Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132372e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          HzWQ/SieYI8+Bg8Q/KQEkSfu2K2dr919esCf3LCaJRY=
Subject key identifier:   DF:FE:15:21:B0:B1:82:39:6E:FA:EA:55:E3:D1:66:1F:6C:0E:34:B9
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       4626BD180705C1EB24AE2EEADCFC65A7558AE5F5
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 04 Feb 2025 18:21:23 +0000
ROA not before:           Tue 04 Feb 2025 18:16:23 +0000
ROA not after:            Tue 03 Feb 2026 18:21:23 +0000
asID:                     52392
IP address blocks:        190.99.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:26:bd:18:07:05:c1:eb:24:ae:2e:ea:dc:fc:65:a7:55:8a:e5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Feb  4 18:16:23 2025 GMT
            Not After : Feb  3 18:21:23 2026 GMT
        Subject: CN=DFFE1521B0B182396EFAEA55E3D1661F6C0E34B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b9:1e:9c:14:f6:13:72:88:d6:f8:e7:49:61:
                    59:4e:b8:0b:c2:84:49:53:d6:c3:c9:fd:be:95:c3:
                    dc:98:c4:5e:29:64:24:5f:70:f4:ac:e1:ac:71:db:
                    25:45:e4:e7:96:60:df:98:64:23:c6:65:be:88:5c:
                    e9:be:b7:22:37:10:b2:0e:51:2c:78:21:9f:5c:99:
                    9f:ad:24:a0:13:0e:bf:cf:a9:49:6a:72:5b:5d:40:
                    c7:37:f0:be:35:1a:ba:ab:7e:9e:ac:6f:47:19:2c:
                    a6:f1:b0:24:c0:70:61:b1:d9:38:1e:2a:d3:24:de:
                    a8:e7:08:3e:b1:75:13:96:81:90:1a:1a:de:9a:28:
                    f9:6d:ad:57:b5:07:6f:06:bf:d1:89:17:b3:d0:ab:
                    30:48:e5:c0:ef:1a:d5:4a:64:63:bb:9a:96:f3:91:
                    7e:cc:a8:71:27:31:cb:63:3a:13:93:dd:35:d9:61:
                    6b:1c:e7:bf:ef:65:38:c8:ab:bd:00:3a:3f:cb:6f:
                    06:10:cf:8e:99:69:97:d8:fb:b4:eb:53:5d:25:33:
                    22:19:96:81:cb:ef:fa:1c:62:0e:f8:66:96:5f:9d:
                    cc:b9:c5:ac:53:76:f4:c3:4e:34:2f:a8:40:b2:4c:
                    c0:8d:da:07:83:06:1f:a6:e4:e6:7c:bd:25:88:90:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:15:21:B0:B1:82:39:6E:FA:EA:55:E3:D1:66:1F:6C:0E:34:B9
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:10:5b:bf:a4:02:1b:8a:91:93:3d:0e:ee:0b:0b:a9:27:
         cb:6a:fa:73:98:6c:64:78:18:c3:0d:a5:d3:66:ee:ed:72:0c:
         b7:4f:f1:39:16:d7:bf:4b:85:8f:e8:80:a8:49:ac:29:5c:51:
         de:0d:f7:05:67:9f:51:8d:ed:87:4d:d0:e1:7f:14:b2:0b:3b:
