Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32322d3234203d3e203532323533.roa
File:                     3139302e3130382e3230302e302f32322d3234203d3e203532323533.roa (raw, json)
Hash identifier:          M46gsRv5e29MtoLGjX6XcGEO/piGbTZ70waRqur0Als=
Subject key identifier:   BC:1D:8C:05:F9:84:75:08:1F:78:CA:F8:CE:3E:68:51:53:AF:01:95
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       478629AB1A884D9F2ABE85AE74DAF097B96316AA
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32322d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:43 +0000
ROA not before:           Tue 04 Feb 2025 18:23:43 +0000
ROA not after:            Tue 03 Feb 2026 18:28:43 +0000
asID:                     52253
IP address blocks:        190.108.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:86:29:ab:1a:88:4d:9f:2a:be:85:ae:74:da:f0:97:b9:63:16:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:43 2025 GMT
            Not After : Feb  3 18:28:43 2026 GMT
        Subject: CN=BC1D8C05F98475081F78CAF8CE3E685153AF0195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:4d:55:ef:62:af:a0:d2:ea:ca:de:d6:09:
                    9a:cc:95:ad:fb:95:4b:b5:5f:11:d6:31:bf:c8:1c:
                    98:9a:66:9f:e3:09:48:f7:1a:62:e9:20:92:13:14:
                    cd:c5:11:26:9c:6d:08:44:22:2d:b9:2b:65:3b:63:
                    73:2f:71:22:96:86:75:77:c0:75:60:49:ab:44:88:
                    66:1c:40:de:85:64:17:f0:0c:93:78:26:c6:dc:87:
                    94:60:75:fb:a0:cb:7b:0d:de:a9:2e:4f:d8:79:0f:
                    fa:eb:c7:56:a6:4e:6c:38:82:fa:49:41:04:08:6a:
                    ee:bc:67:77:12:bf:62:83:c8:b0:6d:b1:a0:aa:87:
                    28:b6:aa:c5:42:7e:83:6d:2f:ab:f3:65:99:be:c2:
                    b1:6d:ca:5a:08:2b:29:04:b7:fb:a9:14:87:88:4d:
                    c8:76:ba:44:48:b9:bf:e5:91:72:a4:ad:66:cc:fd:
                    f5:92:64:58:2c:55:28:3b:3b:62:07:7d:89:99:e5:
                    f9:5e:d1:4d:e0:bb:51:ad:9e:0d:94:33:40:ca:0b:
                    e7:fe:ea:28:45:5a:25:3b:aa:0a:47:2a:41:96:ba:
                    07:ad:e0:80:df:f0:ac:6d:4b:4e:4d:c1:46:6b:0b:
                    4e:66:85:47:cf:69:1f:b2:65:1b:ff:47:51:2d:41:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:8C:05:F9:84:75:08:1F:78:CA:F8:CE:3E:68:51:53:AF:01:95
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32322d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:13:ff:83:19:0b:d8:eb:41:eb:1d:9e:88:5e:e2:fa:8a:46:
         e9:73:16:49:24:5d:dc:70:55:dc:a2:36:44:96:77:79:fd:2a:
         b6:a0:99:1d:7f:de:54:2d:ae:16:df:ab:48:a6:68:2a:dd:93:
         c8:ad:10:bf:2c:bb:ab:1b:6c:51:0f:60:a0:7c:64:3b:db:95:
         23:3c:81:ad:6f:ec:2d:ff:cd:fa:ac:e4:e5:e1:99:b0:34:72:
         1d:86:60:97:a3:b7:5d:48:95:b3:07:b1:ee:e5:d2:13:5a:b8:
         aa:7e:0b:af:9a:60:35:52:ff:ab:02:d8:e3:2b:c0:59:51:3b:
         b2:98:c8:f7:e4:3b:12:7b:e6:2f:93:8f:7d:a3:e7:42:eb:8f:
         20:e2:2f:c1:ad:ee:1b:ea:9c:d5:1f:42:0e:2d:b7:a4:89:10:
         72:86:b4:af:25:de:a7:3d:d7:7a:b9:6f:26:de:4a:42:6d:65:
         d8:67:73:f5:ee:3f:6c:9a:e2:77:97:4d:f5:fa:41:64:9b:fb:
         76:94:33:23:4b:a2:69:ed:db:06:31:f1:4d:df:34:c2:cd:bc:
         7d:14:22:ca:f9:a6:0b:9a:91:12:69:c3:eb:d0:e1:80:b3:21:
         3f:e6:a6:d1:2a:2b:1a:4a:81:0e:a5:2b:b8:c6:27:cc:fb:b4:
         53:fd:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:33 2025 by rpki-client