Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          OTZbBr0a+3xy+hUzYeVu0ipb+Ixx6shXpruJAOhTkpc=
Subject key identifier:   85:68:9C:D0:6B:BC:BF:3D:05:CA:6A:7C:C8:A6:B9:16:79:79:F0:C2
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       51E5CD3C127C5237539EFF68C50D6A9E6B73C8C3
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:56:51 +0000
ROA not before:           Tue 04 Feb 2025 19:51:51 +0000
ROA not after:            Tue 03 Feb 2026 19:56:51 +0000
asID:                     262589
IP address blocks:        190.121.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:cd:3c:12:7c:52:37:53:9e:ff:68:c5:0d:6a:9e:6b:73:c8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:51 2025 GMT
            Not After : Feb  3 19:56:51 2026 GMT
        Subject: CN=85689CD06BBCBF3D05CA6A7CC8A6B9167979F0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:70:d5:30:f2:1d:6b:60:c3:0f:2f:cf:cd:
                    aa:48:db:5b:48:3a:05:84:4d:34:98:32:7b:d3:07:
                    b1:58:00:62:6c:98:5a:35:d4:44:2e:dc:cb:a6:51:
                    9c:d1:68:52:a0:30:f7:61:4b:ed:b3:0f:2a:bb:f8:
                    86:04:90:38:33:90:df:69:b7:08:15:69:b4:28:a5:
                    af:6e:71:0c:36:3f:ef:2f:f8:c0:e5:a4:b3:89:b7:
                    34:d4:f9:65:26:8d:56:81:19:4e:1e:81:a8:c4:7d:
                    9b:e0:bf:08:8e:94:c4:d9:e5:ca:98:84:62:58:7e:
                    5f:51:3c:7f:f6:cc:92:0c:35:76:7c:16:f0:d5:0c:
                    8c:17:54:03:fd:33:f4:a8:45:d3:9a:fc:1e:6f:58:
                    5b:76:54:b7:fa:58:68:d9:84:aa:f4:2a:51:03:f6:
                    a3:fc:32:42:aa:2b:02:16:14:13:e0:1d:6b:7c:e6:
                    83:a6:84:66:94:57:cd:6f:e5:6e:cf:95:b7:2a:a7:
                    63:cf:52:62:cb:d4:89:a7:b5:a7:35:2a:9f:74:f0:
                    d5:e0:d1:b1:93:7f:b7:c5:54:71:a5:a8:c4:c1:80:
                    6c:9c:f6:31:7f:0f:b4:a2:f3:18:b4:33:1e:5a:6c:
                    6e:96:fc:77:e1:18:da:3f:99:63:34:d0:5c:8b:37:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:68:9C:D0:6B:BC:BF:3D:05:CA:6A:7C:C8:A6:B9:16:79:79:F0:C2
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:c6:df:ab:5c:42:d4:98:0f:75:cc:a5:7c:f3:ad:98:ee:
         21:b8:67:c0:db:1a:ff:7e:6f:d7:87:d9:18:42:a6:68:71:bf:
         b1:f0:bc:24:e9:5f:ee:fa:fd:08:27:b3:56:a7:e0:6c:eb:fe:
         5d:8e:be:ee:5f:ee:e1:1b:f4:4d:0f:4b:73:0d:3a:8b:bc:15:
         6e:d6:be:0a:f9:1b:c2:f8:6d:b0:d1:34:76:97:ce:bd:9b:94:
         eb:30:4f:d1:66:cc:2e:a6:f6:cf:16:63:18:a3:06:a9:53:5c:
         57:12:54:6b:57:27:4a:6f:94:64:a7:b6:63:1a:2f:a1:9a:2d:
         58:9a:c3:f4:ab:d0:59:b6:37:32:c5:9b:48:d2:02:3e:91:2e:
         63:c2:c9:a2:77:10:55:5f:dc:b0:b2:70:0d:d4:1a:94:3e:06:
         97:72:34:1c:71:15:62:35:b1:1b:74:1f:79:fc:b2:76:f5:ac:
         43:51:73:45:e2:b4:31:ab:f0:77:90:50:a1:9a:2a:f9:d1:b3:
         e6:fa:e8:2f:6d:48:ec:f8:a3:eb:62:08:1c:d6:19:68:d1:96:
         fa:3b:06:9e:71:3c:ce:76:75:aa:f9:02:10:87:7f:fb:18:93:
         d6:de:04:b7:74:30:0d:96:91:d6:9e:7f:f5:ea:c2:24:32:0e:
         cd:e1:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:36 2025 by rpki-client