Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139312e39392e302e302f31362d3234203d3e203237373338.roa
File:                     3139312e39392e302e302f31362d3234203d3e203237373338.roa (raw, json)
Hash identifier:          0K4piurxZk7IdD3ktlXDUgHk+Y1/mMxX4EiUDpieIco=
Subject key identifier:   60:8A:F0:B7:F5:79:5D:38:BD:8F:26:71:66:37:6D:56:F5:7A:D9:9D
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       1D1F4FA0AE378F2462E517AF3DD294D5E79633A7
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139312e39392e302e302f31362d3234203d3e203237373338.roa
Signing time:             Tue 04 Feb 2025 18:31:08 +0000
ROA not before:           Tue 04 Feb 2025 18:26:08 +0000
ROA not after:            Tue 03 Feb 2026 18:31:08 +0000
asID:                     27738
IP address blocks:        191.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1f:4f:a0:ae:37:8f:24:62:e5:17:af:3d:d2:94:d5:e7:96:33:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Feb  4 18:26:08 2025 GMT
            Not After : Feb  3 18:31:08 2026 GMT
        Subject: CN=608AF0B7F5795D38BD8F267166376D56F57AD99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:6e:b0:68:bf:28:46:84:84:3a:32:d3:47:
                    64:3f:b8:0e:d4:18:96:93:fb:fe:81:d3:ce:14:f6:
                    83:47:03:33:53:6e:ba:de:e2:cd:1d:69:e9:ab:e3:
                    42:25:f7:fc:4a:b5:5a:bd:85:1c:03:29:d1:33:b8:
                    6d:94:2e:fa:7c:c8:3b:b3:9e:0e:8f:df:55:07:ff:
                    de:fe:1d:7b:e6:9e:b9:43:e4:8b:b0:4c:31:51:eb:
                    8b:dd:30:5e:a5:75:3f:ba:0a:5c:89:58:8c:fb:f8:
                    d7:82:5e:da:10:10:f6:e2:7d:dc:66:7e:41:6c:9b:
                    14:4e:42:df:6f:f0:c2:3b:c2:78:9f:96:85:48:f9:
                    a0:4e:b2:7d:fb:af:ad:5f:d5:db:a1:d3:e1:26:07:
                    57:24:cb:20:50:96:47:80:58:e2:fc:ea:27:05:5a:
                    57:e8:33:c6:aa:34:b1:38:65:ac:82:88:fc:2a:1d:
                    b9:5f:73:9a:bc:64:d7:f6:2c:cc:06:9c:07:0f:84:
                    32:e1:d0:ed:6d:83:e4:4a:ba:08:b4:9c:e7:d1:18:
                    32:8a:c1:3d:35:50:1c:92:14:66:be:e0:29:ae:d5:
                    8e:77:a8:40:7f:6c:6a:3f:79:54:5b:f4:07:c8:2b:
                    1e:4f:8d:06:82:61:1d:01:b7:67:43:2a:d6:47:8d:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8A:F0:B7:F5:79:5D:38:BD:8F:26:71:66:37:6D:56:F5:7A:D9:9D
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139312e39392e302e302f31362d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:76:4d:3a:d4:14:72:75:6e:d9:e1:56:48:cc:9c:f9:ba:
         b5:23:fc:7e:d5:b2:98:c2:17:2a:bb:05:52:a5:cd:74:67:b0:
         e1:f1:49:e7:63:93:8d:95:a0:5e:83:b3:1b:89:42:88:8b:06:
         ca:24:6d:48:8c:3b:96:f9:75:18:d0:67:83:ec:5a:c3:a6:f4:
         49:69:b7:66:00:e4:c1:df:46:c1:62:12:8f:d4:32:aa:27:83:
         a3:d3:87:c0:fe:1a:14:00:48:12:81:e5:c9:bf:18:11:42:6f:
         1a:89:b9:9c:24:e2:2f:a9:1e:a3:ac:5b:db:86:7d:51:b8:5a:
         84:e3:2e:aa:41:a3:87:73:12:4d:4c:54:47:24:8a:6a:c6:ae:
         0a:79:ed:2f:d9:eb:4f:8a:a5:5e:29:c4:4a:be:fc:87:c5:f4:
         55:52:3d:2d:a5:45:8e:b3:50:08:01:33:bc:1f:fd:b8:5b:18:
         fa:df:aa:38:9c:6d:37:4d:1a:ab:35:4a:cc:68:cc:57:b2:bf:
         38:cf:ca:01:9d:c3:76:af:6f:ef:0b:7f:39:da:cd:15:d3:a1:
         90:a3:28:85:79:89:75:49:5c:a0:f9:56:9b:d2:f5:95:1c:79:
         2a:d6:de:bd:79:42:12:1a:76:7f:23:6f:03:43:5e:6c:f0:63:
         76:db:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client