Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3136302e302f31392d3230203d3e2032353439.roa
File:                     3230302e33392e3136302e302f31392d3230203d3e2032353439.roa (raw, json)
Hash identifier:          lN2gCxwjw4TFOKuZk8MuCvVT379o48MzPxYqQg3Wqnw=
Subject key identifier:   74:48:5B:B0:77:F4:3A:43:91:68:4C:D1:45:5E:89:A1:09:68:07:96
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       5B68197453522E1E598FDA97A2A5304EFF5241B0
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3136302e302f31392d3230203d3e2032353439.roa
Signing time:             Tue 04 Feb 2025 20:00:34 +0000
ROA not before:           Tue 04 Feb 2025 19:55:34 +0000
ROA not after:            Tue 03 Feb 2026 20:00:34 +0000
asID:                     2549
IP address blocks:        200.39.160.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:68:19:74:53:52:2e:1e:59:8f:da:97:a2:a5:30:4e:ff:52:41:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Feb  4 19:55:34 2025 GMT
            Not After : Feb  3 20:00:34 2026 GMT
        Subject: CN=74485BB077F43A4391684CD1455E89A109680796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:f5:14:a7:ae:56:17:69:94:44:6d:ca:04:
                    7a:f2:b5:65:bb:64:32:e7:d1:0d:61:2b:89:c7:92:
                    43:7f:21:7a:2d:9d:27:81:e3:9f:20:25:96:35:8b:
                    56:da:d3:9a:d3:a2:4c:bd:ea:c2:6c:70:43:8c:bf:
                    ec:e3:9a:47:29:68:6e:98:a7:c6:32:5d:24:c9:66:
                    32:7d:d2:c6:68:b3:24:f1:a2:69:79:c2:d8:59:dd:
                    0b:2f:e6:ba:84:e7:f3:2f:cf:13:06:5e:1e:3d:44:
                    d4:6b:bc:54:3f:17:b3:ac:35:68:bd:ea:67:f3:31:
                    05:63:6a:5a:db:f9:f2:e3:6e:97:ed:fb:4a:eb:de:
                    31:12:6c:ef:ee:90:60:13:9a:a0:0d:cc:ef:8d:fa:
                    1a:da:b4:3e:da:fc:25:6d:9d:9f:e6:ac:af:ab:c8:
                    0c:b0:7b:cf:92:5b:50:4b:7b:5b:34:b6:03:d7:59:
                    3a:de:e6:46:c0:3f:6d:2d:09:bd:f6:5e:66:02:c7:
                    33:98:d1:c9:1c:e4:53:3a:f5:92:a0:da:b2:f0:9b:
                    fd:be:ca:65:f9:db:27:49:21:d4:b6:9e:7f:bc:87:
                    14:7b:58:ef:bb:e0:d0:be:48:e8:f0:af:61:40:78:
                    06:92:10:86:8c:e0:19:f0:8a:f1:dd:5d:70:c8:a9:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:5B:B0:77:F4:3A:43:91:68:4C:D1:45:5E:89:A1:09:68:07:96
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3136302e302f31392d3230203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:b5:fc:eb:23:dd:ff:21:e9:fb:74:86:ff:2f:5c:f5:4f:
         67:74:4e:a6:1c:f2:1c:a8:7b:41:d8:67:b5:06:2f:15:1f:78:
         9a:27:72:35:b3:65:db:c9:0b:65:61:70:ec:3c:83:80:8e:3d:
         fe:84:99:10:99:74:5c:8d:48:cf:f3:1c:f1:2a:23:a5:45:ba:
         30:5c:30:04:b5:40:d7:b5:d0:46:2a:c0:9e:65:43:a8:f3:1f:
         eb:c7:8f:62:1e:ab:36:a7:4f:2c:0d:71:7e:38:d1:ab:e8:74:
         e4:7b:66:f3:b9:11:ca:9e:72:67:7c:8a:ff:8e:2b:98:0b:91:
         99:75:71:6c:7d:8e:c6:66:74:9f:d4:1c:b1:be:4e:0f:99:0f:
         5f:2e:fe:d8:ab:97:27:0e:87:65:8e:ff:1f:f6:92:41:61:8e:
         ac:d6:00:f8:0c:90:ce:2a:6b:5f:77:aa:6f:c9:17:eb:bf:6d:
         58:58:ed:5a:7e:28:5a:73:66:fa:88:c0:4b:54:5c:7f:63:d3:
         2d:a1:5c:95:9c:0b:f9:3b:ad:a5:2b:7d:a8:76:f1:fd:5c:a3:
         1f:4f:6c:42:02:39:63:cf:d5:3b:ab:44:e9:d2:62:df:39:2e:
         93:89:95:ee:e6:a2:9c:ee:9b:c0:76:a6:6b:b1:87:78:1a:dc:
         25:68:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:11 2025 by rpki-client