Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3139302e322e39362e302f31392d3234203d3e203237383133.roa
File:                     3139302e322e39362e302f31392d3234203d3e203237383133.roa (raw, json)
Hash identifier:          guBf5ZMJy/WmcF51NFynbgGMGUzsU3fGHpkxEZJ+5Sg=
Subject key identifier:   DC:3E:87:55:43:13:21:79:04:3C:FA:96:18:88:A1:E9:09:82:8D:63
Certificate issuer:       /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial:       3C9188E9B9E705A2F8BB474347B6D4D977668F0F
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3139302e322e39362e302f31392d3234203d3e203237383133.roa
Signing time:             Tue 04 Feb 2025 20:04:22 +0000
ROA not before:           Tue 04 Feb 2025 19:59:22 +0000
ROA not after:            Tue 03 Feb 2026 20:04:22 +0000
asID:                     27813
IP address blocks:        190.2.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:91:88:e9:b9:e7:05:a2:f8:bb:47:43:47:b6:d4:d9:77:66:8f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
        Validity
            Not Before: Feb  4 19:59:22 2025 GMT
            Not After : Feb  3 20:04:22 2026 GMT
        Subject: CN=DC3E875543132179043CFA961888A1E909828D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:1f:8a:bc:f7:c8:73:86:26:dd:be:43:ab:
                    e3:4b:dd:6a:e4:0e:88:d4:1a:76:7a:0c:67:35:0a:
                    53:92:1a:f6:7a:61:90:17:e7:28:50:2c:fe:74:03:
                    2e:c4:c1:c7:8e:a1:63:ec:82:cb:76:fa:1f:a7:72:
                    21:52:49:c2:3d:67:ec:94:59:69:6b:a9:37:d3:a3:
                    95:94:d8:0a:8e:ab:d3:ee:0f:1c:68:22:b2:0a:35:
                    f3:62:f0:2e:fe:8d:83:02:ef:7c:99:47:79:50:62:
                    05:50:8f:78:1b:44:0d:83:fe:c4:2d:b0:d2:bc:87:
                    c7:80:4c:a9:b5:83:bd:db:41:ce:20:78:1b:03:0a:
                    5d:71:70:e6:e3:b9:d4:4b:97:e7:45:06:06:0f:82:
                    33:c8:ff:f3:7a:50:09:0a:ed:6f:ec:92:c8:54:4a:
                    2f:f5:fc:0c:e2:30:4c:44:d6:74:0f:e4:74:a7:0e:
                    5d:85:e3:63:22:09:9a:ea:56:19:d5:c8:86:87:d5:
                    c7:4a:02:65:21:f8:7c:bb:25:78:e1:ee:5d:16:d8:
                    11:d6:64:8d:ef:95:a4:79:0d:1f:cb:36:b6:55:9a:
                    39:61:a6:4f:07:4c:52:f6:a9:87:97:07:4a:e5:12:
                    3e:16:18:0c:be:22:54:f5:9c:c3:67:a1:34:96:17:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3E:87:55:43:13:21:79:04:3C:FA:96:18:88:A1:E9:09:82:8D:63
            X509v3 Authority Key Identifier:
                keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3139302e322e39362e302f31392d3234203d3e203237383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:80:27:30:07:61:da:43:e6:aa:c3:d0:10:19:87:98:4a:3b:
         3f:45:c6:13:ed:3b:9a:d5:1d:e1:97:48:bb:eb:94:f0:3c:c2:
         f1:99:1c:45:11:fc:f1:73:c1:69:75:9f:79:21:cd:cb:07:51:
         00:00:80:d3:97:20:34:ee:5c:69:1f:75:1c:04:cd:07:3f:c3:
         15:71:6e:c7:31:e9:18:c3:3a:5b:5d:98:e2:21:2c:11:1d:86:
         30:ac:e5:9c:03:24:0f:ad:b7:cc:fc:f8:64:9e:1b:28:6f:39:
         90:bb:59:8f:ba:5b:e2:f1:86:2a:6a:ea:44:12:79:f9:38:b3:
         66:a0:b0:db:fc:b0:12:17:bb:4e:03:ad:42:79:b3:de:bd:7f:
         a2:d3:18:7c:f2:e8:8f:f6:87:5c:fe:2e:f1:3a:f4:d1:14:f7:
         45:ef:07:98:e7:19:eb:6b:66:eb:f0:c7:ed:18:8e:98:3e:9a:
         1a:f4:f8:c5:bb:e8:fb:8d:dc:7d:e6:f7:d4:bb:ed:69:9d:dc:
         f0:16:24:97:5c:34:8f:c4:73:82:d3:c3:f2:45:46:10:f6:d4:
         99:87:2a:8c:ac:79:19:83:1b:49:ec:c0:28:19:c2:10:bd:42:
         64:78:d5:a4:15:4e:bb:11:36:bf:a7:f6:4b:46:11:e5:9e:b6:
         c7:83:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:40 2025 by rpki-client