY1QkU0QUQxN0ZCQTYyREJBNUI1M0QyRTY4MjVELzAvQTM3OTg1OTM4NDc3NDU2
NUYwNkI1MDg1QjMyNjE4RTk3RkM1Q0ZEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzc5ODU5Mzg0Nzc0NTY1RjA2
QjUwODVCMzI2MThFOTdGQzVDRkQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE2Qzk5QjQyQTYzQ0UyNkZBMDVCNDg2RjZEMjZDRTgzREJGNUJFNEFE
MTdGQkE2MkRCQTVCNTNEMkU2ODI1RC8wLzMxMzkzMDJlMzEzODM0MmUzNjM0MmUz
MDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr64QDAN
BgkqhkiG9w0BAQsFAAOCAQEABFex5yZTEJSLV0onTVZz1YBC4cZ/dmNPZKJcwNO0
JuiXQoFOGwJyKYoSPHnnWkl03VfquE8veCcsQ2vibno10CXyk+oCZ6jaI083e4oF
11mmgCXvKaKO07qe7FWzpRtBRUR2vYb30BJ6ip7WRPh8fiWD1J/ajq2ud4RHWL4o
HFZ9UzjONZe6f5YAPP7g0bNejGPeNKvYygcVc1eCBt4Cnctu7fpEQIhnc8W3ybYv
bP1oLOZtN4xudN1HnJBLVbadxB4c+YlBW0lkwtl0IBaRjt2fRIc6S+QZjtvnQMkj
SA3hSm5QXEmO9hOPSpYM2B9D60UOYBjwFn6VmDqq5/QVHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:35 2025 by rpki-client