Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e312e3139322e302f31382d3234203d3e203130323939.roa
File:                     3139302e312e3139322e302f31382d3234203d3e203130323939.roa (raw, json)
Hash identifier:          7j6s4Tjc2VQpwobsKFQl+hyqhz+RGXom9gU9qCyR4uM=
Subject key identifier:   12:AF:39:9D:76:11:37:92:AC:74:23:D9:65:2C:AB:E1:28:EF:7F:18
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       1308756A7F5DE3EE76B6BA2C245B5D21065B6E93
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e312e3139322e302f31382d3234203d3e203130323939.roa
Signing time:             Tue 04 Feb 2025 18:03:14 +0000
ROA not before:           Tue 04 Feb 2025 17:58:14 +0000
ROA not after:            Tue 03 Feb 2026 18:03:14 +0000
asID:                     10299
IP address blocks:        190.1.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:08:75:6a:7f:5d:e3:ee:76:b6:ba:2c:24:5b:5d:21:06:5b:6e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:14 2025 GMT
            Not After : Feb  3 18:03:14 2026 GMT
        Subject: CN=12AF399D76113792AC7423D9652CABE128EF7F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:8c:e6:5e:d0:86:4f:e9:70:8f:83:08:ba:
                    df:43:4f:91:8f:e0:aa:ce:06:b8:5a:c8:1f:ab:9e:
                    a9:85:cd:1d:05:4d:8a:a8:c6:4f:1e:7c:1b:0a:97:
                    b4:34:50:30:e4:fa:c4:aa:99:c2:c0:02:bc:84:e5:
                    9e:68:0b:e9:06:39:7a:99:dc:8e:e2:cb:7e:5c:63:
                    a7:4b:84:ca:01:4e:93:3c:84:a9:15:31:ca:f2:09:
                    99:c5:43:bb:eb:5d:e5:81:44:25:f2:5d:0a:5f:36:
                    4f:31:ae:e0:75:27:c4:5a:52:71:83:e0:62:f7:fe:
                    51:7b:1e:8d:87:68:67:fd:2d:83:f1:18:71:3d:88:
                    b3:0c:15:ab:03:ec:1c:12:32:23:60:5c:bb:c0:a3:
                    78:f7:68:70:be:47:a1:28:04:3c:6d:aa:e3:db:ef:
                    82:22:64:75:96:1e:24:ae:36:80:e5:7d:51:75:d6:
                    98:17:75:ce:71:4d:c6:05:00:6f:76:54:82:fd:22:
                    49:6c:36:74:bb:23:20:a3:af:0d:c9:16:11:72:29:
                    14:8a:4c:13:01:82:60:18:dc:70:59:08:b9:bb:52:
                    68:c8:11:4d:e8:ec:13:8a:4f:c3:81:93:7a:26:8e:
                    86:39:42:b2:04:88:1a:d7:93:c7:d3:0c:ad:fe:77:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:39:9D:76:11:37:92:AC:74:23:D9:65:2C:AB:E1:28:EF:7F:18
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e312e3139322e302f31382d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ad:1f:c4:c8:38:ce:cc:64:ef:d8:12:a4:44:0d:7a:48:3a:9f:
         f9:e8:56:6a:0d:10:37:2f:5b:92:33:45:9f:87:dd:65:6f:a5:
         de:5d:a2:7d:a7:bd:d6:5d:f4:59:08:3b:36:62:65:b2:15:e3:
         5a:8c:9e:a6:75:07:80:39:af:26:42:d6:e4:fb:49:d7:00:28:
         03:77:13:8e:31:72:db:7d:56:95:02:94:bc:d3:c4:3a:c9:62:
         6c:4c:9a:24:0c:7f:69:3b:63:5b:05:80:7c:3f:89:8a:a9:fb:
         81:1e:ed:22:dc:c4:9a:71:8b:5f:a3:34:8e:af:22:82:91:2d:
         9b:c7:8c:2b:80:da:16:58:90:6b:60:57:4f:ac:f8:95:23:25:
         3c:71:00:98:1a:5d:af:75:5e:88:08:09:04:2e:c1:00:25:a3:
         e7:ae:84:47:98:d9:0a:a0:26:ce:c6:a8:1d:23:79:e8:3d:0d:
         93:36:c9:63:66:8f:19:64:95:6f:e1:2e:6b:d7:2a:9e:5a:26:
         25:9c:c7:61:41:be:e8:62:55:f6:10:ff:43:d2:ed:1c:49:c2:
         32:5e:2c:79:89:e4:29:56:a1:c8:14:a6:bd:5c:9d:6c:66:93:
         c1:05:0b:27:66:04:54:47:0f:ac:cf:74:01:bd:af:12:98:93:
         63:a7:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:05:12 2025 by rpki-client