Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3139302e322e3231362e302f32312d3234203d3e20323635363336.roa
File:                     3139302e322e3231362e302f32312d3234203d3e20323635363336.roa (raw, json)
Hash identifier:          Kv2YMaQ27sEiz5qTa/2+hRVGZxpFgqcQRkAVDY6m5MA=
Subject key identifier:   70:34:D5:18:B9:3F:5B:45:AB:A6:D9:2C:FE:5B:AC:6A:0A:E7:D4:55
Certificate issuer:       /CN=5F9314810056A2A4DCE4D4071E6CE2CD03A4F642
Certificate serial:       043142BD7E7E3650A25490D00B578C3F6F4AD1A7
Authority key identifier: 5F:93:14:81:00:56:A2:A4:DC:E4:D4:07:1E:6C:E2:CD:03:A4:F6:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3139302e322e3231362e302f32312d3234203d3e20323635363336.roa
Signing time:             Tue 04 Feb 2025 18:31:09 +0000
ROA not before:           Tue 04 Feb 2025 18:26:09 +0000
ROA not after:            Tue 03 Feb 2026 18:31:09 +0000
asID:                     265636
IP address blocks:        190.2.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:31:42:bd:7e:7e:36:50:a2:54:90:d0:0b:57:8c:3f:6f:4a:d1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F9314810056A2A4DCE4D4071E6CE2CD03A4F642
        Validity
            Not Before: Feb  4 18:26:09 2025 GMT
            Not After : Feb  3 18:31:09 2026 GMT
        Subject: CN=7034D518B93F5B45ABA6D92CFE5BAC6A0AE7D455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:84:24:11:a5:c1:2e:dc:64:88:7e:34:dc:
                    b8:10:a6:03:d5:d9:08:cf:66:e8:bb:c2:b6:72:b0:
                    cd:5c:4d:f5:bc:43:40:98:1c:98:5c:99:4b:70:66:
                    3c:87:7d:ba:87:38:39:7c:de:99:d5:80:d7:fc:f8:
                    fc:7f:e9:dd:9b:31:8f:7a:d6:3b:3b:5f:6f:a7:8a:
                    a0:7a:75:c0:33:92:64:5e:0b:b0:e1:3d:d4:37:6a:
                    be:02:de:5f:8f:15:3e:d6:d4:d3:b9:f3:a9:c8:77:
                    eb:ee:df:2d:ca:b2:6a:94:2d:1e:be:9b:6a:29:98:
                    21:a3:0d:1b:c5:60:6d:76:07:10:d7:ad:97:40:38:
                    8f:4b:2c:4d:d8:f9:f8:b6:16:1e:4d:0d:c1:46:ae:
                    84:b0:5e:86:c3:21:bb:92:ad:db:0f:1a:66:19:60:
                    ce:77:04:8d:1b:af:02:df:13:6b:8d:ec:94:36:77:
                    25:62:48:a9:9f:99:7a:21:f9:f7:ed:10:eb:7a:c0:
                    0d:0c:f6:59:07:5a:90:d4:82:34:76:aa:fb:c7:67:
                    51:6f:73:46:a2:57:5c:a8:6b:95:99:65:12:bd:3e:
                    fc:b0:d2:98:89:46:ec:b0:e5:0d:e3:05:19:b6:f5:
                    ef:ea:b4:94:cc:c0:54:f8:10:55:a6:5d:b0:d6:90:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:D5:18:B9:3F:5B:45:AB:A6:D9:2C:FE:5B:AC:6A:0A:E7:D4:55
            X509v3 Authority Key Identifier:
                keyid:5F:93:14:81:00:56:A2:A4:DC:E4:D4:07:1E:6C:E2:CD:03:A4:F6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3139302e322e3231362e302f32312d3234203d3e20323635363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:3c:f0:ab:c3:13:e1:ce:83:5d:6d:70:c2:e1:93:60:7f:63:
         3d:3e:5c:3f:64:1a:dd:9f:74:da:98:98:9d:e8:24:c0:bf:11:
         c6:27:a5:bd:19:96:bd:f9:8e:a0:f3:a9:eb:42:b0:39:e4:a1:
         fe:c0:c9:e5:b6:f8:28:40:69:36:54:72:75:15:47:a9:f3:bb:
         13:0d:f8:5b:60:6c:8a:1a:9a:3d:b6:7d:cf:f3:07:d7:30:87:
         1a:ac:49:1c:ca:30:00:06:55:d5:c2:cf:4e:f7:d8:4a:ff:3d:
         81:9d:33:2c:56:78:dc:c6:5e:63:10:f8:c8:ff:c9:de:df:94:
         5b:72:31:48:c5:c0:0c:67:77:e7:28:94:3c:40:f6:de:4b:df:
         93:a5:f3:3c:8b:af:8a:1a:45:64:b6:23:87:18:5b:79:4c:12:
         7f:5c:e6:8a:9d:8a:a1:42:b1:c0:2b:cf:a4:fa:a3:3b:c4:ab:
         60:07:90:a5:e3:7d:7f:2d:e2:9f:06:17:2a:02:8b:6b:08:39:
         ba:a3:49:72:fa:63:61:d2:6c:ca:18:76:d2:38:74:50:39:ae:
         c3:07:fb:87:9e:b5:0d:2a:64:cc:82:0c:46:4a:8f:1a:65:21:
         6a:dd:ce:13:42:b4:fa:5e:e5:d8:6e:f5:03:07:a9:66:28:1d:
         25:19:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:27:55 2025 by rpki-client