Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
File:                     3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa (raw, json)
Hash identifier:          qQ7ebZQVaxclRrIVU7d1vlheZKrqMplgVauWbtIcWac=
Subject key identifier:   C0:E2:75:0A:5D:BB:28:3E:5E:15:93:E0:B4:F5:D5:DE:65:05:0D:74
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       51176DC2CF3367BC54B9B8111BD62C7A80B6B5D4
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
Signing time:             Tue 04 Feb 2025 18:51:17 +0000
ROA not before:           Tue 04 Feb 2025 18:46:17 +0000
ROA not after:            Tue 03 Feb 2026 18:51:17 +0000
asID:                     28073
IP address blocks:        190.123.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:17:6d:c2:cf:33:67:bc:54:b9:b8:11:1b:d6:2c:7a:80:b6:b5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Feb  4 18:46:17 2025 GMT
            Not After : Feb  3 18:51:17 2026 GMT
        Subject: CN=C0E2750A5DBB283E5E1593E0B4F5D5DE65050D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:ba:1c:bf:6c:6c:f1:da:2b:0b:fb:66:e5:
                    74:3e:4d:f3:d7:de:b5:79:58:13:36:16:60:cb:c4:
                    2b:f9:55:98:42:e7:35:a5:c1:f2:1c:e1:32:34:08:
                    4c:ab:84:70:a7:7a:8f:c1:40:26:5f:63:51:2c:9d:
                    2f:2e:c9:1f:8d:6a:ca:49:30:58:83:80:72:45:22:
                    b5:27:be:60:c0:85:66:f5:e3:37:23:28:54:a9:48:
                    81:c6:2b:f5:b3:5c:93:f9:ea:22:cc:79:00:8b:7f:
                    92:da:41:80:29:3e:80:2a:b7:21:2c:44:19:6a:16:
                    29:bb:56:ed:d7:1f:19:7c:f0:21:3b:6a:e6:f5:26:
                    be:6f:61:12:20:34:0b:95:4d:ec:4a:4e:e0:de:fb:
                    e4:14:23:92:68:88:29:b8:4d:f7:8b:f9:7c:08:96:
                    f0:8a:bf:ac:c8:29:82:07:f0:9c:d8:e6:f5:62:9f:
                    ba:02:54:3d:90:62:03:e3:2d:ba:c7:2b:f1:11:fa:
                    78:3a:95:c8:d0:3d:51:6d:63:ca:78:d8:b9:33:1e:
                    83:6f:a9:b5:3d:27:fc:65:5f:56:c7:f3:65:36:f7:
                    fe:80:bf:c8:3e:70:fc:05:84:6e:d3:ce:47:2e:d7:
                    54:90:02:b1:d9:60:20:c2:3e:6c:bd:59:2b:66:fc:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:75:0A:5D:BB:28:3E:5E:15:93:E0:B4:F5:D5:DE:65:05:0D:74
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:32:0c:7d:85:49:aa:7a:aa:cf:66:4b:be:60:46:c1:77:38:
         32:f9:e4:9c:9b:02:f6:84:24:33:09:1d:54:e5:70:80:40:c6:
         7d:fa:5c:c7:fe:f0:58:03:ef:df:c0:b4:cd:d0:e9:85:8c:4b:
         b6:11:b0:c7:3d:2a:62:84:03:be:ba:a2:ba:70:96:3e:42:3a:
         d3:4b:17:48:9f:b7:a4:c3:af:dd:a6:2c:58:2e:ef:f2:30:4f:
         3b:84:6f:64:d0:8e:f8:1f:4a:8d:3e:67:40:32:08:1d:ea:1c:
         c8:58:31:cb:24:4b:34:ed:30:36:a3:fe:9d:1b:f6:db:6c:ca:
         9c:3e:d6:ce:af:cc:bf:83:2c:a4:29:91:b5:5b:75:57:12:91:
         81:c6:aa:ed:8b:77:86:bd:64:c8:74:b3:b6:9b:b2:b4:bc:b7:
         e1:32:51:52:bc:a2:a8:fb:4c:aa:8c:aa:5c:d0:31:39:7e:27:
         da:44:66:90:ae:4b:80:de:9d:18:94:fd:e1:1b:6f:b8:94:98:
         ee:62:3b:7b:8d:66:40:79:04:4b:00:20:7b:f0:4c:df:de:13:
         f1:8c:13:42:77:de:ea:a0:d7:51:01:a9:a5:0a:99:34:7b:10:
         f0:8a:6e:e9:98:87:44:be:dc:c8:54:7e:52:67:f2:e3:de:f2:
         21:19:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client