Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3132332e33322e302f32312d3234203d3e203232373234.roa
File:                     3139302e3132332e33322e302f32312d3234203d3e203232373234.roa (raw, json)
Hash identifier:          dOm4u3yx3zQ/+28c8HNarqrvdSGqWV66eBfKOQqy7YM=
Subject key identifier:   80:74:B3:FF:99:77:FD:A8:5A:43:A0:03:BB:0C:B9:66:AA:77:29:91
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       5BC35B2D62C38412B401A6D0C55C8D9599FE9098
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3132332e33322e302f32312d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:35 +0000
ROA not before:           Tue 04 Feb 2025 20:02:35 +0000
ROA not after:            Tue 03 Feb 2026 20:07:35 +0000
asID:                     22724
IP address blocks:        190.123.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c3:5b:2d:62:c3:84:12:b4:01:a6:d0:c5:5c:8d:95:99:fe:90:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:35 2025 GMT
            Not After : Feb  3 20:07:35 2026 GMT
        Subject: CN=8074B3FF9977FDA85A43A003BB0CB966AA772991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:8e:b6:ec:94:e8:f8:69:28:00:d9:47:9e:
                    f2:f9:82:d7:01:e7:33:f7:35:8c:f1:d9:c5:e4:77:
                    9e:19:9f:f6:b7:ce:b2:d3:5f:dc:b8:08:8a:bc:ca:
                    69:32:c4:09:aa:cc:50:e1:c6:d0:28:3f:38:4a:00:
                    be:15:51:d0:b8:bd:dd:60:8e:87:c2:55:ed:d5:9b:
                    d1:07:e6:cf:d2:77:e4:b3:c6:42:36:9a:2b:cb:d5:
                    54:89:73:95:ca:0f:4e:e8:f6:ef:c3:7a:c0:5f:0e:
                    8e:75:15:21:b7:74:2f:46:45:5d:6c:89:84:96:b2:
                    9e:c3:3a:10:eb:2b:8b:79:cb:e9:0b:27:d0:8b:8f:
                    fb:70:f1:22:76:ec:86:83:1e:5f:4a:3a:08:a6:22:
                    19:f3:12:ed:ed:32:de:64:33:56:73:3c:80:dc:17:
                    b7:dd:6d:9d:59:e0:5f:de:2e:6d:6e:f4:92:fd:c6:
                    13:90:d4:36:74:c8:a4:f2:9b:2b:cf:c8:a5:b3:c9:
                    04:06:9c:56:32:13:6a:c8:72:57:74:2f:ae:cf:10:
                    d4:58:3c:8f:71:47:37:ce:55:77:86:8b:f3:b3:74:
                    54:d5:86:17:7f:60:7f:bd:d6:d4:c8:1f:58:86:ca:
                    27:43:ad:76:11:ae:f5:b6:ca:ff:39:8b:02:d2:d0:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:B3:FF:99:77:FD:A8:5A:43:A0:03:BB:0C:B9:66:AA:77:29:91
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3132332e33322e302f32312d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:fa:c4:68:f4:c9:94:09:45:0e:36:f1:1c:86:b7:3b:f9:f8:
         f1:22:22:f9:47:46:03:0e:2a:15:7f:45:ff:ca:d5:09:cd:39:
         a7:1f:62:65:f3:7c:1f:37:99:07:54:8d:cd:95:cb:03:83:56:
         1b:9f:b4:53:9d:50:16:41:0d:1a:a0:41:8c:6e:cd:32:6c:d3:
         66:c3:a8:05:ce:d9:24:37:57:db:8c:94:cc:b6:96:26:c9:73:
         7e:e5:62:d1:eb:b5:d3:d9:34:f4:c1:91:7b:92:41:4a:a8:35:
         ad:cb:06:38:6d:9c:ec:02:88:2e:f0:31:e1:c8:bd:ec:cb:ac:
         87:34:69:c3:c1:93:8b:6e:2a:a5:42:02:ef:a5:67:4f:3a:ea:
         5f:67:c9:f4:71:c7:8e:7e:26:ae:d2:55:dc:9c:d5:77:b3:3f:
         aa:24:53:1a:a5:a3:e7:ba:51:4d:2d:2f:74:4a:90:cf:33:d6:
         6a:cc:9a:fc:ee:34:f6:22:4c:03:d4:68:03:16:99:c3:88:3b:
         4d:e3:62:c7:05:3f:6b:1c:33:e0:a6:87:8d:b5:61:72:fd:b2:
         39:41:86:9e:30:7c:e3:d2:92:f2:64:b5:7a:23:e5:92:1d:dd:
         8b:dd:24:28:4f:bc:d6:57:a7:44:a3:1c:26:80:dd:c0:80:89:
         7f:59:f0:2a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUW8NbLWLDhBK0AabQxVyNlZn+kJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNTAyMDQyMDAyMzVaFw0yNjAyMDMyMDA3MzVaMDMxMTAvBgNV
BAMTKDgwNzRCM0ZGOTk3N0ZEQTg1QTQzQTAwM0JCMENCOTY2QUE3NzI5OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiI627JTo+GkoANlHnvL5gtcB
5zP3NYzx2cXkd54Zn/a3zrLTX9y4CIq8ymkyxAmqzFDhxtAoPzhKAL4VUdC4vd1g
jofCVe3Vm9EH5s/Sd+SzxkI2mivL1VSJc5XKD07o9u/DesBfDo51FSG3dC9GRV1s
iYSWsp7DOhDrK4t5y+kLJ9CLj/tw8SJ27IaDHl9KOgimIhnzEu3tMt5kM1ZzPIDc
F7fdbZ1Z4F/eLm1u9JL9xhOQ1DZ0yKTymyvPyKWzyQQGnFYyE2rIcld0L67PENRY
PI9xRzfOVXeGi/OzdFTVhhd/YH+91tTIH1iGyidDrXYRrvW2yv85iwLS0KUDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgHSz/5l3/ahaQ6ADuwy5Zqp3KZEwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMxMzkzMDJlMzEzMjMzMmUzMzMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMjM3MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA757IDAN
BgkqhkiG9w0BAQsFAAOCAQEAu/rEaPTJlAlFDjbxHIa3O/n48SIi+UdGAw4qFX9F
/8rVCc05px9iZfN8HzeZB1SNzZXLA4NWG5+0U51QFkENGqBBjG7NMmzTZsOoBc7Z
JDdX24yUzLaWJslzfuVi0eu109k09MGRe5JBSqg1rcsGOG2c7AKILvAx4ci97Mus
hzRpw8GTi24qpUIC76VnTzrqX2fJ9HHHjn4mrtJV3JzVd7M/qiRTGqWj57pRTS0v
dEqQzzPWasya/O409iJMA9RoAxaZw4g7TeNixwU/axwz4KaHjbVhcv2yOUGGnjB8
49KS8mS1eiPlkh3di90kKE+81lenRKMcJoDdwICJf1nwKg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:43:49 2025 by rpki-client