Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e3138312e3139322e302f31382d3231203d3e203230323939.roa
File:                     3139302e3138312e3139322e302f31382d3231203d3e203230323939.roa (raw, json)
Hash identifier:          Z347bEFBS77WSvpAZqwBXsFo5/AJMVW0vf1nk/E4sjM=
Subject key identifier:   EF:E8:09:BA:F8:EC:29:35:7C:F7:C9:1E:D6:5C:5D:1F:CA:26:0B:42
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       0D929C0F19BFFEA20611BA35B99474F75D838A6A
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e3138312e3139322e302f31382d3231203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:48:56 +0000
ROA not before:           Tue 04 Feb 2025 18:43:56 +0000
ROA not after:            Tue 03 Feb 2026 18:48:56 +0000
asID:                     20299
IP address blocks:        190.181.192.0/18 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:92:9c:0f:19:bf:fe:a2:06:11:ba:35:b9:94:74:f7:5d:83:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Feb  4 18:43:56 2025 GMT
            Not After : Feb  3 18:48:56 2026 GMT
        Subject: CN=EFE809BAF8EC29357CF7C91ED65C5D1FCA260B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:e0:41:87:a8:52:2f:4b:4b:bb:a9:3c:29:
                    d9:67:b9:60:a0:82:20:b3:82:3e:29:10:7f:9f:26:
                    61:d5:ea:52:57:33:61:c4:eb:9a:7d:db:ff:26:14:
                    57:48:7a:d4:5c:e0:bd:44:03:26:9e:b8:7d:dd:5c:
                    77:1b:1f:17:06:f5:1a:f0:04:58:0d:2a:e3:ce:92:
                    a8:38:2b:61:11:04:37:d3:d9:c8:38:64:a3:15:3a:
                    ec:e3:04:c7:70:06:b3:d2:b7:42:94:f9:02:67:bf:
                    ba:cb:a5:10:1b:f6:19:18:e0:8d:a4:05:b9:04:c8:
                    d8:45:02:62:7c:85:1a:91:66:14:48:4b:39:1b:28:
                    a2:c0:49:6d:69:c3:9a:f9:31:5f:1d:8e:d0:73:c1:
                    3d:92:3e:8c:3e:26:5c:d3:c3:de:d9:8f:16:09:8e:
                    fb:74:6a:6e:9d:0e:e9:e1:4f:3c:a8:40:b2:16:d3:
                    de:c5:27:1a:7c:0a:94:37:54:f6:31:e6:ef:40:3c:
                    6c:fa:4c:fa:a2:7b:30:04:b0:4d:a5:a4:b7:ad:31:
                    02:7e:4d:95:26:92:9e:5f:f1:ed:00:43:9a:a7:45:
                    90:38:8f:25:d3:53:6c:72:fe:1c:f1:f4:5a:e0:e7:
                    08:a8:f9:85:f6:17:f7:4d:34:59:3c:6a:39:a6:3b:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E8:09:BA:F8:EC:29:35:7C:F7:C9:1E:D6:5C:5D:1F:CA:26:0B:42
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e3138312e3139322e302f31382d3231203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:7e:bf:31:21:68:81:66:9d:62:08:6f:bc:e6:04:6e:f7:
         36:03:60:62:f9:63:cc:6a:49:be:8c:b9:10:af:d8:e2:bf:92:
         bf:97:ad:82:18:0e:5a:f2:1e:03:16:93:d2:76:83:6f:12:f9:
         db:28:44:ed:13:8f:3b:79:7e:2d:c9:b2:bd:8b:9a:36:05:82:
         58:c3:d8:d6:9b:6a:10:ec:27:b6:fe:c8:03:5e:a1:bb:c6:76:
         67:04:6f:b3:34:18:62:34:55:1d:52:85:ec:f1:30:a0:19:96:
         52:71:69:90:e2:17:13:9e:24:4a:c1:53:ef:8c:86:54:88:58:
         c0:1e:8f:6f:3c:ae:e6:1d:91:b4:fc:cc:06:d1:f4:eb:7b:f9:
         a0:7a:de:8a:d7:58:df:1c:46:e5:9b:20:3b:54:d0:a7:8f:99:
         1c:02:57:73:e0:79:c8:8f:8c:70:2d:d7:79:a5:45:1e:6c:eb:
         2b:00:a3:88:86:e5:71:5f:5c:a4:b0:76:da:27:41:30:63:c7:
         d5:d6:12:d1:d0:88:e6:f5:0b:66:da:f6:f6:3e:b2:61:6e:87:
         38:a5:73:6d:50:b4:ff:35:23:f3:a9:8d:e1:59:2f:15:f5:b1:
         b5:ad:0d:03:4c:a7:c5:9a:30:95:db:17:71:83:4b:11:3e:36:
         c2:ef:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:26 2025 by rpki-client