Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e39372e302e302f31382d3234203d3e203237383333.roa
File:                     3139302e39372e302e302f31382d3234203d3e203237383333.roa (raw, json)
Hash identifier:          QWHSUlbzZWtWu87LBKMu6h8OxEglX60PEEjAwlH6900=
Subject key identifier:   18:3F:F3:71:E1:B8:32:A8:CC:7A:3B:2A:EB:40:32:F7:C4:86:F0:D7
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       504C1FC519E765E880004E5E522551628182D088
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e39372e302e302f31382d3234203d3e203237383333.roa
Signing time:             Tue 04 Feb 2025 18:25:53 +0000
ROA not before:           Tue 04 Feb 2025 18:20:53 +0000
ROA not after:            Tue 03 Feb 2026 18:25:53 +0000
asID:                     27833
IP address blocks:        190.97.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4c:1f:c5:19:e7:65:e8:80:00:4e:5e:52:25:51:62:81:82:d0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Feb  4 18:20:53 2025 GMT
            Not After : Feb  3 18:25:53 2026 GMT
        Subject: CN=183FF371E1B832A8CC7A3B2AEB4032F7C486F0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:94:87:6a:2c:f1:f4:41:73:6e:9f:9e:fe:
                    81:b2:7d:ba:2a:3a:07:0b:18:f6:d8:86:e8:d8:65:
                    db:52:7f:cc:72:32:fa:c7:1d:7b:bf:90:ee:94:7b:
                    7f:e8:5e:f6:14:ed:07:ea:6c:df:ef:a9:85:5d:45:
                    fb:da:80:30:f6:4b:0e:89:47:50:2d:e0:74:34:30:
                    13:1a:fd:88:e1:4d:ad:34:cc:b7:16:da:62:b2:e3:
                    54:6f:2c:08:08:ad:72:5f:46:12:da:6f:e4:99:ec:
                    b3:08:6f:32:cf:ca:f4:44:d1:23:3c:45:5c:01:75:
                    c1:91:60:a4:26:f7:2d:a6:12:4e:95:9c:13:7d:46:
                    ba:48:1e:41:18:9f:17:f4:90:98:1f:71:41:d6:a2:
                    08:c8:e9:0c:77:05:20:a5:6e:87:c5:ef:40:81:bb:
                    4e:21:c3:2a:7c:ca:ef:09:f3:e5:5a:37:b3:34:c8:
                    03:91:68:e9:ae:01:22:16:11:f1:aa:35:e1:8d:fe:
                    e8:eb:dd:f8:ca:84:13:ab:3c:4a:7d:72:f7:40:92:
                    2f:39:05:48:88:af:e0:9a:76:61:9f:40:67:0c:cf:
                    06:e2:c2:81:f1:c4:bf:ff:5d:a7:f5:2a:dd:fa:9c:
                    8f:56:ba:e8:5f:09:52:7e:74:8a:21:a5:38:5f:53:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:F3:71:E1:B8:32:A8:CC:7A:3B:2A:EB:40:32:F7:C4:86:F0:D7
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e39372e302e302f31382d3234203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:91:9a:58:3f:ef:a6:ae:ea:2d:a1:79:e7:8a:29:32:3d:f8:
         35:c4:89:62:2e:6d:d3:9d:1e:8a:b0:95:3e:5f:5b:23:f9:1f:
         be:0d:47:f8:0c:9b:d1:a5:0a:00:15:bf:ed:0c:39:34:cb:a3:
         e9:92:0c:13:69:77:d9:25:4f:96:27:93:8d:c1:23:52:45:ed:
         66:ef:7e:66:29:c5:fb:be:0a:ce:bb:60:b9:ac:f1:9d:bd:b7:
         a3:ba:ee:a1:83:a7:9b:32:56:b8:d3:8a:b4:45:6e:60:04:9d:
         70:a8:d7:16:22:1b:e1:7c:9b:c4:08:9f:54:ec:29:1c:f2:b3:
         04:3d:56:86:5a:7d:b1:28:38:34:48:93:70:28:d7:a8:74:4c:
         b1:71:6f:34:b2:db:bd:9b:da:c1:b0:f1:a6:c5:91:ca:af:23:
         4d:86:f7:2a:75:d5:32:9a:2f:a8:01:cc:53:46:21:de:f1:ad:
         16:7c:e3:2f:b6:15:f3:33:cf:fe:c6:a0:4e:c7:0c:e4:00:94:
         4c:d7:24:b8:2a:ae:ed:c2:53:64:86:1c:3b:60:75:a3:f5:24:
         40:4c:1b:32:70:2c:a3:f4:2d:6e:88:88:a3:d8:38:82:38:48:
         51:87:db:77:6d:b7:29:26:a0:b8:52:ee:be:22:af:12:b2:a6:
         d1:4c:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:07 2025 by rpki-client