Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3139302e33322e302e302f31342d3234203d3e203131353536.roa
File:                     3139302e33322e302e302f31342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          PhyDOiYhd3hobsyTyTcrCU3sZ7L3ryYuGfoDhbHEsig=
Subject key identifier:   41:D5:47:24:44:CC:F6:DC:96:5E:A9:4A:33:90:C0:65:67:13:31:24
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       0BAB923C93E3015BF96777320795CC82EFBD845A
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3139302e33322e302e302f31342d3234203d3e203131353536.roa
Signing time:             Tue 04 Feb 2025 18:48:41 +0000
ROA not before:           Tue 04 Feb 2025 18:43:41 +0000
ROA not after:            Tue 03 Feb 2026 18:48:41 +0000
asID:                     11556
IP address blocks:        190.32.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ab:92:3c:93:e3:01:5b:f9:67:77:32:07:95:cc:82:ef:bd:84:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Feb  4 18:43:41 2025 GMT
            Not After : Feb  3 18:48:41 2026 GMT
        Subject: CN=41D5472444CCF6DC965EA94A3390C06567133124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:68:07:f5:5e:de:c8:fc:40:d2:be:de:33:
                    4d:d0:3a:72:41:68:56:98:97:54:17:5e:60:fe:d4:
                    e7:50:2b:26:63:33:2b:f1:18:66:27:5a:44:e2:f8:
                    45:82:7b:7f:c3:c0:e4:69:42:10:75:50:99:f8:1f:
                    22:3d:ea:2c:02:40:fe:81:fd:41:55:bf:2b:4b:c4:
                    ba:0e:7f:ad:ef:8a:2e:5f:37:07:7d:ad:64:a2:e1:
                    e9:b5:9d:97:d2:4e:23:be:b3:bf:7e:2d:a2:14:d4:
                    ee:04:ec:5b:0d:39:b1:ad:23:40:c2:22:10:99:26:
                    ee:2d:f4:37:5c:ce:01:64:d8:5d:10:e4:23:7a:36:
                    bd:25:75:c8:c5:87:63:2c:75:ec:4c:3e:ef:40:47:
                    0c:1a:8e:e3:c2:2c:f0:9e:4f:7e:e0:61:5b:65:78:
                    a2:94:d4:d8:b0:d7:82:d0:65:44:a2:51:9f:05:73:
                    d0:07:b6:b7:24:8d:57:eb:ba:84:2a:92:1c:c7:2f:
                    63:97:3c:1c:f1:93:2f:fc:8f:ab:ab:30:ea:dd:ed:
                    b5:0a:8e:5d:98:63:9a:56:39:eb:a5:3a:ff:cf:13:
                    e1:d6:1a:e0:fd:ee:aa:11:c5:90:90:f0:1b:9e:14:
                    fa:80:56:17:5a:21:2a:1b:6b:de:64:f0:d7:42:67:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:47:24:44:CC:F6:DC:96:5E:A9:4A:33:90:C0:65:67:13:31:24
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3139302e33322e302e302f31342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:92:d1:39:4a:da:4e:d2:9e:17:b3:37:f4:81:06:cd:46:
         43:23:18:da:9d:22:50:8a:45:c7:01:5e:e5:db:16:2a:ef:db:
