Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e302e302f31372d3234203d3e203237373338.roa
File:                     3139302e3133312e302e302f31372d3234203d3e203237373338.roa (raw, json)
Hash identifier:          tAqpJN/A8BAruY4rmZl/Hv5Rn1sFdVhEeRft0pl7kio=
Subject key identifier:   1C:66:CE:EB:24:57:AD:42:29:57:08:CD:32:B8:7D:AE:7D:71:57:A1
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       3043987ADA9E1F76FFED341D8861CA4305FFD179
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e302e302f31372d3234203d3e203237373338.roa
Signing time:             Tue 04 Feb 2025 18:31:07 +0000
ROA not before:           Tue 04 Feb 2025 18:26:07 +0000
ROA not after:            Tue 03 Feb 2026 18:31:07 +0000
asID:                     27738
IP address blocks:        190.131.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:43:98:7a:da:9e:1f:76:ff:ed:34:1d:88:61:ca:43:05:ff:d1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Feb  4 18:26:07 2025 GMT
            Not After : Feb  3 18:31:07 2026 GMT
        Subject: CN=1C66CEEB2457AD42295708CD32B87DAE7D7157A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:a5:67:8d:65:4b:50:b5:3c:20:d9:c4:ec:
                    d1:8b:4b:a4:cf:cc:c8:3c:f7:3e:d9:21:07:38:bb:
                    5c:f6:98:43:4d:de:1a:bd:6e:40:58:50:83:ae:ca:
                    0a:8f:c7:05:c4:d0:69:0b:ed:08:33:1e:2f:65:6b:
                    53:1a:83:bf:76:80:fb:59:71:2c:53:1e:55:92:de:
                    3f:9e:42:90:d3:a6:80:b5:fa:45:d7:1f:59:43:01:
                    68:3a:85:53:bd:11:45:75:b2:14:4e:2b:5e:76:4d:
                    a1:c6:e7:e5:6d:41:a2:cd:58:96:12:40:ef:b9:e8:
                    09:88:d7:d5:39:ed:d4:b6:d1:4f:52:d6:dc:da:7f:
                    70:79:58:6b:2c:c9:5e:ff:82:c4:15:a1:e2:c0:3b:
                    fe:39:98:e9:17:35:1b:83:f2:73:c4:32:bb:1e:95:
                    be:97:a7:1f:2a:ef:c1:97:2d:4b:4f:6d:8b:00:4e:
                    ee:41:13:c6:8a:21:09:d0:f8:96:94:40:c7:98:e9:
                    fe:0c:63:f1:71:b4:cf:1e:d5:dc:fd:e6:a9:10:9a:
                    20:5d:e0:ff:a1:ee:71:47:15:2f:4e:db:f4:c9:2d:
                    78:48:b0:7f:1b:bb:94:3c:78:0a:83:b3:47:71:4c:
                    8f:48:00:68:80:8b:fe:b9:34:8d:b1:e3:65:73:a0:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:66:CE:EB:24:57:AD:42:29:57:08:CD:32:B8:7D:AE:7D:71:57:A1
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e302e302f31372d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:29:29:14:06:d7:6b:8e:a2:17:45:e5:a1:7c:e6:d2:c9:5b:
         a3:94:ec:f8:9e:2f:fa:95:13:a4:e7:3c:53:25:07:47:4b:40:
         5e:93:b7:d4:97:e8:61:9f:29:cc:03:ad:73:8a:6a:67:f4:87:
         10:5f:53:5b:b4:72:03:24:e6:8a:51:32:35:45:80:52:cf:d2:
         c4:85:db:76:bc:ac:ee:49:33:78:06:a6:97:31:c3:a5:4b:07:
         56:70:04:78:b4:de:43:2b:9f:7f:41:6e:60:80:52:dc:34:b8:
         f2:3b:ca:56:3c:dd:ee:f2:4e:de:81:8b:86:58:d8:3d:22:19:
         62:42:0e:8d:f4:be:35:06:20:19:4d:04:81:c3:28:13:aa:60:
         5f:32:25:65:3a:74:f2:bd:ed:63:7d:f6:3a:81:7d:c1:28:d1:
         40:f2:d1:b8:e6:d4:9e:ad:c8:9a:d8:64:d7:0b:f0:66:8c:29:
         40:a7:1b:bc:0a:1c:2d:1d:0b:a1:02:ce:03:e6:6f:cc:cc:72:
         6d:74:fc:40:7a:ca:d3:29:87:35:7d:dd:2b:54:2e:de:e7:a9:
         49:07:49:ba:82:58:9c:b8:cc:eb:b3:36:ff:de:cc:f1:78:8b:
         ec:48:2b:f4:0a:53:7e:98:39:5f:11:41:4f:f9:20:4e:fe:d3:
         02:66:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:19 2025 by rpki-client