Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3139302e302e3132382e302f31392d3234203d3e2036303537.roa
File:                     3139302e302e3132382e302f31392d3234203d3e2036303537.roa (raw, json)
Hash identifier:          TjDcEN2az6LqKF/TbqqUHrpItrso52arMRtbOZr88oA=
Subject key identifier:   60:18:8C:4D:7E:FE:42:CF:A3:CD:78:04:F8:08:62:D5:33:80:3B:1B
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       775164854B9FE1003C3E9A1F3A648C665371C75E
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3139302e302e3132382e302f31392d3234203d3e2036303537.roa
Signing time:             Tue 04 Feb 2025 20:07:20 +0000
ROA not before:           Tue 04 Feb 2025 20:02:20 +0000
ROA not after:            Tue 03 Feb 2026 20:07:20 +0000
asID:                     6057
IP address blocks:        190.0.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:51:64:85:4b:9f:e1:00:3c:3e:9a:1f:3a:64:8c:66:53:71:c7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Feb  4 20:02:20 2025 GMT
            Not After : Feb  3 20:07:20 2026 GMT
        Subject: CN=60188C4D7EFE42CFA3CD7804F80862D533803B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:85:f9:63:13:68:f6:ff:a8:f2:4c:3a:22:
                    20:3b:7a:6c:e4:a0:00:67:88:5a:00:86:dd:ad:9c:
                    47:81:0f:58:22:a2:3c:42:6f:c8:9a:5a:82:07:1c:
                    b5:fd:d9:58:24:22:5f:34:82:10:2a:61:f9:ca:af:
                    b0:c6:27:52:f5:ad:ed:5f:6d:27:83:ad:6a:2c:07:
                    80:98:38:bd:49:3b:93:04:5d:03:d9:f9:10:25:3d:
                    9e:86:e4:4f:17:09:31:bc:14:f8:a2:99:13:4e:04:
                    92:b7:87:fa:e6:6d:e8:58:4f:6a:20:6c:c4:c1:88:
                    ae:87:c3:1b:67:85:9a:45:83:83:dc:e5:c4:71:fd:
                    3c:b0:ed:b4:c9:ab:33:6c:46:ae:9c:1a:9d:b0:92:
                    fa:56:77:f2:0d:50:de:b0:d7:e2:18:35:ee:35:31:
                    9d:a2:cb:e5:1e:2b:3c:b0:35:3c:8d:65:a4:42:d2:
                    1b:32:eb:d9:91:bc:8e:6d:d6:e1:99:73:a9:86:fd:
                    25:29:ff:ce:53:61:5e:8e:cc:b3:cf:1d:fd:f3:ac:
                    26:f5:c2:be:2b:41:38:3b:65:f6:0b:91:1a:71:44:
                    be:58:4e:2a:f9:9e:c6:ac:54:62:52:86:fc:67:d9:
                    0f:50:a4:8f:58:53:b1:fd:b3:1c:c2:73:88:6a:22:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:8C:4D:7E:FE:42:CF:A3:CD:78:04:F8:08:62:D5:33:80:3B:1B
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3139302e302e3132382e302f31392d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:14:3c:3d:46:45:75:1c:6d:5d:13:80:1c:37:11:3f:3f:
         9d:19:64:0a:5c:8f:43:54:09:80:61:ea:4c:cb:ee:75:14:a8:
         d6:1d:32:4e:1b:61:2c:83:b4:b5:24:e2:e5:30:79:e0:02:01:
         81:a1:51:a1:ee:86:25:26:1e:f2:8e:fa:e0:3c:1f:fd:c4:80:
         f9:3e:87:c6:cb:f2:dc:92:28:21:44:a7:6d:ba:f8:d9:8a:18:
         c1:83:5f:11:b0:4d:4e:f1:00:8e:78:27:96:e8:bf:b2:5e:60:
         71:ec:fa:16:c4:3d:a4:43:39:bd:cd:99:bb:fa:64:cb:f0:f4:
         34:ff:f6:41:8b:58:e6:fd:24:b9:45:bd:38:4a:1e:6c:a5:30:
         37:f1:6f:64:c8:a6:5f:8c:cb:6f:df:4c:34:02:7d:31:92:d1:
         cc:d1:4c:ac:37:0c:87:64:18:d0:d9:21:cd:fe:c9:bd:67:64:
         6f:7f:2c:25:1f:73:ac:d4:1a:ad:07:2f:d4:83:81:21:03:ee:
         3c:c2:ca:6f:4e:38:1f:96:5a:20:3c:a6:81:e1:04:fa:63:d9:
         14:ff:08:fd:2f:aa:e9:2c:ef:1e:60:1b:40:1c:0b:b7:6a:46:
         04:9f:68:10:86:89:0e:a1:c8:12:b3:de:65:87:68:eb:13:dd:
         ec:74:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:29:21 2025 by rpki-client