Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa
File:                     3139302e3134322e302e302f31362d3234203d3e203231383236.roa (raw, json)
Hash identifier:          XOqWb4Z6dGCLm6N4uvpneOZu20NFr46+0ZP5WnXNMMc=
Subject key identifier:   98:1F:DE:42:67:CE:97:EF:9E:07:55:B8:53:3A:06:54:51:8F:A7:D8
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       637049F8515425DCAC54F7BC57FDC180D55B6A38
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa
Signing time:             Tue 04 Feb 2025 18:44:32 +0000
ROA not before:           Tue 04 Feb 2025 18:39:32 +0000
ROA not after:            Tue 03 Feb 2026 18:44:32 +0000
asID:                     21826
IP address blocks:        190.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:49:f8:51:54:25:dc:ac:54:f7:bc:57:fd:c1:80:d5:5b:6a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Feb  4 18:39:32 2025 GMT
            Not After : Feb  3 18:44:32 2026 GMT
        Subject: CN=981FDE4267CE97EF9E0755B8533A0654518FA7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:1f:3c:38:82:0c:d7:10:2f:62:d9:a9:bb:
                    3a:3b:c7:f0:7b:62:cb:10:fd:61:9c:4b:95:f7:52:
                    18:50:4c:31:98:6c:86:ae:3a:7d:7b:22:43:1a:47:
                    41:5a:51:2b:17:f3:39:00:ca:dc:f7:26:37:2a:f0:
                    8a:b2:ef:ed:cc:42:28:a2:9d:30:95:69:9c:0f:a3:
                    6f:fc:98:c2:4c:38:25:4d:3f:3c:9e:bb:07:38:0b:
                    91:3b:fe:80:79:9c:ef:7a:da:7a:04:7c:35:3a:13:
                    f8:51:47:4c:5a:66:a5:e6:67:49:d1:5b:3d:8e:de:
                    c6:26:e0:64:76:1a:d9:19:49:b3:d7:7f:69:5a:ca:
                    ed:b7:70:dd:1d:41:74:d8:e9:b7:ae:21:c2:f1:7d:
                    37:11:ac:fa:0d:9b:fd:91:20:14:e3:6d:cb:ec:38:
                    77:c5:b6:02:9e:14:c2:fe:19:a8:f3:c3:76:39:0b:
                    e3:13:3f:7b:d1:b5:72:1f:d5:7d:bd:13:80:b4:bc:
                    6f:a9:9b:45:a4:88:6c:2f:fe:d6:de:71:72:38:b3:
                    36:fe:5d:17:e3:f3:a5:24:22:c1:31:81:96:6d:65:
                    67:55:58:24:eb:17:65:e9:89:53:76:0c:08:90:08:
                    16:01:1e:6e:61:ce:2e:37:fc:f0:3a:12:77:ae:a2:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:DE:42:67:CE:97:EF:9E:07:55:B8:53:3A:06:54:51:8F:A7:D8
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:bb:ee:22:52:af:67:95:0b:14:cc:af:65:6d:d4:4d:66:
         fe:86:6d:94:8b:18:e2:34:00:c5:67:cc:fc:61:6b:34:76:78:
         c0:6f:e7:57:bf:32:04:47:cf:b6:19:7c:ae:14:c5:c9:2a:b6:
         9f:1c:59:49:98:21:64:ef:b0:a2:9c:f3:a2:a4:a0:c2:80:01:
         e5:7c:40:85:26:3e:f5:de:dd:f4:92:50:6b:f0:a3:be:d1:0c:
         65:f3:b6:42:89:15:7d:ab:7b:f6:14:fc:f4:85:c3:4f:4e:9c:
         78:0d:01:4a:b3:47:f4:2b:9d:f2:c4:0e:35:66:27:ee:c3:e8:
         31:c4:b3:48:da:58:3e:85:45:14:c1:82:1a:65:68:a3:76:dd:
         47:d9:bd:e9:32:c2:e6:3d:ee:cd:55:7b:88:f3:64:b3:00:f6:
         7b:6f:3d:3f:c3:0f:42:2b:27:4c:52:40:87:ae:40:ea:86:b9:
         2e:ca:a3:50:f7:55:a9:65:51:90:5e:05:7a:48:89:38:64:2b:
         f3:98:20:04:bd:20:5f:3d:b4:1f:82:b3:24:66:22:9a:e3:41:
         a8:4a:c0:60:db:af:e9:0a:c9:1f:16:2f:2b:93:2f:f9:77:12:
         06:80:ac:f2:ef:aa:1d:ac:8e:50:38:79:30:b3:b1:a7:5d:9c:
         84:09:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:12 2025 by rpki-client