Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136382e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136382e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          qcowgkClBTN0OWB+wrJG3vwJaA6sdZJGib+LKFx8fII=
Subject key identifier:   E4:9A:15:40:14:6F:0E:49:D8:63:4B:45:37:2D:94:1C:8B:30:D9:CD
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       07F061D00D0EAC9B96C8426A12435825A142723F
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136382e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:41 +0000
ROA not before:           Tue 04 Feb 2025 17:55:41 +0000
ROA not after:            Tue 03 Feb 2026 18:00:41 +0000
asID:                     262171
IP address blocks:        190.93.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:61:d0:0d:0e:ac:9b:96:c8:42:6a:12:43:58:25:a1:42:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:41 2025 GMT
            Not After : Feb  3 18:00:41 2026 GMT
        Subject: CN=E49A1540146F0E49D8634B45372D941C8B30D9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:e7:d5:db:5b:d2:04:a5:2b:ee:44:50:18:
                    6c:96:38:4c:77:34:0f:34:78:74:ec:95:42:38:ef:
                    f8:ae:19:70:b3:f7:aa:76:12:c9:cb:5d:e9:2c:28:
                    0e:13:cb:69:75:60:0c:8e:89:f8:dd:04:04:1f:4a:
                    aa:6c:e3:34:fa:79:8d:5b:36:f9:34:65:52:3e:41:
                    10:44:7e:4a:42:34:81:26:6a:19:ab:65:f4:94:17:
                    6d:f0:d1:a7:b6:d7:d3:0d:a3:17:83:ea:c4:50:bd:
                    8f:ac:63:0c:e6:6a:d2:ea:0d:93:bf:05:fd:6a:32:
                    61:8f:7f:ee:b8:95:6b:08:17:dc:2c:99:de:73:07:
                    af:0d:97:cb:d1:4f:2f:96:9b:46:00:39:49:5c:25:
                    d7:da:e1:76:42:2c:fa:e8:5e:c1:6b:57:b0:4f:50:
                    eb:75:5a:b6:36:18:36:8c:7b:25:93:7a:4e:8c:25:
                    ac:a4:83:1a:81:52:dd:94:cd:c6:ce:0d:15:ae:57:
                    2e:fc:dd:65:25:89:90:13:6a:ab:1d:63:3e:3b:33:
                    12:cf:3f:f6:be:21:af:9c:04:32:c7:99:f2:21:03:
                    bf:5c:1a:24:f1:2f:08:58:50:a5:c5:e0:46:29:34:
                    d6:0e:ec:d9:d1:68:e3:af:9b:c9:74:74:38:ae:2e:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9A:15:40:14:6F:0E:49:D8:63:4B:45:37:2D:94:1C:8B:30:D9:CD
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136382e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:28:01:83:e1:7c:06:2d:bd:22:24:99:11:9c:27:77:0e:
         5d:48:a8:84:54:52:11:3d:49:d8:be:39:f3:e7:de:70:e0:74:
         fc:aa:4c:7d:12:ac:98:42:6d:d1:67:e3:36:58:9c:d5:24:72:
         3b:e4:1a:05:ec:f3:d0:b6:4b:44:a9:40:20:36:68:a7:ba:5c:
         05:8e:15:d0:2c:95:60:b7:8d:8f:e0:8b:33:86:92:b7:93:c3:
         33:23:1d:90:36:96:55:5a:fa:fc:05:d2:e8:50:08:d2:fc:5b:
         4a:86:92:79:d5:e0:6b:f7:49:87:58:1d:19:87:f9:21:9d:08:
         db:00:ad:16:ef:19:46:bc:57:94:22:9e:21:18:f9:1c:16:03:
         05:ab:f4:d3:7f:b3:c5:4b:23:35:c6:eb:d0:ee:41:9c:12:c4:
         36:38:ff:1a:37:41:6e:c5:1b:04:48:91:73:98:63:86:be:6d:
         00:53:75:83:95:77:1e:65:c6:a0:45:39:63:0c:2b:0f:b6:93:
         1a:4d:e2:33:bb:f0:b3:24:82:90:90:c5:d4:4d:6d:8f:95:f2:
         bc:40:61:ad:d4:e9:a6:1f:35:10:a5:a6:2d:80:09:f5:12:f0:
         19:3f:92:fe:b8:cf:1a:41:87:e7:0c:f6:a6:68:8f:23:e9:4c:
         32:8f:60:7b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB/Bh0A0OrJuWyEJqEkNYJaFCcj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ4QTdDQzVGRkQ4RDE2NThBOTEwODJGNjM5Njg4RDY4
REE5Mzg5OTAeFw0yNTAyMDQxNzU1NDFaFw0yNjAyMDMxODAwNDFaMDMxMTAvBgNV
BAMTKEU0OUExNTQwMTQ2RjBFNDlEODYzNEI0NTM3MkQ5NDFDOEIzMEQ5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0efV21vSBKUr7kRQGGyWOEx3
NA80eHTslUI47/iuGXCz96p2EsnLXeksKA4Ty2l1YAyOifjdBAQfSqps4zT6eY1b
Nvk0ZVI+QRBEfkpCNIEmahmrZfSUF23w0ae219MNoxeD6sRQvY+sYwzmatLqDZO/
Bf1qMmGPf+64lWsIF9wsmd5zB68Nl8vRTy+Wm0YAOUlcJdfa4XZCLProXsFrV7BP
UOt1WrY2GDaMeyWTek6MJaykgxqBUt2UzcbODRWuVy783WUliZATaqsdYz47MxLP
P/a+Ia+cBDLHmfIhA79cGiTxLwhYUKXF4EYpNNYO7NnRaOOvm8l0dDiuLnTVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5JoVQBRvDknYY0tFNy2UHIsw2c0wHwYDVR0j
BBgwFoAUjYp8xf/Y0WWKkQgvY5aI1o2pOJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjAzNTJENUQ1Qjc5REZFNTVCNUFDMkEwNzMwRDU4Qzgw
NTVBQ0NBM0FDNjREN0ExODNFQzY1NEZFNDc5QjUwLzAvOEQ4QTdDQzVGRkQ4RDE2
NThBOTEwODJGNjM5Njg4RDY4REE5Mzg5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDhBN0NDNUZGRDhEMTY1OEE5
MTA4MkY2Mzk2ODhENjhEQTkzODk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YwMzUyRDVENUI3OURGRTU1QjVBQzJBMDczMEQ1OEM4MDU1QUNDQTNB
QzY0RDdBMTgzRUM2NTRGRTQ3OUI1MC8wLzMxMzkzMDJlMzkzMzJlMzEzNjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl2o
MA0GCSqGSIb3DQEBCwUAA4IBAQCSrCgBg+F8Bi29IiSZEZwndw5dSKiEVFIRPUnY
vjnz595w4HT8qkx9EqyYQm3RZ+M2WJzVJHI75BoF7PPQtktEqUAgNminulwFjhXQ
LJVgt42P4IszhpK3k8MzIx2QNpZVWvr8BdLoUAjS/FtKhpJ51eBr90mHWB0Zh/kh
nQjbAK0W7xlGvFeUIp4hGPkcFgMFq/TTf7PFSyM1xuvQ7kGcEsQ2OP8aN0FuxRsE
SJFzmGOGvm0AU3WDlXceZcagRTljDCsPtpMaTeIzu/CzJIKQkMXUTW2PlfK8QGGt
1OmmHzUQpaYtgAn1EvAZP5L+uM8aQYfnDPamaI8j6Uwyj2B7
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:20 2025 by rpki-client