Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa
File:                     3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa (raw, json)
Hash identifier:          ZUUUOD40ls5tsS8l3d7Ol6JrWShiqFejJP6xEYfmbkE=
Subject key identifier:   E0:C9:18:9E:35:3F:DF:C1:F7:72:37:DE:8B:B6:65:55:27:72:34:D5
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       44D541847E1D52E965022C010DED2859A1C1F102
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa
Signing time:             Tue 04 Feb 2025 18:47:45 +0000
ROA not before:           Tue 04 Feb 2025 18:42:45 +0000
ROA not after:            Tue 03 Feb 2026 18:47:45 +0000
asID:                     263795
IP address blocks:        190.105.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:41:84:7e:1d:52:e9:65:02:2c:01:0d:ed:28:59:a1:c1:f1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Feb  4 18:42:45 2025 GMT
            Not After : Feb  3 18:47:45 2026 GMT
        Subject: CN=E0C9189E353FDFC1F77237DE8BB66555277234D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:c4:2a:a8:8a:67:70:f5:b1:bf:55:62:cb:
                    7b:50:8d:b4:be:17:0d:1d:8b:1e:b0:da:32:9b:18:
                    4c:cc:9b:9d:87:e0:87:5d:c1:2c:5f:ee:a2:92:07:
                    69:58:d0:50:d6:c8:46:2a:fd:c8:ea:6e:dd:8f:41:
                    2d:ef:90:c3:ad:91:57:22:6d:01:4a:a7:1b:9a:f5:
                    40:5d:d6:22:e2:03:5e:11:2a:09:3d:08:ba:9a:4c:
                    b0:85:af:f5:17:e8:30:1c:14:9b:20:c4:ab:08:ba:
                    8b:b8:31:28:af:06:91:31:09:ae:44:f0:c0:06:b4:
                    0a:94:6c:31:a1:a3:42:a2:c5:d7:82:6a:a4:15:42:
                    15:8a:24:1f:4a:81:ef:0b:3a:8e:30:bb:b9:12:55:
                    18:71:c2:1d:bd:ce:77:85:9a:8a:8b:60:b2:d6:2e:
                    24:8c:10:b3:e6:67:59:4a:de:e2:c3:72:25:73:04:
                    07:2f:ea:c9:77:b0:dc:5b:80:2c:df:51:1c:c4:5b:
                    8a:88:9b:b5:d6:e9:92:34:86:c3:ff:70:07:f3:17:
                    43:38:0a:8e:24:3f:3b:a2:6b:dd:55:26:b7:03:04:
                    2f:23:21:77:4d:e2:be:ea:64:d8:74:a1:61:ea:d0:
                    f3:1d:96:d0:a6:23:ca:4f:83:fd:1e:53:ad:15:c3:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:18:9E:35:3F:DF:C1:F7:72:37:DE:8B:B6:65:55:27:72:34:D5
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:86:29:64:44:6e:9a:22:52:2e:7e:4d:25:28:b6:9d:56:
         40:0f:f9:86:ea:09:9b:85:60:79:93:be:bd:8e:33:6e:eb:0a:
         92:f9:9c:ec:ab:8f:fc:a8:42:69:43:70:66:e3:cc:00:c0:05:
         af:df:ee:22:65:04:dc:f8:ad:0c:17:dc:93:5d:24:b6:3a:11:
         37:c1:4c:3c:63:16:1e:91:9c:2d:fc:48:e6:62:8e:c7:c9:07:
         e3:14:a1:eb:09:fc:58:9d:27:f2:9d:69:b8:f2:82:60:48:43:
         20:c2:7a:9a:15:4e:e8:19:ca:71:12:4d:77:f1:c8:a1:b0:69:
         df:0f:e6:e2:a7:4e:08:6a:7d:2a:a5:69:15:0a:e0:c4:21:4e:
         61:26:05:92:a0:df:f8:50:0d:8c:e4:08:53:24:18:e7:b7:29:
         20:31:14:9f:ab:a4:c5:cd:ec:76:b8:22:5e:1c:2c:88:cc:88:
         1d:c1:05:22:b5:ab:17:e9:a7:83:fb:bd:43:f8:fc:47:e8:d6:
         62:8c:23:f8:a5:08:12:93:19:4b:fd:f1:48:92:e9:36:24:e3:
         75:f5:9b:2a:81:1e:04:44:8d:83:73:ed:03:ba:fe:75:3f:c4:
         9b:35:6e:fb:df:36:13:67:54:af:86:2a:cf:c1:ad:d7:82:76:
         de:2c:1d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:04 2025 by rpki-client