Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e3131352e3232342e302f31392d3234203d3e203237363530.roa
File:                     3139302e3131352e3232342e302f31392d3234203d3e203237363530.roa (raw, json)
Hash identifier:          z+zyNr9MlesHNRrF2Prwj7UfktLxuk97f8VjBUiOqRI=
Subject key identifier:   0D:04:35:9E:92:52:9B:29:A2:BC:2C:FD:CF:09:94:7D:33:6C:6A:07
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       576014E2F6C2B460CD1E8356EC77955E28CD92C8
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e3131352e3232342e302f31392d3234203d3e203237363530.roa
Signing time:             Tue 04 Feb 2025 18:50:37 +0000
ROA not before:           Tue 04 Feb 2025 18:45:37 +0000
ROA not after:            Tue 03 Feb 2026 18:50:37 +0000
asID:                     27650
IP address blocks:        190.115.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:14:e2:f6:c2:b4:60:cd:1e:83:56:ec:77:95:5e:28:cd:92:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Feb  4 18:45:37 2025 GMT
            Not After : Feb  3 18:50:37 2026 GMT
        Subject: CN=0D04359E92529B29A2BC2CFDCF09947D336C6A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fd:15:06:ab:9c:a2:56:dd:d9:07:c0:c3:e1:
                    42:35:47:00:94:b0:8e:6d:3b:7f:d6:c9:69:9d:7d:
                    60:ef:71:45:3a:2f:81:42:e0:0b:68:87:30:af:a6:
                    2c:82:07:41:2b:60:cb:55:06:7a:e1:d1:87:07:69:
                    56:5a:a1:b2:c4:95:2b:cf:16:4b:2d:e2:46:38:1c:
                    10:2a:b8:2d:3a:8a:56:5f:86:9c:3d:27:7a:21:c8:
                    5f:d0:12:09:1d:bc:64:e8:35:30:f8:6c:a6:d6:a8:
                    8b:55:6a:47:e9:5e:b1:f6:97:b2:cc:7f:b6:01:9d:
                    96:7f:43:a0:ec:55:00:c3:61:04:31:ba:f5:a7:95:
                    d8:29:78:d1:a4:21:d0:ee:fc:b9:ee:15:81:ed:07:
                    d6:b0:83:77:21:a4:f4:1d:5e:1f:28:03:58:84:e5:
                    54:c8:e8:44:9c:a1:15:73:5a:df:f3:7c:96:5a:c2:
                    fa:d2:84:00:17:80:03:f9:37:5a:e4:30:b6:2c:c2:
                    1e:68:68:88:2a:50:c0:5f:82:fa:b8:79:1b:74:83:
                    7e:af:da:db:4b:2c:ff:d9:a6:14:81:f6:60:e8:9c:
                    54:12:9f:f9:30:9a:a3:16:b1:0f:5a:f1:33:e3:19:
                    83:28:9f:ef:82:39:8c:10:71:1a:60:eb:d5:35:04:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:04:35:9E:92:52:9B:29:A2:BC:2C:FD:CF:09:94:7D:33:6C:6A:07
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e3131352e3232342e302f31392d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:17:36:6d:5b:b4:c3:1b:61:47:83:17:d9:98:83:31:87:
         75:ac:cc:a6:51:4b:05:d2:21:37:db:9f:01:59:59:bb:4c:5e:
         b4:ae:94:98:0d:83:ac:44:04:4b:21:b9:26:87:c6:d2:12:0a:
         0c:d7:51:1d:04:b3:af:f7:84:72:ef:d4:af:e6:13:84:17:7c:
         27:08:fb:37:8d:6f:6e:69:27:18:72:5a:a8:f1:71:c1:e7:a9:
         cc:78:39:4f:0d:e1:15:af:f2:89:53:fb:28:0a:cd:5e:e0:56:
         30:ba:26:dc:61:fe:e1:0a:0b:c9:e8:30:00:50:64:fb:ac:c8:
         a6:af:3d:45:90:2c:dc:78:da:d2:aa:5a:99:f4:ca:03:9d:ba:
         d5:03:df:46:3d:b8:14:0f:37:0d:da:29:ad:13:7d:d4:0c:52:
         07:50:18:0a:48:80:19:67:e1:76:7d:2e:38:9f:73:15:5d:4e:
         b4:5b:69:32:1f:00:6b:38:e4:06:7b:83:1e:13:0b:51:94:97:
         ed:ea:15:06:3b:73:6c:90:d9:59:07:a3:dd:a9:62:d3:6a:6c:
         86:29:0f:7f:1e:7d:19:4f:a8:29:b8:46:a6:7f:dc:7c:67:07:
         27:79:ee:fc:32:fe:41:0d:af:3e:a5:f8:fa:cc:5d:d2:2c:40:
         d4:57:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:06 2025 by rpki-client