Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3134312e302f32342d3234203d3e203532323432.roa
File:                     3139302e3138312e3134312e302f32342d3234203d3e203532323432.roa (raw, json)
Hash identifier:          oOyo0jI3zekJXVeAbF1T8LXYZXjnUolzWBT2oq499MQ=
Subject key identifier:   44:9D:EF:C3:3F:E6:A7:25:A2:15:79:BF:55:59:D3:A4:AB:0C:8C:5D
Certificate issuer:       /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial:       062B389334B127B76B59403C8A23A4B86A40C8F4
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3134312e302f32342d3234203d3e203532323432.roa
Signing time:             Tue 04 Feb 2025 18:02:10 +0000
ROA not before:           Tue 04 Feb 2025 17:57:10 +0000
ROA not after:            Tue 03 Feb 2026 18:02:10 +0000
asID:                     52242
IP address blocks:        190.181.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2b:38:93:34:b1:27:b7:6b:59:40:3c:8a:23:a4:b8:6a:40:c8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
        Validity
            Not Before: Feb  4 17:57:10 2025 GMT
            Not After : Feb  3 18:02:10 2026 GMT
        Subject: CN=449DEFC33FE6A725A21579BF5559D3A4AB0C8C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:cf:99:37:33:8d:25:0a:a0:a3:23:6e:21:
                    90:37:6a:93:61:8d:d6:dc:79:68:c0:79:d2:e4:05:
                    2f:ed:d0:3e:ce:f8:2a:4d:cf:0a:e6:49:a1:2a:43:
                    69:39:a0:d8:22:5b:7e:52:de:e1:c8:d2:fe:65:61:
                    3c:06:4c:39:e8:80:93:22:25:53:c7:8c:a6:d6:59:
                    ef:f1:6f:9c:34:7a:c0:d4:c4:e0:24:35:8f:a0:c1:
                    c4:e3:24:6b:80:a8:22:08:fe:d3:8f:51:d6:cd:79:
                    78:b6:55:11:d0:9e:1a:97:e9:11:d9:92:33:52:55:
                    46:b1:8a:b1:5e:63:dc:fa:af:22:21:10:8f:a4:02:
                    d4:fa:58:6e:c7:ab:67:3b:db:eb:81:62:e7:c5:c2:
                    92:94:bd:ba:3e:cd:85:c4:ec:3e:66:9a:c1:36:93:
                    f6:a4:5b:53:8f:b5:37:d9:6c:96:68:8b:4d:55:c7:
                    23:a7:66:f8:6f:37:de:8f:39:3e:f7:ed:94:f9:ef:
                    27:c3:09:0a:2d:75:1e:e8:3b:81:70:93:8e:c5:09:
                    e6:04:df:1d:c9:7c:e3:38:e5:96:e3:a9:f7:66:97:
                    57:e1:c6:76:b8:f1:0b:4a:ed:92:cf:db:2c:1e:6d:
                    4e:43:ba:b0:d8:d0:a3:8d:52:13:92:e6:39:17:74:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:EF:C3:3F:E6:A7:25:A2:15:79:BF:55:59:D3:A4:AB:0C:8C:5D
            X509v3 Authority Key Identifier:
                keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3134312e302f32342d3234203d3e203532323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:57:ec:43:d3:36:c1:fd:fb:c5:ca:6c:83:d7:27:70:18:f9:
         d7:84:ba:1c:a0:82:b2:fd:a4:51:d3:9d:3b:a7:1c:67:19:77:
         ed:1b:a7:cf:45:83:01:c0:4d:0d:7e:a0:8a:a7:09:5a:16:98:
         b6:ed:ed:7e:43:42:72:e0:7e:e7:43:9b:3a:2c:fb:75:fc:af:
         ea:71:49:97:80:b2:e8:41:80:84:30:a6:46:25:07:0c:b7:06:
         26:17:87:e8:d4:37:de:41:df:e9:1b:68:cb:ca:df:77:fd:67:
         97:32:fd:80:d5:34:8e:6d:3e:33:5a:b2:d3:cc:54:87:0f:b3:
         29:cd:df:14:b2:f2:fd:13:33:fc:9b:ff:31:6d:cd:5b:f0:e3:
         32:29:01:30:65:a7:e6:fc:5f:37:05:7c:33:9a:eb:0d:54:63:
         6d:70:4f:27:0e:85:0c:80:8e:f7:43:cf:f9:c4:63:6d:fc:7c:
         a6:f1:87:30:8c:ff:3a:32:4d:17:78:2d:ff:f2:fa:58:92:cc:
         d4:58:f9:7e:51:82:78:70:10:49:4f:1c:20:33:14:ea:70:0e:
         c5:43:2b:d0:55:3a:e7:39:f2:72:b4:10:4c:6f:ac:5c:12:ca:
         dd:24:77:20:de:24:35:96:05:64:87:3a:94:c5:44:c1:83:b6:
         3b:d9:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:33 2025 by rpki-client