Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323632313931.roa
File:                     3139302e37312e38352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          aIyaOLK9mGVmQ3VcGpVLl+R0/EcljFYeQF5C9fcTJ3Y=
Subject key identifier:   46:5B:7E:7B:00:3D:33:EE:4C:83:7F:20:33:CC:0C:E2:28:09:B6:3A
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       153547E2304B8AEA693B4F06AA68F2A6D5C37AE0
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:33:30 +0000
ROA not before:           Tue 04 Feb 2025 18:28:30 +0000
ROA not after:            Tue 03 Feb 2026 18:33:30 +0000
asID:                     262191
IP address blocks:        190.71.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:35:47:e2:30:4b:8a:ea:69:3b:4f:06:aa:68:f2:a6:d5:c3:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Feb  4 18:28:30 2025 GMT
            Not After : Feb  3 18:33:30 2026 GMT
        Subject: CN=465B7E7B003D33EE4C837F2033CC0CE22809B63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:51:6d:91:3e:53:4e:3b:f3:5b:d8:62:16:
                    0f:b1:52:30:ed:d1:be:ac:f1:a5:9b:e0:78:cc:22:
                    33:96:1c:e9:65:5a:8f:c1:f5:26:f6:19:fe:28:9d:
                    c3:92:9f:25:3e:a7:8a:a9:a6:e2:1b:22:f2:fe:54:
                    1f:e9:8b:0d:84:90:f2:70:1e:1a:c4:73:ca:5a:42:
                    8e:ac:28:63:3a:b8:d3:a2:06:c8:91:f9:5d:8c:1c:
                    9f:79:2b:13:49:b2:3e:62:70:1f:de:a9:cf:1d:cb:
                    7c:1c:fb:e1:8a:99:ed:54:84:d8:4f:64:d9:17:47:
                    a2:c5:87:ae:84:ce:83:32:11:db:b5:c6:55:03:01:
                    6b:38:c9:25:12:3b:dc:f3:bf:62:fa:c3:62:fd:3a:
                    fa:08:bd:3e:7c:51:25:01:8f:b2:29:86:a5:93:72:
                    71:52:c1:38:b8:60:65:bd:cb:ef:32:25:0b:bd:07:
                    93:ba:bf:a0:36:5a:10:a0:68:2b:75:74:15:8b:b4:
                    77:ad:5a:ae:fd:24:24:98:6c:08:3e:8c:6a:16:8c:
                    88:9d:81:ef:4f:ab:03:73:3a:b4:16:08:b2:20:79:
                    f8:94:f2:ae:3e:e1:de:33:ab:a4:dc:1d:12:45:bd:
                    67:f5:c6:a9:9b:11:d3:55:66:f3:47:6d:67:5c:76:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:7E:7B:00:3D:33:EE:4C:83:7F:20:33:CC:0C:E2:28:09:B6:3A
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:80:17:a7:cd:5d:ed:dc:08:81:47:6a:52:55:e5:8a:eb:52:
         44:53:e3:1d:76:0a:b5:12:c5:e0:5a:de:22:98:bb:a8:6e:20:
         17:30:6b:1d:92:f6:d1:c7:b2:ca:ea:85:ae:75:71:6a:de:dc:
         bc:65:5e:7a:67:78:4a:9c:2f:49:f5:d1:8b:71:e4:a1:85:8c:
         19:1a:c1:5f:b1:9a:7f:01:22:95:8b:88:80:77:f3:c7:4b:0b:
         b2:48:2b:55:ef:8d:0c:5c:f9:92:7b:d1:fd:24:06:f0:4d:c3:
         9f:42:6b:45:cd:2b:38:af:80:fb:46:68:8d:ce:2c:55:ad:7b:
         9f:08:54:6e:38:a8:b5:c4:17:20:66:a3:51:3f:68:0b:7a:60:
         10:c3:bf:fb:4f:71:a6:0a:31:3c:34:b7:99:62:ed:58:80:7a:
         f4:2f:db:93:11:f9:9c:76:45:2f:24:b4:57:a8:28:3d:06:ac:
         50:b1:ac:47:9c:0f:e0:ee:67:ea:6b:8e:c8:41:6b:f6:a3:df:
         86:67:44:34:df:3b:db:7e:3d:94:3d:39:55:05:ae:c8:42:3a:
         66:3e:c0:cc:96:82:32:35:77:d4:92:ee:32:34:a9:26:66:5d:
         97:2d:8b:c6:32:9c:c4:ee:52:ce:58:f2:24:29:93:03:38:b8:
         de:80:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client