Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231382e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3231382e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          Ez5H/HNW+3XrDWFW00bhZQuyqxq0dSSCQYGUod0WzBc=
Subject key identifier:   BB:D2:93:64:FF:10:6A:87:CB:94:60:4E:71:F6:58:80:B2:BB:86:21
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       51A3EA9842D1F81DC1AADAD99FF222954F33DF5F
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231382e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:44 +0000
ROA not before:           Tue 04 Feb 2025 18:05:44 +0000
ROA not after:            Tue 03 Feb 2026 18:10:44 +0000
asID:                     262237
IP address blocks:        190.196.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a3:ea:98:42:d1:f8:1d:c1:aa:da:d9:9f:f2:22:95:4f:33:df:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:44 2025 GMT
            Not After : Feb  3 18:10:44 2026 GMT
        Subject: CN=BBD29364FF106A87CB94604E71F65880B2BB8621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:1f:83:f5:22:03:ad:fb:dc:bf:b9:9b:61:
                    47:10:7b:59:fa:8c:bf:1b:e4:26:b4:d1:cc:a0:80:
                    5d:58:9d:ad:56:8d:5a:54:1f:f0:65:b2:5a:fc:a0:
                    e2:bc:48:dc:f6:f5:2c:4e:90:fc:46:44:15:80:6d:
                    6c:ab:1c:f3:81:80:17:5a:c3:a2:5c:c3:c0:52:38:
                    cc:16:e6:da:40:5f:71:8b:58:92:43:03:45:40:45:
                    6a:a4:a8:1e:d1:a5:d6:b9:23:7d:9d:e1:11:e4:6b:
                    45:04:21:60:05:92:77:c9:35:68:ef:ba:94:4b:e8:
                    21:55:27:47:1c:fd:99:41:30:00:5e:0b:a8:a1:f0:
                    cd:2b:b0:4a:a2:16:d5:2c:aa:b6:18:ee:5b:05:82:
                    58:fb:65:b0:7c:c7:eb:ce:57:47:dd:f7:15:a6:9e:
                    59:45:b6:44:94:e0:fd:d0:c2:b1:3e:3b:f4:eb:a8:
                    d9:ec:49:42:8e:20:9c:36:53:3f:9d:6b:24:24:98:
                    cb:b4:0e:18:44:e6:ac:63:d1:95:5b:be:2c:06:43:
                    96:c6:ba:c3:35:5a:53:03:78:c5:25:a5:bd:a6:e9:
                    ca:0e:92:37:9f:df:3c:bc:10:6b:42:7f:5f:dd:32:
                    5b:b0:7f:b0:10:0b:06:2c:69:25:85:7d:a9:35:23:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D2:93:64:FF:10:6A:87:CB:94:60:4E:71:F6:58:80:B2:BB:86:21
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231382e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:64:69:e6:18:3d:b3:3a:c9:1c:02:d9:86:4b:67:70:e2:
         37:ea:c2:c7:b7:d5:4e:f0:de:6f:40:77:f5:3b:58:f8:e8:03:
         03:74:bb:42:b7:c2:da:3d:c2:32:e9:fe:5d:52:bf:1b:10:15:
         eb:0f:80:1a:4a:d6:15:46:f3:dd:dd:62:22:cb:ad:6a:c9:08:
         f5:c2:4c:13:d2:71:a9:2e:c0:a5:7e:e7:e5:93:12:da:4d:94:
         07:1d:69:a2:02:30:b9:35:c3:03:aa:ad:94:7b:32:da:31:0c:
         f8:9f:87:02:ae:3d:9b:1f:0b:13:f9:31:f6:fe:07:9a:a8:cd:
         0e:ec:67:f2:67:c1:6b:a5:97:bd:48:c8:a7:13:20:03:bd:70:
         e9:c3:d3:a3:cb:34:06:ba:bc:9c:95:fa:24:ed:5c:bb:17:ca:
         c2:27:44:7f:b5:09:ad:69:60:bd:dd:ee:8f:99:e6:23:27:96:
         25:85:f5:68:5b:a6:bf:20:55:55:df:6e:48:1b:7f:44:7b:67:
         74:a1:86:09:4d:40:5a:14:46:7b:33:56:cf:a2:ba:96:67:06:
         41:b3:6c:b3:ca:96:93:1b:6f:07:66:34:f0:3d:52:1d:b0:5a:
         f3:94:fb:cb:1a:64:df:47:3b:45:f6:ff:5b:a1:1a:03:55:87:
         f2:2f:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:33:31 2025 by rpki-client