Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa
File:                     3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa (raw, json)
Hash identifier:          Sf50QU2IToeKRjrijQFFeAN/OG2KNzOkWcYBEbGiGnA=
Subject key identifier:   5E:3E:11:67:28:02:4B:B1:28:09:78:D8:42:15:AB:47:06:2B:CF:29
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       712ACB52CA04B0C839707973F4C33A4D152E2F75
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa
Signing time:             Thu 13 Feb 2025 05:09:43 +0000
ROA not before:           Thu 13 Feb 2025 05:04:43 +0000
ROA not after:            Thu 12 Feb 2026 05:09:43 +0000
asID:                     262944
IP address blocks:        189.201.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2a:cb:52:ca:04:b0:c8:39:70:79:73:f4:c3:3a:4d:15:2e:2f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Feb 13 05:04:43 2025 GMT
            Not After : Feb 12 05:09:43 2026 GMT
        Subject: CN=5E3E116728024BB1280978D84215AB47062BCF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:4b:3a:b2:31:09:96:d3:6d:16:10:45:52:
                    8b:95:43:e2:10:22:3c:1f:f7:52:c6:a5:e0:48:6b:
                    43:02:e3:6f:ee:4a:d2:f0:3f:a1:e2:45:4f:87:5f:
                    b8:e3:f3:81:17:56:36:7f:e2:82:45:2e:d3:e4:f7:
                    3d:7f:0a:dd:97:c6:10:59:b8:54:5d:d4:8b:c9:db:
                    cd:97:48:19:6f:ae:6f:83:c3:6c:24:b1:33:3f:ef:
                    12:b5:96:e9:05:79:38:e7:b0:76:9d:d7:aa:34:22:
                    7b:4b:89:84:2a:e7:9f:33:85:62:83:20:4d:58:75:
                    32:e3:2b:67:d9:57:33:8a:ef:a6:47:cd:78:31:7e:
                    c6:8a:10:d6:ac:e1:b8:46:60:ba:b1:53:a9:4e:43:
                    83:07:12:54:4a:34:de:c7:06:61:66:79:f3:69:10:
                    44:44:65:00:10:13:6d:24:76:24:bb:18:92:0f:e5:
                    74:c3:48:7f:3a:39:bd:11:65:13:03:54:3f:ea:6d:
                    e6:18:4d:47:fd:54:4e:bf:5b:4d:00:67:31:44:70:
                    fd:bf:1b:67:23:1b:6b:01:54:1e:f2:ff:41:32:c2:
                    ec:25:3c:f8:64:d9:44:8b:4a:f2:25:ab:d5:77:9b:
                    9b:ee:64:3d:7c:60:c4:26:e2:f7:24:34:59:76:91:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3E:11:67:28:02:4B:B1:28:09:78:D8:42:15:AB:47:06:2B:CF:29
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:49:de:73:eb:51:57:3b:8b:51:06:86:d1:f7:de:c5:43:aa:
         d5:3d:a5:30:84:9e:b0:aa:9b:e7:00:f5:4e:0f:be:d4:57:1a:
         58:ae:4b:55:24:27:ab:dd:8c:32:41:d2:37:f4:0c:99:69:1a:
         33:7b:2f:35:c3:45:ff:1c:92:bf:a7:e3:ca:40:59:de:20:00:
         4b:ad:c4:f8:f1:c9:0e:e4:ce:f7:97:17:bf:f5:82:96:44:56:
         a1:9a:d2:a7:96:1c:8d:8f:02:6c:26:ef:d0:d3:a0:14:63:03:
         05:a9:c1:05:af:a2:c2:03:b9:23:e1:00:9c:76:28:00:3f:50:
         c0:ec:5d:49:d1:12:dc:6f:ee:25:5a:28:67:5e:6a:6a:13:0b:
         06:d8:68:1b:ae:b8:2c:31:ff:3b:7e:5b:54:7e:e1:12:32:7d:
         f1:f7:e5:58:29:5e:11:10:a5:86:83:48:5a:14:7c:ce:07:5f:
         eb:4f:c8:fa:e4:da:2b:db:11:17:7a:59:cb:30:95:46:5d:ca:
         3d:d9:6b:f8:f6:91:67:5a:45:2a:3b:5c:0d:bb:0e:8f:9a:e4:
         ce:cd:01:be:79:29:35:15:b4:b2:9b:64:c8:e6:19:b7:36:de:
         53:fc:61:9a:35:2a:66:93:74:c7:f4:3a:61:3f:58:ad:45:27:
         f7:d8:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:25 2025 by rpki-client