Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3232203d3e2037373737.roa
File:                     3139302e3131322e35322e302f32322d3232203d3e2037373737.roa (raw, json)
Hash identifier:          9JwL1n2lyjnPwV3pxUwVT/FveC8+3SMenGwq0zDkWBo=
Subject key identifier:   7F:8D:64:18:A6:20:D1:5C:FF:64:94:54:6F:D5:85:3C:32:96:7E:56
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       05E4B735AB09C8F5EB121F71E89A0ADD0A40FACC
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3232203d3e2037373737.roa
Signing time:             Mon 17 Mar 2025 15:12:08 +0000
ROA not before:           Mon 17 Mar 2025 15:07:08 +0000
ROA not after:            Mon 16 Mar 2026 15:12:08 +0000
asID:                     7777
IP address blocks:        190.112.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e4:b7:35:ab:09:c8:f5:eb:12:1f:71:e8:9a:0a:dd:0a:40:fa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar 17 15:07:08 2025 GMT
            Not After : Mar 16 15:12:08 2026 GMT
        Subject: CN=7F8D6418A620D15CFF6494546FD5853C32967E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:99:b1:58:06:d8:64:d7:6e:96:3c:50:24:
                    89:73:d1:24:6e:f8:43:79:35:2c:ea:77:66:36:ae:
                    da:8c:d3:3b:b0:f1:d8:65:ac:26:c3:17:36:fe:69:
                    bb:26:f8:85:42:e3:80:59:70:65:db:d4:de:73:98:
                    70:c0:00:c0:d6:8f:0f:a1:ad:21:44:37:d7:4c:5b:
                    52:ed:86:66:85:24:b8:33:54:97:1c:73:8c:f2:ff:
                    b9:35:b0:69:b2:09:98:fd:6d:48:3f:bb:7f:73:1f:
                    4e:f7:8c:c0:bd:2b:a3:2d:8d:95:52:07:bc:b7:31:
                    3b:6a:d2:f7:54:df:13:9e:04:9a:94:9c:c4:18:d0:
                    f9:1b:8a:a8:bb:6b:a4:96:e0:5a:bb:9b:ce:db:6b:
                    91:66:d1:c0:20:e8:b9:9b:66:b5:1c:3b:f0:c5:47:
                    7a:46:b7:87:9c:6c:26:eb:38:dc:0e:78:c7:c7:1a:
                    19:7d:23:b6:c7:ed:19:a9:76:c5:a7:a6:24:b4:84:
                    80:f2:62:32:2f:65:af:2f:3c:c8:c3:2b:c2:03:79:
                    ff:10:66:76:b6:a6:b1:65:5b:27:b0:aa:de:c4:e8:
                    f3:d1:dd:a6:2a:7c:b7:1c:bf:97:3e:e3:0e:40:79:
                    9a:f2:b6:32:52:89:95:1c:fd:e8:c5:c1:cd:77:c6:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:64:18:A6:20:D1:5C:FF:64:94:54:6F:D5:85:3C:32:96:7E:56
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3232203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:e2:3d:0a:c8:12:b6:c3:85:73:6e:cc:1f:f7:e6:99:5c:
         55:e7:1d:74:e6:8a:56:ad:f5:48:c0:36:59:39:42:ea:56:a2:
         d0:e4:eb:65:83:44:7c:dc:77:99:32:36:c2:d9:e1:89:42:81:
         b5:07:1f:a0:13:65:ad:fc:5d:63:9f:13:67:f5:79:07:c9:a7:
         30:69:6e:80:80:4b:85:78:5a:2a:c6:c2:db:82:3b:fe:48:98:
         ed:4b:01:ec:97:73:b5:c5:a5:dd:d8:4c:8c:4a:13:1f:57:6f:
         3f:0b:59:ca:9c:fd:26:d1:65:ab:aa:89:df:f5:e7:17:f8:a7:
         39:2e:ac:23:c0:11:c1:a6:70:ee:7c:f2:b5:d0:7b:58:90:19:
         ae:e1:54:12:db:5f:85:87:71:98:3a:0e:0e:6a:37:61:b4:58:
         c4:25:5d:30:4a:42:ff:81:10:f0:24:65:bd:8d:f6:f1:66:4f:
         d0:25:49:d4:de:55:96:6b:ed:b4:c0:be:ee:aa:eb:a4:ed:c6:
         91:b8:96:f3:ff:4f:35:25:58:8a:95:9a:bb:92:ab:98:cf:b5:
         f9:1c:93:71:d7:84:28:85:e0:64:10:f7:e6:b7:d0:ba:1c:26:
         e7:c8:dd:03:3b:1e:20:ac:cd:ed:7d:d4:2b:40:12:1b:2f:61:
         1b:19:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:06 2025 by rpki-client