         4b:9a:7b:50:11:0e:45:c6:b6:86:60:5c:64:1f:54:88:0a:46:
         4f:69:35:60:23:8d:f2:3f:72:0f:5e:2f:62:84:4a:85:44:0d:
         1a:8d:cd:3d:03:cd:07:ee:9c:79:5d:3f:0d:47:14:1e:bc:d3:
         28:2b:ee:12:d8:08:9f:c2:31:76:73:10:34:e1:a0:c8:b5:45:
         f1:6e:2e:5d:8b:54:f1:01:43:41:a4:8a:01:0c:02:7d:02:1e:
         ec:cc:d2:e2:ac:6a:84:76:24:11:9e:65:81:dd:5d:f4:f5:77:
         04:57:4c:ff:cf:ee:40:d8:a9:a3:76:67:fb:86:13:aa:d8:c0:
         79:a0:75:bb:45:7c:1e:2a:61:03:59:11:09:a7:fe:54:c2:8f:
         8d:00:e6:a5:9f:6e:17:40:ed:45:44:cd:c8:53:d6:c3:2a:8e:
         d1:3f:67:a7:b3:ba:56:6a:4d:c0:68:78:0e:51:4d:c3:37:aa:
         1f:00:cf:e0:d5:4c:b2:f9:2e:39:27:09:61:5a:d7:3a:86:12:
         77:b6:8e:78:9e:a1:e3:6e:26:05:dd:31:4b:f2:e3:e1:1a:03:
         86:c0:89:f4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUC6uSPJPjAVv5Z3cyB5XMgu+9hFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3NUE4OEJGMjIxMzc3MkEzNjM3QjhCRDFGNzc1RUM5
OEYyMjc1RjAeFw0yNTAyMDQxODQzNDFaFw0yNjAyMDMxODQ4NDFaMDMxMTAvBgNV
BAMTKDQxRDU0NzI0NDRDQ0Y2REM5NjVFQTk0QTMzOTBDMDY1NjcxMzMxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwGgH9V7eyPxA0r7eM03QOnJB
aFaYl1QXXmD+1OdQKyZjMyvxGGYnWkTi+EWCe3/DwORpQhB1UJn4HyI96iwCQP6B
/UFVvytLxLoOf63vii5fNwd9rWSi4em1nZfSTiO+s79+LaIU1O4E7FsNObGtI0DC
IhCZJu4t9DdczgFk2F0Q5CN6Nr0ldcjFh2MsdexMPu9ARwwajuPCLPCeT37gYVtl
eKKU1Niw14LQZUSiUZ8Fc9AHtrckjVfruoQqkhzHL2OXPBzxky/8j6urMOrd7bUK
jl2YY5pWOeulOv/PE+HWGuD97qoRxZCQ8BueFPqAVhdaISoba95k8NdCZ7kPAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUQdVHJETM9tyWXqlKM5DAZWcTMSQwHwYDVR0j
BBgwFoAUeHWoi/IhN3KjY3uL0fd17JjyJ18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUZDOUU1MURFMjY5RDI4RENERTBCQjIyODM4NzFGMjZE
Nzc4QjgwNDUxMzMzMjc2N0YyRjBBRTM5MUZBOUJELzAvNzg3NUE4OEJGMjIxMzc3
MkEzNjM3QjhCRDFGNzc1RUM5OEYyMjc1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc1QTg4QkYyMjEzNzcyQTM2
MzdCOEJEMUY3NzVFQzk4RjIyNzVGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVGQzlFNTFERTI2OUQyOERDREUwQkIyMjgzODcxRjI2RDc3OEI4MDQ1
MTMzMzI3NjdGMkYwQUUzOTFGQTlCRC8wLzMxMzkzMDJlMzMzMjJlMzAyZTMwMmYz
MTM0MmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCviAwDQYJKoZI
hvcNAQELBQADggEBAEbkktE5StpO0p4Xszf0gQbNRkMjGNqdIlCKRccBXuXbFirv
20uae1ARDkXGtoZgXGQfVIgKRk9pNWAjjfI/cg9eL2KESoVEDRqNzT0DzQfunHld
Pw1HFB680ygr7hLYCJ/CMXZzEDThoMi1RfFuLl2LVPEBQ0GkigEMAn0CHuzM0uKs
aoR2JBGeZYHdXfT1dwRXTP/P7kDYqaN2Z/uGE6rYwHmgdbtFfB4qYQNZEQmn/lTC
j40A5qWfbhdA7UVEzchT1sMqjtE/Z6ezulZqTcBoeA5RTcM3qh8Az+DVTLL5Ljkn
CWFa1zqGEne2jnieoeNuJgXdMUvy4+EaA4bAifQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:43 2025 by rpki-client