Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3132382e302f31372d3230203d3e203131303831.roa
File:                     3139302e38382e3132382e302f31372d3230203d3e203131303831.roa (raw, json)
Hash identifier:          KE/RSb9g99+NmKdXKdJpEKbRWhCuRWCZFLc90+5Af0Y=
Subject key identifier:   AA:CB:61:8B:40:DE:63:3A:75:FE:16:9F:82:F9:4F:62:F5:BD:D9:EB
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       48BABA2F2DF4B4C2A3D32E27634AB7EF7395C0AC
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3132382e302f31372d3230203d3e203131303831.roa
Signing time:             Tue 04 Feb 2025 18:50:50 +0000
ROA not before:           Tue 04 Feb 2025 18:45:50 +0000
ROA not after:            Tue 03 Feb 2026 18:50:50 +0000
asID:                     11081
IP address blocks:        190.88.128.0/17 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ba:ba:2f:2d:f4:b4:c2:a3:d3:2e:27:63:4a:b7:ef:73:95:c0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:50 2025 GMT
            Not After : Feb  3 18:50:50 2026 GMT
        Subject: CN=AACB618B40DE633A75FE169F82F94F62F5BDD9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:0c:ef:b8:7a:fa:05:c0:c8:bb:41:d8:07:
                    e3:a6:27:eb:57:ea:0e:1a:58:69:92:1c:b9:cf:40:
                    dd:5e:df:4a:5a:a0:c7:64:1d:e0:9f:34:ab:16:99:
                    54:0e:16:78:ab:b4:d7:d3:a0:d4:f2:de:4c:50:65:
                    cc:38:57:e2:f7:13:a8:be:b9:ff:84:96:e0:09:8b:
                    79:d2:d5:6b:87:aa:2b:53:a4:39:d2:fc:91:5e:f3:
                    1a:25:d5:d9:eb:cf:b3:bd:7b:ad:e2:bd:2f:16:df:
                    0e:ee:f8:23:10:95:a5:5c:cb:fa:b2:7c:ea:fd:bc:
                    8c:68:63:14:a2:8d:d1:50:99:86:3d:c4:22:86:a7:
                    87:c4:6e:9f:cf:10:fe:94:bc:e5:55:ac:8d:5f:53:
                    f5:d3:b2:d3:4a:33:a7:77:d3:ee:85:15:1d:59:3a:
                    63:15:50:6e:75:ce:fb:4c:24:d0:ca:9c:02:46:5c:
                    8b:81:56:48:47:9d:f2:02:e3:4b:c1:a6:d5:64:46:
                    0e:6f:15:e9:c0:fc:a7:6a:d7:af:47:e2:d6:2b:7f:
                    7e:50:5c:a6:fa:65:b1:d6:a5:62:2d:b9:bd:12:80:
                    be:e6:5e:31:c6:1e:8b:76:f6:6b:28:24:a5:e6:26:
                    e4:c9:90:6d:c8:4b:92:59:9a:12:6a:2d:52:b6:a6:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CB:61:8B:40:DE:63:3A:75:FE:16:9F:82:F9:4F:62:F5:BD:D9:EB
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3132382e302f31372d3230203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:36:79:55:89:c1:74:f9:cd:23:f5:5b:1f:d4:d3:35:12:
         db:79:88:35:5b:cd:28:62:5a:06:d4:89:bf:17:c3:28:c6:9d:
         52:a3:13:42:f1:58:ca:31:a6:e2:a0:47:f8:5b:23:72:30:c8:
         d6:bb:1c:ce:51:cf:94:81:fd:3f:f9:ce:d7:d2:ff:f7:d0:1b:
         c3:cf:18:79:2c:62:40:bf:81:20:82:01:0f:d0:ed:db:a9:b3:
         3f:90:09:8a:43:6a:7c:4f:e6:72:48:51:ba:2e:3c:9b:6e:bd:
         b7:18:53:81:8b:6b:c3:91:7b:a0:ad:4c:86:c0:0c:22:33:10:
         8b:c3:04:01:ce:f9:1f:8b:49:7d:27:a2:53:1e:eb:e3:65:45:
         a2:b5:8c:4a:d5:1b:65:6a:a9:f6:44:5c:0f:fe:9a:e7:16:15:
         5c:1e:1b:a3:a2:3e:ec:e4:a9:7c:8f:05:d2:78:b1:cc:94:7e:
         2b:b9:ee:81:ef:b5:93:4c:5a:f1:e9:5e:93:8f:c7:60:67:cb:
         1a:45:f4:1e:d2:1a:84:18:f4:b8:a9:6a:ef:f4:ff:32:ac:d9:
         0f:a4:1c:30:14:fc:06:86:fb:8a:10:5d:54:a2:ff:94:ed:5d:
         4f:ce:42:44:cb:dd:dc:40:6e:05:1a:88:f4:ed:bc:35:08:9d:
         ea:c7:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:03 2025 by rpki-client