Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3139302e372e3131322e302f32302d3234203d3e20323632323230.roa
File:                     3139302e372e3131322e302f32302d3234203d3e20323632323230.roa (raw, json)
Hash identifier:          HqwQnIdB2VJFKl084M0HvWoWZBX3RaJxXlZt6hMgxbw=
Subject key identifier:   38:0F:43:A0:38:DF:09:C8:97:8B:54:64:22:0D:87:2A:17:98:45:4D
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       4391A1D212A6BC3C3A069C2FA75D3DAF376906A1
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3139302e372e3131322e302f32302d3234203d3e20323632323230.roa
Signing time:             Tue 04 Feb 2025 18:11:02 +0000
ROA not before:           Tue 04 Feb 2025 18:06:02 +0000
ROA not after:            Tue 03 Feb 2026 18:11:02 +0000
asID:                     262220
IP address blocks:        190.7.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:a1:d2:12:a6:bc:3c:3a:06:9c:2f:a7:5d:3d:af:37:69:06:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:06:02 2025 GMT
            Not After : Feb  3 18:11:02 2026 GMT
        Subject: CN=380F43A038DF09C8978B5464220D872A1798454D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:06:88:7b:91:ec:cc:de:c8:71:76:06:05:
                    4d:2e:85:72:17:21:87:f0:22:4c:ab:dc:3e:57:32:
                    69:af:c4:c1:db:04:e5:f1:e2:88:e4:f4:6b:38:33:
                    80:c8:9d:0d:3e:f9:68:32:f7:85:b6:cc:e7:09:b1:
                    38:46:d7:91:65:58:9b:2d:8b:35:6f:3d:b8:37:bf:
                    bf:81:9f:60:c0:4a:2c:5e:c7:63:fb:6d:21:a3:49:
                    3f:08:8c:84:7d:a6:0c:16:18:e9:4a:b0:29:b8:43:
                    da:45:2a:e2:63:cc:f7:f3:8c:bc:89:ca:10:af:4b:
                    f5:ce:fe:6a:7e:ae:13:d5:b8:84:a3:cd:64:60:2a:
                    cf:80:0e:9c:80:7a:a4:ba:9c:dc:fa:9d:a2:43:75:
                    ed:d0:f4:fb:be:a1:35:c8:a4:b3:8d:f8:5d:16:b6:
                    3a:89:97:cf:a9:77:c3:05:27:5c:d7:4e:1c:24:89:
                    99:8c:80:2e:aa:51:0d:23:95:43:6e:63:a1:e9:a7:
                    db:72:3d:41:3b:08:bf:f0:25:9e:7b:83:0d:fb:51:
                    23:3f:45:fc:fe:29:58:37:4f:26:d2:34:9c:df:f5:
                    cd:81:f9:6f:96:53:51:9f:c0:93:1d:b0:11:a6:a8:
                    ca:18:cc:e1:10:51:28:3c:db:9a:ec:35:db:61:58:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:43:A0:38:DF:09:C8:97:8B:54:64:22:0D:87:2A:17:98:45:4D
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3139302e372e3131322e302f32302d3234203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:08:11:08:12:3d:f2:9b:78:3a:a4:33:65:2a:03:8a:19:46:
         5e:cd:5c:6b:c2:bb:d5:bf:9c:74:10:bd:90:14:3f:c0:3a:d0:
         45:0b:ea:ed:ea:6f:9f:97:f1:b8:64:8c:ec:be:75:57:4a:eb:
         77:d9:e1:b4:58:b7:d5:dd:15:a3:64:d5:93:90:12:55:f9:83:
         37:49:f0:1b:86:d8:85:ee:15:48:a4:e5:f6:7d:ed:5f:7f:45:
         6a:3a:28:b1:e2:27:bf:a1:e7:28:b0:e1:7a:de:49:a7:47:c1:
         a2:57:5b:6a:ad:f8:28:41:ff:b8:4a:14:3f:30:0d:30:59:dd:
         b0:85:4e:7c:40:c1:62:5a:eb:e8:b3:87:12:0c:bc:0b:d3:9d:
         9a:a4:01:e8:d8:7c:b3:55:c2:b8:0d:98:68:ce:d0:da:b1:1d:
         d9:97:0a:b0:35:be:26:b3:a3:72:d8:65:4c:0c:64:c4:95:9b:
         b1:af:2d:d7:db:f7:ed:32:b0:38:ba:61:e5:85:89:63:24:4b:
         1d:26:e3:69:2b:08:a9:a0:0b:4d:85:3f:ec:2f:64:49:9e:fb:
         4a:3e:9d:71:08:fe:07:4e:6f:8a:55:2f:f1:14:41:a6:54:d5:
         f5:c0:32:d7:5f:e3:ff:2b:fd:b0:01:db:c4:ba:96:71:07:af:
         1b:39:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:23 2025 by rpki-client