Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/3139302e39332e3138382e302f32322d3234203d3e20323639393038.roa
File:                     3139302e39332e3138382e302f32322d3234203d3e20323639393038.roa (raw, json)
Hash identifier:          nug+O8WDPWmEvAIUks1xgzsY7rmjgb5sw4WBf6r0UA0=
Subject key identifier:   6D:6B:40:5C:93:F9:B9:49:E1:AA:3E:A1:F8:80:45:F1:75:50:31:1B
Certificate issuer:       /CN=935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB
Certificate serial:       4CE645BBD23D5E069393C7767F7CD04B363D4942
Authority key identifier: 93:5D:76:45:69:E6:9F:AF:7E:A9:F7:B7:26:A5:B9:FB:1E:E4:4E:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/3139302e39332e3138382e302f32322d3234203d3e20323639393038.roa
Signing time:             Tue 04 Feb 2025 18:32:28 +0000
ROA not before:           Tue 04 Feb 2025 18:27:28 +0000
ROA not after:            Tue 03 Feb 2026 18:32:28 +0000
asID:                     269908
IP address blocks:        190.93.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e6:45:bb:d2:3d:5e:06:93:93:c7:76:7f:7c:d0:4b:36:3d:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB
        Validity
            Not Before: Feb  4 18:27:28 2025 GMT
            Not After : Feb  3 18:32:28 2026 GMT
        Subject: CN=6D6B405C93F9B949E1AA3EA1F88045F17550311B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:52:79:cb:3d:d3:3f:bb:56:42:5d:47:b7:
                    91:ff:3a:61:96:de:68:16:0a:a4:26:0a:06:68:02:
                    38:a8:76:d3:16:9d:5c:13:3e:e7:3e:71:11:44:50:
                    1f:36:65:31:55:1a:19:89:58:aa:de:fe:10:11:30:
                    b1:3a:76:cb:72:d1:d3:ec:46:71:10:84:27:dd:d0:
                    ff:7b:67:47:e1:a6:25:93:d7:4a:f6:9f:bb:c3:4f:
                    d2:e9:b8:e4:ef:36:a9:9d:5a:8d:01:56:a4:25:fb:
                    a2:30:17:fd:2e:19:45:bc:fd:57:67:0e:2b:51:6f:
                    69:56:65:d3:04:bc:31:e5:9d:94:42:0e:5b:c4:20:
                    0f:26:a1:41:e2:d5:c8:a4:7d:05:47:95:a1:10:d9:
                    73:0a:ac:a3:4e:e5:fd:92:9e:fa:24:20:07:5f:1f:
                    ab:48:d0:36:7b:3a:40:c7:c0:23:99:58:85:1d:f6:
                    3e:26:70:5b:34:67:78:f5:22:94:63:f6:9a:35:8f:
                    de:ce:0a:da:25:db:9f:d5:f8:87:ea:b2:5a:52:21:
                    0f:b6:86:85:4f:f7:a7:f1:bb:4d:a5:f4:6a:76:ca:
                    5c:de:1f:e4:dd:59:a1:ca:8d:45:f0:ea:a6:eb:10:
                    74:96:e0:27:be:e7:d6:f0:4a:d2:80:47:0f:69:2d:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:40:5C:93:F9:B9:49:E1:AA:3E:A1:F8:80:45:F1:75:50:31:1B
            X509v3 Authority Key Identifier:
                keyid:93:5D:76:45:69:E6:9F:AF:7E:A9:F7:B7:26:A5:B9:FB:1E:E4:4E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/3139302e39332e3138382e302f32322d3234203d3e20323639393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:24:c4:8f:6b:0d:26:32:01:9a:f9:1f:60:7d:3d:23:01:f8:
         68:f2:c3:0d:8a:bc:0d:b0:37:f4:78:ea:6a:4c:90:67:14:84:
         9b:cf:bd:3f:82:cb:6a:96:7d:1a:38:b0:e1:65:dd:c1:0a:3e:
         cc:0b:d1:34:62:11:8b:6b:7f:e5:81:96:33:ce:91:d3:82:f8:
         b9:0e:09:30:87:60:e9:02:54:7c:bd:41:a8:72:79:9a:b7:0f:
         36:9c:60:0d:9e:86:2f:9b:8a:08:b5:a8:68:e8:c6:05:b2:bf:
         8a:3d:14:ea:dd:ea:81:66:29:c0:44:5c:c9:3c:50:2d:56:b2:
         c4:50:a1:a2:27:91:f7:4f:ec:7a:72:d6:20:c8:50:be:a9:c4:
         be:33:c0:07:c0:f3:7b:6d:7d:ec:5f:35:f7:d6:18:dd:2f:0d:
         9e:4a:21:98:bf:7c:90:d3:85:ab:66:3a:21:4b:c5:ea:50:6c:
         8e:20:3b:c9:70:bb:e9:1b:6f:67:a0:56:5a:da:68:b3:9b:84:
         92:1b:db:7d:6a:43:b8:93:9f:c1:38:6b:41:e8:7c:8f:42:9c:
         d5:41:01:56:ad:64:73:57:06:d4:26:d2:a0:cd:a3:2f:e8:4b:
         78:7b:d9:bf:cb:23:8b:fa:b5:b6:3e:40:de:7e:fd:3a:0b:f4:
         50:d2:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:17 2025 by rpki-client