Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3234203d3e203532343235.roa
File:                     3139302e39322e3130382e302f32332d3234203d3e203532343235.roa (raw, json)
Hash identifier:          RnAcgeaHAPGHe97KHypDFNgQ9JFt5vzyi53Vgf6MFHU=
Subject key identifier:   E0:42:C0:2B:34:D8:C1:E9:35:0E:7E:C4:5A:13:0F:01:B5:C1:C9:75
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       58B583A1F8E11DE94EC356DCE90D621F2018BD38
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3234203d3e203532343235.roa
Signing time:             Tue 04 Feb 2025 18:06:00 +0000
ROA not before:           Tue 04 Feb 2025 18:01:00 +0000
ROA not after:            Tue 03 Feb 2026 18:06:00 +0000
asID:                     52425
IP address blocks:        190.92.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b5:83:a1:f8:e1:1d:e9:4e:c3:56:dc:e9:0d:62:1f:20:18:bd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Feb  4 18:01:00 2025 GMT
            Not After : Feb  3 18:06:00 2026 GMT
        Subject: CN=E042C02B34D8C1E9350E7EC45A130F01B5C1C975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:14:63:27:d8:cc:5c:c8:d3:89:de:d3:a3:
                    85:47:bd:da:3b:3f:a0:3a:a1:e9:02:00:c4:96:c7:
                    05:2b:21:8d:bb:c0:03:56:7e:d9:88:7b:3e:ca:cb:
                    87:ec:38:e8:c5:12:ef:d0:2b:3d:15:3b:2e:aa:db:
                    96:b3:1d:3c:7a:28:11:35:5f:d8:10:a7:da:0a:fb:
                    4d:44:03:5f:a2:0a:9e:db:6d:46:2e:b2:ae:ae:6c:
                    6d:6b:c1:85:22:d1:f3:84:3c:7f:59:77:a0:26:1c:
                    a1:b1:c9:71:74:c5:7b:ed:1b:bb:39:27:66:c3:fc:
                    8a:36:45:f0:cd:9e:09:79:0d:59:8b:0d:a2:e6:57:
                    92:45:d5:bb:6e:55:f0:4f:d8:9a:31:3f:18:91:13:
                    4a:a5:6d:cc:60:83:6b:87:70:c8:70:7b:b5:b7:b5:
                    46:14:30:58:0a:ae:b5:56:9e:2c:8d:c3:8e:7a:2b:
                    95:d9:c2:ae:96:8d:95:5c:2d:83:1e:ef:0d:6b:d5:
                    3e:77:ac:9c:97:ad:58:e9:1b:bc:30:df:8e:da:7a:
                    99:aa:4b:b5:dc:77:9e:c0:27:fa:67:8b:df:51:d8:
                    88:bb:75:d5:1a:df:8a:67:4b:c9:10:fa:3a:94:76:
                    a5:ca:a1:9b:97:24:83:78:81:e7:1b:da:d9:b3:97:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:42:C0:2B:34:D8:C1:E9:35:0E:7E:C4:5A:13:0F:01:B5:C1:C9:75
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3234203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:c4:e9:c4:96:fb:46:96:49:da:9a:a6:38:01:c3:8b:9f:2e:
         03:9a:8d:61:9b:9f:fb:08:78:d1:33:f9:04:5b:40:5c:21:95:
         b3:5c:91:50:ce:93:10:85:11:f5:e3:ea:f8:9b:1a:4b:8b:ae:
         81:0c:25:26:df:aa:f1:61:46:ed:3d:01:6c:3d:c3:f9:17:9a:
         78:f1:55:e7:92:56:28:d8:7a:5e:62:32:6b:00:43:30:e8:ec:
         33:28:8b:67:d3:9b:19:c7:29:f4:81:61:05:21:e6:36:db:91:
         8f:b6:02:8b:6f:b2:3f:8d:0b:30:b7:2a:94:5a:b5:36:cf:c8:
         b7:cd:d6:fe:54:8c:0a:aa:8e:50:bb:df:10:87:03:fd:9f:a2:
         29:59:40:4c:87:a3:53:9f:76:d1:4c:c7:6f:04:04:df:ec:12:
         a4:b1:6c:ec:09:11:f8:48:eb:e3:2c:1d:0c:ea:26:da:74:75:
         ef:4c:ea:64:4d:d1:b1:8a:8d:f5:12:80:d5:0c:5b:ad:5b:28:
         b9:d0:99:81:86:f3:47:88:c8:b9:08:7d:c8:e3:de:4d:60:37:
         22:f2:ab:09:7b:c3:2e:38:a0:37:08:15:21:f7:40:af:2a:3b:
         20:e5:4f:c2:7c:76:5e:24:5a:df:25:e8:64:a8:82:45:a2:44:
         ff:81:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:56 2025 by rpki-client