Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa
File:                     3139302e39342e3134342e302f32312d3234203d3e203237363638.roa (raw, json)
Hash identifier:          KdJlx4y3ey/Je4vPpkjbeTUOY+tvzO/28cxzjUXcjr0=
Subject key identifier:   4C:7D:A6:50:16:66:76:1D:5B:FA:AF:4E:44:AD:AB:FD:1A:D4:25:43
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       0BE247871286B10B3557E0BE80CC3CD7C7D14E83
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa
Signing time:             Tue 04 Feb 2025 19:57:45 +0000
ROA not before:           Tue 04 Feb 2025 19:52:45 +0000
ROA not after:            Tue 03 Feb 2026 19:57:45 +0000
asID:                     27668
IP address blocks:        190.94.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e2:47:87:12:86:b1:0b:35:57:e0:be:80:cc:3c:d7:c7:d1:4e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Feb  4 19:52:45 2025 GMT
            Not After : Feb  3 19:57:45 2026 GMT
        Subject: CN=4C7DA6501666761D5BFAAF4E44ADABFD1AD42543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a2:59:a0:0f:fd:a3:53:bc:8d:32:41:6e:20:
                    2a:77:a3:c2:46:99:90:aa:98:ea:b9:60:d1:ad:af:
                    f8:f5:76:b2:7a:90:82:92:55:ce:6b:91:db:ab:63:
                    29:bb:a8:ba:de:c5:cb:c1:2b:6d:53:29:7a:26:ef:
                    76:c4:3a:6d:d3:32:9a:60:c8:5a:9c:dc:78:f9:c4:
                    7f:f3:d4:dd:9e:c6:2e:8d:41:c9:5a:32:e4:92:a8:
                    fc:df:06:8a:d8:1c:8c:38:83:9c:01:28:32:2b:23:
                    29:08:0e:46:05:29:44:01:90:ed:9b:2c:22:01:ca:
                    5e:a2:e2:ca:a6:7b:38:c1:3c:7f:b1:2f:22:a8:90:
                    93:0f:30:85:5c:f9:8f:0f:5e:c8:91:2f:cc:4a:e1:
                    07:55:23:88:4a:1c:4c:bc:37:e6:6d:41:0f:83:0c:
                    1f:14:30:3d:95:d1:98:cc:16:de:ed:25:c7:b2:4d:
                    9d:5e:0c:30:6f:47:b0:05:57:29:0c:33:74:c3:71:
                    44:1c:3e:48:ed:26:7c:7f:93:1e:65:b2:ba:47:4a:
                    47:df:bc:1f:c7:75:f6:dd:31:28:57:f0:af:e5:fc:
                    15:4a:32:cf:78:68:68:08:e8:14:88:a9:f9:02:47:
                    f1:40:14:1a:2a:b7:3e:3b:e3:d9:0f:fa:63:05:30:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7D:A6:50:16:66:76:1D:5B:FA:AF:4E:44:AD:AB:FD:1A:D4:25:43
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:68:2e:7d:50:93:7b:70:c2:03:61:70:72:db:f1:1a:8d:a5:
         70:04:2a:b3:4f:7c:47:02:e6:61:2a:11:d4:fa:30:b5:9b:73:
         45:5f:99:1b:2a:e1:cb:26:c4:38:da:2b:4e:01:22:26:98:d6:
