Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32302d3230203d3e203532333238.roa
File:                     3139302e3231312e36342e302f32302d3230203d3e203532333238.roa (raw, json)
Hash identifier:          DeB6dG2yceLQEyslrcvRXv65S81iglAIWyBo4PeBNFo=
Subject key identifier:   2E:C6:05:4A:FA:61:03:09:E2:7C:97:61:3A:1A:7A:EA:B5:3D:05:C4
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       3ECB1540F9D0E10DDA7F1436D95624252340CE
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32302d3230203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:24 +0000
ROA not before:           Tue 04 Feb 2025 18:11:24 +0000
ROA not after:            Tue 03 Feb 2026 18:16:24 +0000
asID:                     52328
IP address blocks:        190.211.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cb:15:40:f9:d0:e1:0d:da:7f:14:36:d9:56:24:25:23:40:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:24 2025 GMT
            Not After : Feb  3 18:16:24 2026 GMT
        Subject: CN=2EC6054AFA610309E27C97613A1A7AEAB53D05C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:d3:1d:b5:cd:4d:6d:08:4d:48:09:ef:9e:
                    2c:68:b7:93:37:d7:f1:f3:e8:9d:e9:3c:ae:6e:f0:
                    59:b1:99:dc:ca:f7:ac:34:b8:4e:6f:3c:8b:30:4f:
                    2f:09:22:d6:de:e2:88:b3:67:63:42:d3:12:66:29:
                    f2:76:4b:d9:9e:63:0e:fa:3c:2a:ea:65:18:3c:e3:
                    2c:b5:46:96:52:18:3a:27:6b:39:8a:96:f1:4a:50:
                    1c:c7:12:e6:58:3c:0f:f3:16:a1:72:d5:8d:ec:51:
                    87:2a:33:1e:6a:12:15:cd:3a:bd:d9:b2:dd:e9:62:
                    90:59:0d:ff:8f:f5:df:db:42:db:d1:0e:6c:1f:fb:
                    cd:bb:5f:ee:42:3d:3c:83:f6:53:b0:72:fa:11:36:
                    e4:7b:31:35:a0:de:17:df:76:14:65:9d:cd:18:9f:
                    93:62:8d:d7:04:59:04:06:c3:5b:2d:95:f0:e4:40:
                    16:02:2a:65:f4:ae:d6:5e:ab:74:e0:44:50:c6:c0:
                    e0:d3:aa:e8:4b:2a:61:93:84:44:d0:79:ae:af:3c:
                    a5:2e:4e:b5:6b:ed:69:68:3e:03:93:36:9a:d4:d2:
                    25:03:80:a7:02:6a:d9:7e:d4:db:95:ea:dc:8e:20:
                    b2:8f:d2:8e:ec:71:67:37:bd:2f:8e:0e:50:84:7d:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C6:05:4A:FA:61:03:09:E2:7C:97:61:3A:1A:7A:EA:B5:3D:05:C4
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32302d3230203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:5f:7f:7b:dc:6f:68:dd:26:0c:9d:25:d7:4d:9c:08:fb:
         cb:9d:44:f0:72:22:cc:fd:25:b9:c4:33:cf:aa:88:ce:fe:78:
         7c:26:b2:9d:5a:33:6e:73:95:f1:91:eb:62:2a:32:ac:36:30:
         65:62:c0:e6:ae:1e:5e:cb:e3:b2:3b:f9:c6:02:7e:02:90:a7:
         d6:ac:58:2b:6b:1f:c6:c9:27:5f:0a:f3:20:22:4e:26:32:7e:
         2a:6d:ad:ee:1f:4e:03:be:cc:62:19:6c:67:9c:75:a1:52:ee:
         61:e4:7d:92:59:a8:48:ca:9c:ec:2d:29:7b:5f:14:fd:91:54:
         52:09:e3:d5:a9:35:03:c4:2e:5b:1e:4a:8c:28:fe:c4:2f:91:
         78:89:93:60:df:1f:c7:94:ae:e3:2a:41:8c:e4:94:23:fe:71:
         e9:0a:d9:a5:da:6a:0c:7e:3e:39:d0:01:16:bb:c3:cc:d6:d5:
         ea:98:af:c9:8d:55:8f:4d:2d:f5:f1:43:f5:2e:ef:c5:05:c9:
         29:f1:e4:4f:02:49:02:33:d0:f8:92:a0:40:62:9d:b9:6a:8f:
         4a:60:5a:bb:f6:ed:51:4a:e0:39:86:3f:a3:00:a6:1b:00:17:
         0e:11:c2:df:66:43:c2:79:e2:0d:66:70:64:7d:36:0a:6f:03:
         30:c7:28:c0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgITPssVQPnQ4Q3afxQ22VYkJSNAzjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhEM0JFRTJCQzNEQkY0MUU1NTk0MDg5OTEyOEVFQTFBMzhE
RDA3NzhGMB4XDTI1MDIwNDE4MTEyNFoXDTI2MDIwMzE4MTYyNFowMzExMC8GA1UE
AxMoMkVDNjA1NEFGQTYxMDMwOUUyN0M5NzYxM0ExQTdBRUFCNTNEMDVDNDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnE0x21zU1tCE1ICe+eLGi3kzfX
8fPonek8rm7wWbGZ3Mr3rDS4Tm88izBPLwki1t7iiLNnY0LTEmYp8nZL2Z5jDvo8
KuplGDzjLLVGllIYOidrOYqW8UpQHMcS5lg8D/MWoXLVjexRhyozHmoSFc06vdmy
3elikFkN/4/139tC29EObB/7zbtf7kI9PIP2U7By+hE25HsxNaDeF992FGWdzRif
k2KN1wRZBAbDWy2V8ORAFgIqZfSu1l6rdOBEUMbA4NOq6EsqYZOERNB5rq88pS5O
tWvtaWg+A5M2mtTSJQOApwJq2X7U25Xq3I4gso/SjuxxZze9L44OUIR9KD8CAwEA
AaOCAsgwggLEMB0GA1UdDgQWBBQuxgVK+mEDCeJ8l2E6GnrqtT0FxDAfBgNVHSME
GDAWgBTTvuK8Pb9B5VlAiZEo7qGjjdB3jzAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzkzRkNFREI5RjZFMkM0NkEzRjgyQjE0RDUwQUU4RjMzNEFD
NjQyODcxMzFGMUZGNDc1QUI2NEVCN0Y5NkUxMEQvMC9EM0JFRTJCQzNEQkY0MUU1
NTk0MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0QzQkVFMkJDM0RCRjQxRTU1OTQw
ODk5MTI4RUVBMUEzOEREMDc3OEYuY2VyMIHHBggrBgEFBQcBCwSBujCBtzCBtAYI
KwYBBQUHMAuGgadyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRBQzY0Mjg3MTMx
RjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvMzEzOTMwMmUzMjMxMzEyZTM2MzQyZTMw
MmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMyMzMzMjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvtNAMA0G
CSqGSIb3DQEBCwUAA4IBAQAdDl9/e9xvaN0mDJ0l102cCPvLnUTwciLM/SW5xDPP
qojO/nh8JrKdWjNuc5XxketiKjKsNjBlYsDmrh5ey+OyO/nGAn4CkKfWrFgrax/G
ySdfCvMgIk4mMn4qba3uH04DvsxiGWxnnHWhUu5h5H2SWahIypzsLSl7XxT9kVRS
CePVqTUDxC5bHkqMKP7EL5F4iZNg3x/HlK7jKkGM5JQj/nHpCtml2moMfj450AEW
u8PM1tXqmK/JjVWPTS318UP1Lu/FBckp8eRPAkkCM9D4kqBAYp25ao9KYFq79u1R
SuA5hj+jAKYbABcOEcLfZkPCeeINZnBkfTYKbwMwxyjA
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:55 2025 by rpki-client