         4d:0b:b9:e4:3c:3d:f7:48:b9:d6:3c:db:d2:ef:19:84:a8:d0:
         71:96:6c:49:a6:e8:6d:d5:df:84:7c:cc:a5:dd:2c:89:63:87:
         51:c7:37:8c:bc:89:14:91:24:ba:64:10:09:73:b0:57:db:2e:
         b6:f7:b6:36:f9:ee:d0:1a:85:fb:87:65:66:b1:7e:49:50:8e:
         84:4b:77:a1:3c:f3:19:2c:98:19:4c:06:27:6d:14:11:35:1a:
         c5:b9:cb:8b:db:e7:10:cf:50:d7:c7:bd:b5:68:6c:7d:94:9f:
         12:2d:a5:aa:a2:84:02:fa:4e:45:23:c0:c6:c5:b7:99:3a:de:
         08:2f:c1:29:b4:04:16:b5:90:4f:ad:ba:ce:d6:1b:30:55:e8:
         d9:c4:8b:7f:4e:d2:e0:3a:04:f9:5c:5a:f4:07:99:ba:1d:d0:
         bf:e4:f8:eb:20:60:63:aa:0c:7f:a0:6e:bc:92:ad:f6:b7:00:
         9a:5a:c7:fa
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURia9GAcFweskri7q3Pxlp1WK5fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NTQ1OUM1MzgyNUIwMjY5MUUxNjFEMEFERTcyMzVC
NzE1RTE1ODAeFw0yNTAyMDQxODE2MjNaFw0yNjAyMDMxODIxMjNaMDMxMTAvBgNV
BAMTKERGRkUxNTIxQjBCMTgyMzk2RUZBRUE1NUUzRDE2NjFGNkMwRTM0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwuR6cFPYTcojW+OdJYVlOuAvC
hElT1sPJ/b6Vw9yYxF4pZCRfcPSs4axx2yVF5OeWYN+YZCPGZb6IXOm+tyI3ELIO
USx4IZ9cmZ+tJKATDr/PqUlqcltdQMc38L41Grqrfp6sb0cZLKbxsCTAcGGx2Tge
KtMk3qjnCD6xdROWgZAaGt6aKPltrVe1B28Gv9GJF7PQqzBI5cDvGtVKZGO7mpbz
kX7MqHEnMctjOhOT3TXZYWsc57/vZTjIq70AOj/LbwYQz46ZaZfY+7TrU10lMyIZ
loHL7/ocYg74ZpZfncy5xaxTdvTDTjQvqECyTMCN2geDBh+m5OZ8vSWIkEVjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3/4VIbCxgjlu+upV49FmH2wONLkwHwYDVR0j
BBgwFoAUn1VFnFOCWwJpHhYdCt5yNbcV4VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyMzg5MTMwOENCRkY3QUQzNDBGODE5NEYwNUQyNzI3
RjVFQzU4QTU3RDhDRTFEQkREN0YyODBBMUEwNTlGLzAvOUY1NTQ1OUM1MzgyNUIw
MjY5MUUxNjFEMEFERTcyMzVCNzE1RTE1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjU1NDU5QzUzODI1QjAyNjkx
RTE2MUQwQURFNzIzNUI3MTVFMTU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMjM4OTEzMDhDQkZGN0FEMzQwRjgxOTRGMDVEMjcyN0Y1RUM1OEE1
N0Q4Q0UxREJERDdGMjgwQTFBMDU5Ri8wLzMxMzkzMDJlMzkzOTJlMzEzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5jfzAN
BgkqhkiG9w0BAQsFAAOCAQEAau4QW7+kAhuKkZM9Du4LC6kny2r6c5hsZHgYww2l
02bu7XIMt0/xORbXv0uFj+iAqEmsKVxR3g33BWefUY3th03Q4X8Usgs7TQu55Dw9
90i51jzb0u8ZhKjQcZZsSabobdXfhHzMpd0siWOHUcc3jLyJFJEkumQQCXOwV9su
tve2Nvnu0BqF+4dlZrF+SVCOhEt3oTzzGSyYGUwGJ20UETUaxbnLi9vnEM9Q18e9
tWhsfZSfEi2lqqKEAvpORSPAxsW3mTreCC/BKbQEFrWQT626ztYbMFXo2cSLf07S
4DoE+Vxa9AeZuh3Qv+T46yBgY6oMf6BuvJKt9rcAmlrH+g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:40:36 2025 by rpki-client