Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          ruAkomWkgMv1AJC/L7OifybD0m7oORYFVF4yO2GWhy8=
Subject key identifier:   FB:13:BA:6D:E9:63:44:2A:9B:D9:D3:A5:FC:B9:DA:76:4A:A9:E9:E1
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       1D6BBBA019D503FD360510BDCBA8FB71FD400D36
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:57:04 +0000
ROA not before:           Tue 04 Feb 2025 19:52:04 +0000
ROA not after:            Tue 03 Feb 2026 19:57:04 +0000
asID:                     262589
IP address blocks:        190.121.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6b:bb:a0:19:d5:03:fd:36:05:10:bd:cb:a8:fb:71:fd:40:0d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:04 2025 GMT
            Not After : Feb  3 19:57:04 2026 GMT
        Subject: CN=FB13BA6DE963442A9BD9D3A5FCB9DA764AA9E9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:ce:77:12:44:0a:5e:eb:79:21:6b:b9:ff:
                    0b:01:91:0d:b0:e8:97:cc:4d:04:47:4f:a4:83:35:
                    a1:69:e2:96:85:7a:14:c3:a4:43:85:78:5b:b3:01:
                    93:c6:8c:15:76:95:1e:c4:fc:27:23:12:f1:8e:08:
                    8e:a4:b5:15:57:4d:b4:5e:f9:b6:95:f3:2b:4e:db:
                    3c:d7:83:a7:b5:0e:7a:a1:5d:b3:4e:a4:56:b5:cc:
                    cb:53:35:dc:ee:7c:2a:58:15:5b:f6:17:50:23:31:
                    3d:b2:03:2f:b3:3b:33:90:e3:b5:2d:d3:27:00:fa:
                    8c:16:e1:b0:49:27:e7:1b:67:09:11:1d:de:1b:5f:
                    e5:b5:41:0f:ab:0f:53:9a:99:7d:26:d4:fb:f8:0b:
                    6a:4b:b9:a2:74:54:a0:97:e4:d1:c3:e3:3b:66:12:
                    6a:75:5a:23:c0:73:09:ea:70:92:62:2a:f5:18:9c:
                    35:03:d0:37:ac:6b:85:74:97:a2:44:05:ef:85:4b:
                    ee:99:c9:f8:3e:f9:e1:69:df:4a:19:9f:68:94:bc:
                    e3:5a:46:4f:07:4f:da:ca:60:d1:6e:f5:28:93:d9:
                    df:45:93:8c:19:28:09:ff:63:33:82:d6:2c:a0:18:
                    1d:c8:47:3d:cd:60:c2:e4:44:ab:87:11:ba:43:03:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:BA:6D:E9:63:44:2A:9B:D9:D3:A5:FC:B9:DA:76:4A:A9:E9:E1
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:e2:b6:89:39:ba:39:53:b7:4b:e5:62:2a:d7:bb:6a:68:
         1b:c6:4a:0d:3c:ea:a7:67:91:9d:63:c9:bd:35:a9:82:08:73:
         0b:62:34:33:d3:3f:45:70:1f:00:3b:9a:75:ae:e5:bb:6f:b2:
         4f:10:55:e8:c4:2b:e2:ad:3a:17:c8:11:17:cd:42:9e:1d:e6:
         02:c6:87:03:ff:41:5a:4e:dc:b6:1d:4e:47:ca:3b:cd:64:26:
         dd:ec:6e:8a:0e:57:20:03:2f:2b:e3:a4:bf:ca:c9:97:ba:11:
         1f:24:01:ca:c9:8d:a5:60:fc:aa:7a:4d:66:2e:89:eb:31:69:
         5e:0f:65:ad:4b:51:4d:69:ab:3d:e2:4f:bf:b7:96:99:b1:f6:
         73:1c:39:aa:40:e1:d0:bd:04:a3:d6:8e:80:c6:10:6e:2a:f0:
         45:7e:cd:d1:27:ce:e6:44:d5:1b:76:a7:b7:4b:1d:86:54:46:
         5f:6a:0e:b1:2a:e7:ee:88:74:40:22:c2:fc:d6:b1:38:44:65:
         98:62:09:50:61:e2:84:2f:1f:c0:5d:83:b7:be:13:03:b1:eb:
         73:b7:5b:45:5e:0d:da:62:70:88:e0:bd:17:ee:ac:7a:38:f7:
         da:14:b7:35:41:36:07:2e:31:55:4f:a8:12:04:ec:2e:db:26:
         a7:5e:c0:f8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHWu7oBnVA/02BRC9y6j7cf1ADTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUyMDRaFw0yNjAyMDMxOTU3MDRaMDMxMTAvBgNV
BAMTKEZCMTNCQTZERTk2MzQ0MkE5QkQ5RDNBNUZDQjlEQTc2NEFBOUU5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7c53EkQKXut5IWu5/wsBkQ2w
6JfMTQRHT6SDNaFp4paFehTDpEOFeFuzAZPGjBV2lR7E/CcjEvGOCI6ktRVXTbRe
+baV8ytO2zzXg6e1DnqhXbNOpFa1zMtTNdzufCpYFVv2F1AjMT2yAy+zOzOQ47Ut
0ycA+owW4bBJJ+cbZwkRHd4bX+W1QQ+rD1OamX0m1Pv4C2pLuaJ0VKCX5NHD4ztm
Emp1WiPAcwnqcJJiKvUYnDUD0Desa4V0l6JEBe+FS+6Zyfg++eFp30oZn2iUvONa
Rk8HT9rKYNFu9SiT2d9Fk4wZKAn/YzOC1iygGB3IRz3NYMLkRKuHEbpDA9fNAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU+xO6beljRCqb2dOl/Lnadkqp6eEwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzkzMDJlMzEzMjMxMmUzMTMyMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
eYAwDQYJKoZIhvcNAQELBQADggEBAG+j4raJObo5U7dL5WIq17tqaBvGSg086qdn
kZ1jyb01qYIIcwtiNDPTP0VwHwA7mnWu5btvsk8QVejEK+KtOhfIERfNQp4d5gLG
hwP/QVpO3LYdTkfKO81kJt3sbooOVyADLyvjpL/KyZe6ER8kAcrJjaVg/Kp6TWYu
iesxaV4PZa1LUU1pqz3iT7+3lpmx9nMcOapA4dC9BKPWjoDGEG4q8EV+zdEnzuZE
1Rt2p7dLHYZURl9qDrEq5+6IdEAiwvzWsThEZZhiCVBh4oQvH8Bdg7e+EwOx63O3
W0VeDdpicIjgvRfurHo499oUtzVBNgcuMVVPqBIE7C7bJqdewPg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:48 2025 by rpki-client