Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32312d3231203d3e203532333238.roa
File:                     3139302e3231312e37322e302f32312d3231203d3e203532333238.roa (raw, json)
Hash identifier:          lgQW1aNFQ3+0t4nZ0I2PxfyNIZkWbLjOTfx5HHtRhts=
Subject key identifier:   59:07:69:48:29:B1:03:3D:18:84:5A:C8:C5:E0:53:6D:3D:B5:B2:97
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       01122007BAA6CC16F894790AFE361CF2A61EBB78
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32312d3231203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:33 +0000
ROA not before:           Tue 04 Feb 2025 18:11:33 +0000
ROA not after:            Tue 03 Feb 2026 18:16:33 +0000
asID:                     52328
IP address blocks:        190.211.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:20:07:ba:a6:cc:16:f8:94:79:0a:fe:36:1c:f2:a6:1e:bb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:33 2025 GMT
            Not After : Feb  3 18:16:33 2026 GMT
        Subject: CN=5907694829B1033D18845AC8C5E0536D3DB5B297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:d1:92:a7:e7:71:dd:de:20:a7:0a:78:d5:
                    1c:43:86:aa:e9:28:b2:a0:54:94:6e:e1:78:cd:93:
                    6e:56:6a:d4:c1:1b:19:0e:a8:80:f6:bd:53:18:83:
                    58:97:03:54:2a:76:41:ce:3b:bb:f8:1e:99:58:01:
                    c3:0d:87:3a:39:22:cf:6c:c8:3b:24:bb:b7:c8:00:
                    e2:cf:91:85:36:06:29:c4:1f:2c:5a:eb:c8:8e:89:
                    0c:dc:ba:bf:98:bb:89:ae:c5:80:4a:e6:ec:bc:e0:
                    38:0f:7c:90:04:3f:8a:4d:b0:c9:d2:c0:a6:ee:8e:
                    91:27:2c:17:f1:37:a8:81:c2:e8:d6:d2:3d:69:ea:
                    78:2e:27:b6:26:0e:45:2e:50:0d:dc:83:cb:b0:33:
                    aa:a1:90:6e:6c:66:ef:66:88:6a:40:cf:38:5b:3d:
                    8b:de:4d:93:bf:ec:6a:03:73:f9:65:7c:72:07:3e:
                    88:55:77:f3:6f:bb:ae:67:ac:2c:a0:92:16:0a:4b:
                    a4:18:bd:91:0c:ea:e1:99:1e:88:fc:18:81:49:a5:
                    f5:d3:84:b0:a8:99:3a:d4:07:b2:7c:4a:3f:c5:e4:
                    57:2a:b1:5f:6c:4d:1d:6e:ee:c4:ea:90:31:90:0b:
                    75:6a:7a:e1:fb:7a:99:56:21:c7:4d:6a:ea:bf:7d:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:07:69:48:29:B1:03:3D:18:84:5A:C8:C5:E0:53:6D:3D:B5:B2:97
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32312d3231203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:ee:fc:1d:09:53:fd:d9:95:a4:1a:4a:91:bc:3a:1b:d6:
         01:35:81:5e:d3:5e:6f:b0:23:88:8f:56:0b:5c:e4:3f:77:20:
         f8:b2:da:e3:39:8c:31:44:2d:73:91:25:c6:49:1b:6e:3c:0f:
         e3:0c:87:86:4d:26:b5:b6:f8:2a:77:74:66:fb:28:58:c8:c4:
         63:1d:34:be:01:86:07:f1:d7:82:30:bf:ba:85:68:55:68:a2:
         8b:b5:ce:95:d5:a2:de:b8:5a:d0:0a:3e:4b:c7:c7:98:97:fc:
         04:a9:1c:82:2f:b7:d7:f4:3a:6a:9e:d5:ad:35:8c:4f:82:c1:
         c7:c9:ef:c3:fa:11:35:18:b4:81:79:58:30:b7:9a:61:e4:02:
         79:7d:fb:f7:7e:b5:f9:ed:04:62:b1:34:d3:19:86:0c:7b:14:
         d6:6a:cd:87:4b:30:54:2b:ed:0b:f5:c8:cf:76:51:63:3a:23:
         8a:43:65:90:2a:32:96:c6:ec:1a:3c:58:41:ff:61:a4:79:dc:
         72:2d:69:f6:15:14:90:bf:8e:70:46:cd:5a:4e:7b:bf:51:34:
         57:8e:29:7c:13:6b:d8:68:d1:76:67:3a:37:14:5f:f9:76:2d:
         86:eb:58:d4:b0:e3:83:12:26:b3:a5:ca:62:6f:55:37:b3:08:
         59:6a:8b:98
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUARIgB7qmzBb4lHkK/jYc8qYeu3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNTAyMDQxODExMzNaFw0yNjAyMDMxODE2MzNaMDMxMTAvBgNV
BAMTKDU5MDc2OTQ4MjlCMTAzM0QxODg0NUFDOEM1RTA1MzZEM0RCNUIyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL9GSp+dx3d4gpwp41RxDhqrp
KLKgVJRu4XjNk25WatTBGxkOqID2vVMYg1iXA1QqdkHOO7v4HplYAcMNhzo5Is9s
yDsku7fIAOLPkYU2BinEHyxa68iOiQzcur+Yu4muxYBK5uy84DgPfJAEP4pNsMnS
wKbujpEnLBfxN6iBwujW0j1p6nguJ7YmDkUuUA3cg8uwM6qhkG5sZu9miGpAzzhb
PYveTZO/7GoDc/llfHIHPohVd/Nvu65nrCygkhYKS6QYvZEM6uGZHoj8GIFJpfXT
hLComTrUB7J8Sj/F5FcqsV9sTR1u7sTqkDGQC3VqeuH7eplWIcdNauq/fdRFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWQdpSCmxAz0YhFrIxeBTbT21spcwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNzMyMmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA77TSDAN
BgkqhkiG9w0BAQsFAAOCAQEAFe/u/B0JU/3ZlaQaSpG8OhvWATWBXtNeb7AjiI9W
C1zkP3cg+LLa4zmMMUQtc5ElxkkbbjwP4wyHhk0mtbb4Knd0ZvsoWMjEYx00vgGG
B/HXgjC/uoVoVWiii7XOldWi3rha0Ao+S8fHmJf8BKkcgi+31/Q6ap7VrTWMT4LB
x8nvw/oRNRi0gXlYMLeaYeQCeX379361+e0EYrE00xmGDHsU1mrNh0swVCvtC/XI
z3ZRYzojikNlkCoylsbsGjxYQf9hpHncci1p9hUUkL+OcEbNWk57v1E0V44pfBNr
2GjRdmc6NxRf+XYthutY1LDjgxIms6XKYm9VN7MIWWqLmA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:36 2025 by rpki-client