Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132352e302f32342d3234203d3e20323731383839.roa
File:                     3139302e392e3132352e302f32342d3234203d3e20323731383839.roa (raw, json)
Hash identifier:          sA+nZip+h9+H1tkkrWv955klFpifXRwu7G0FqChwods=
Subject key identifier:   1B:30:EE:5A:01:0D:56:70:23:53:87:00:DC:D7:66:92:06:C1:76:01
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       4D4D5A6DA79209C94B8E72E1986B3BD6473366A0
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132352e302f32342d3234203d3e20323731383839.roa
Signing time:             Wed 23 Jul 2025 03:50:00 +0000
ROA not before:           Wed 23 Jul 2025 03:45:00 +0000
ROA not after:            Wed 22 Jul 2026 03:50:00 +0000
asID:                     271889
IP address blocks:        190.9.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4d:5a:6d:a7:92:09:c9:4b:8e:72:e1:98:6b:3b:d6:47:33:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Jul 23 03:45:00 2025 GMT
            Not After : Jul 22 03:50:00 2026 GMT
        Subject: CN=1B30EE5A010D567023538700DCD7669206C17601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:1a:06:cc:68:fc:18:91:2d:25:db:0e:14:
                    03:02:40:37:81:47:ef:ba:6b:3c:d1:07:7e:2e:df:
                    3f:e7:bf:56:3e:64:8f:d1:a3:c7:46:82:52:60:5a:
                    24:63:94:31:98:2b:a5:b2:33:c9:0e:29:95:3a:0a:
                    bb:7b:48:fe:bc:40:05:88:3e:5b:e2:7c:2d:87:93:
                    f4:89:0e:b9:67:34:e5:3f:02:fc:67:c3:00:78:45:
                    de:a7:a8:fd:19:d4:9e:dd:89:d1:e8:4f:0b:33:01:
                    d3:91:9e:a1:1e:f2:d2:4f:3a:19:2c:94:d3:d3:95:
                    7d:89:b8:4a:6d:d6:30:32:6e:b0:7c:1c:56:d9:61:
                    19:ee:29:9c:dd:02:10:00:d8:4b:0f:4c:c5:a8:fd:
                    75:ec:7b:e6:cd:3b:7c:1a:e7:3e:44:46:43:52:9a:
                    b4:1a:68:e3:85:d1:e8:91:cd:69:d9:9e:f0:3a:24:
                    b4:6d:b1:e8:bd:b5:90:c3:0d:57:77:44:79:97:75:
                    62:5a:f0:a6:d4:d3:15:b9:7e:dc:52:ac:c2:0b:2d:
                    53:bb:46:21:5d:b4:e2:b6:f1:57:7c:ef:12:44:d8:
                    c9:0e:f0:ec:da:74:7b:48:f7:26:11:9d:56:4f:23:
                    54:39:e1:17:eb:a3:5e:a2:30:97:b3:70:c7:a3:81:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:30:EE:5A:01:0D:56:70:23:53:87:00:DC:D7:66:92:06:C1:76:01
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132352e302f32342d3234203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:15:83:75:a6:57:04:14:53:3e:a5:86:87:06:e6:cc:fd:06:
         9b:55:a6:c0:59:66:21:20:89:71:a5:da:3c:49:cf:1e:3c:5a:
         e2:5a:2f:45:92:3d:42:78:c0:f3:fa:95:6c:27:2d:59:c2:63:
         a0:53:51:7a:e7:44:42:b2:07:a5:32:5e:fc:d0:d3:0b:e2:2b:
         90:58:d6:8e:a3:98:08:89:ce:0d:e0:22:5d:13:49:83:d3:79:
         eb:2b:5f:ca:99:aa:de:d9:3c:c4:b3:32:3a:85:98:eb:28:61:
         52:e4:27:44:8a:ff:15:88:b1:43:c9:7d:f5:30:ac:32:81:db:
         46:6d:62:9b:e5:60:4a:df:61:5e:33:2a:f7:a1:db:5d:91:13:
         a2:72:15:f4:4f:55:26:98:5c:5b:d5:0c:43:ea:b0:96:64:fa:
         80:56:9d:bf:24:f4:ad:64:be:40:1f:3c:68:ca:33:91:46:5d:
         b7:21:3b:51:1e:5c:0c:ba:8b:f4:0f:91:69:35:7d:64:50:c8:
         ca:7e:5e:ae:27:ef:ef:37:04:f1:2c:14:b6:5a:38:2e:f8:aa:
         88:ca:9d:7f:0b:6e:78:60:92:3e:b8:38:ce:8c:6f:4c:97:97:
         25:56:81:b6:9f:11:a5:f8:b2:15:70:f8:35:02:9d:82:3e:a1:
         13:04:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:36:01 2025 by rpki-client