         94:e5:80:5f:d6:df:2b:51:15:7f:a0:01:71:69:ba:50:54:b5:
         bf:b6:de:7c:c3:e3:a1:48:7c:6e:b4:c1:e3:8b:c1:42:db:27:
         37:4c:3b:2e:8c:05:2e:a3:92:2e:02:f1:d9:3b:59:b7:81:0a:
         29:cb:8a:8d:94:b5:cc:16:1f:51:f8:7e:ab:d9:14:1e:e5:7d:
         8c:c0:65:df:3a:b0:a9:66:7c:20:35:d0:73:16:38:b3:3b:cf:
         54:6d:8f:50:12:cd:56:c4:8d:e6:08:44:69:b3:6a:ad:85:bd:
         e3:53:7c:e4:50:f9:f8:19:06:b0:e7:84:77:87:ae:e2:3c:3d:
         f9:bb:91:b5:4b:8c:05:68:42:4a:72:57:b7:58:56:40:c8:53:
         16:2f:67:6e:72:9f:c6:06:86:ca:e2:47:88:fe:2c:59:7c:da:
         9b:f1:97:99:d8:a6:af:36:1d:ed:cb:73:e0:36:77:c7:4c:4f:
         ee:eb:32:63:fe:de:5a:54:39:2d:31:fd:30:26:75:69:4e:cb:
         a6:88:2c:34
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC+JHhxKGsQs1V+C+gMw818fRToMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE2NzI2MjdDRTdFNzI3RUZGNjBBNTZEMEE0NjZGMTUz
MTVCN0ZEMDAeFw0yNTAyMDQxOTUyNDVaFw0yNjAyMDMxOTU3NDVaMDMxMTAvBgNV
BAMTKDRDN0RBNjUwMTY2Njc2MUQ1QkZBQUY0RTQ0QURBQkZEMUFENDI1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmolmgD/2jU7yNMkFuICp3o8JG
mZCqmOq5YNGtr/j1drJ6kIKSVc5rkdurYym7qLrexcvBK21TKXom73bEOm3TMppg
yFqc3Hj5xH/z1N2exi6NQclaMuSSqPzfBorYHIw4g5wBKDIrIykIDkYFKUQBkO2b
LCIByl6i4sqmezjBPH+xLyKokJMPMIVc+Y8PXsiRL8xK4QdVI4hKHEy8N+ZtQQ+D
DB8UMD2V0ZjMFt7tJceyTZ1eDDBvR7AFVykMM3TDcUQcPkjtJnx/kx5lsrpHSkff
vB/HdfbdMShX8K/l/BVKMs94aGgI6BSIqfkCR/FAFBoqtz4749kP+mMFMPt7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTH2mUBZmdh1b+q9ORK2r/RrUJUMwHwYDVR0j
BBgwFoAUYWcmJ85+cn7/YKVtCkZvFTFbf9AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzhBNDYyMDc0Qjk4RDNGOTYzODgyMUY5MDYwREVDREUx
NjM3RkNBQjdCNUZDRDZBNjlEOTQ1MDE2N0EyNzk4LzAvNjE2NzI2MjdDRTdFNzI3
RUZGNjBBNTZEMEE0NjZGMTUzMTVCN0ZEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MTY3MjYyN0NFN0U3MjdFRkY2
MEE1NkQwQTQ2NkYxNTMxNUI3RkQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM4QTQ2MjA3NEI5OEQzRjk2Mzg4MjFGOTA2MERFQ0RFMTYzN0ZDQUI3
QjVGQ0Q2QTY5RDk0NTAxNjdBMjc5OC8wLzMxMzkzMDJlMzkzNDJlMzEzNDM0MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA75ekDAN
BgkqhkiG9w0BAQsFAAOCAQEAdmgufVCTe3DCA2FwctvxGo2lcAQqs098RwLmYSoR
1PowtZtzRV+ZGyrhyybEONorTgEiJpjWlOWAX9bfK1EVf6ABcWm6UFS1v7befMPj
oUh8brTB44vBQtsnN0w7LowFLqOSLgLx2TtZt4EKKcuKjZS1zBYfUfh+q9kUHuV9
jMBl3zqwqWZ8IDXQcxY4szvPVG2PUBLNVsSN5ghEabNqrYW941N85FD5+BkGsOeE
d4eu4jw9+buRtUuMBWhCSnJXt1hWQMhTFi9nbnKfxgaGyuJHiP4sWXzam/GXmdim
rzYd7ctz4DZ3x0xP7usyY/7eWlQ5LTH9MCZ1aU7LpogsNA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:06:16 2025 by rpki-client