Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/3139302e38332e37322e302f32322d3234203d3e20323731383233.roa
File:                     3139302e38332e37322e302f32322d3234203d3e20323731383233.roa (raw, json)
Hash identifier:          naE0dlCIvwMaCYw7JwSsXke8sXgq4Jjc+kk5bSaU4ZA=
Subject key identifier:   5B:E8:94:82:62:B3:47:64:E2:0D:DB:3E:2C:C7:AC:DD:7D:1A:58:42
Certificate issuer:       /CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25
Certificate serial:       693A4EAC98740C5D3B44B10888ED9BA16A3B51B4
Authority key identifier: 9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/3139302e38332e37322e302f32322d3234203d3e20323731383233.roa
Signing time:             Tue 04 Feb 2025 18:54:58 +0000
ROA not before:           Tue 04 Feb 2025 18:49:58 +0000
ROA not after:            Tue 03 Feb 2026 18:54:58 +0000
asID:                     271823
IP address blocks:        190.83.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3a:4e:ac:98:74:0c:5d:3b:44:b1:08:88:ed:9b:a1:6a:3b:51:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25
        Validity
            Not Before: Feb  4 18:49:58 2025 GMT
            Not After : Feb  3 18:54:58 2026 GMT
        Subject: CN=5BE8948262B34764E20DDB3E2CC7ACDD7D1A5842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:13:c2:fe:7c:28:2b:a6:fa:b3:ba:88:fe:
                    6a:79:38:fb:5a:c0:b0:0b:ba:13:67:5d:6c:c4:a6:
                    8b:4c:6b:38:e3:73:51:aa:9c:ef:f1:98:93:1b:7a:
                    ca:ba:f6:fe:ef:31:12:af:13:c9:e4:e6:fc:fb:7f:
                    e4:31:80:12:fc:e5:2e:d7:08:d9:55:15:ea:91:b1:
                    36:c8:05:c4:ee:1e:8d:cf:46:bb:ab:68:80:3a:0d:
                    f2:6d:b5:9d:17:5d:1d:c1:b1:ee:24:51:03:e6:b3:
                    3a:cc:48:d6:25:80:6b:c4:ee:58:25:a3:57:97:ae:
                    4e:ff:d5:17:13:8a:e7:7a:0e:27:08:88:e4:62:a1:
                    87:a0:8a:ee:0e:f6:d3:de:8f:81:8c:96:6c:a5:87:
                    4e:42:0f:98:55:e3:e4:eb:0d:87:47:78:2b:11:f4:
                    ec:1b:77:6b:fa:4f:e1:95:66:dc:1f:c8:33:c0:b0:
                    2b:c7:d0:15:0b:3b:dd:6c:ba:26:16:34:91:ba:05:
                    a2:d3:50:5f:89:9f:84:76:66:77:f5:77:1f:13:49:
                    50:37:c9:9d:53:22:96:5e:51:fa:13:a6:c9:cf:b2:
                    ef:9a:91:c1:d2:7f:6e:34:85:ff:ab:b8:0d:0f:7a:
                    ed:11:1e:93:2d:e0:ca:7c:6c:64:3e:ca:73:69:5c:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:94:82:62:B3:47:64:E2:0D:DB:3E:2C:C7:AC:DD:7D:1A:58:42
            X509v3 Authority Key Identifier:
                keyid:9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/3139302e38332e37322e302f32322d3234203d3e20323731383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:67:af:d5:e5:0a:b6:6d:97:07:c7:f5:56:2d:e0:8d:05:a6:
         8d:55:06:5b:b5:fa:25:ab:5d:b6:48:c8:d8:12:64:df:6e:be:
         65:cc:1b:08:ca:4e:e7:47:7e:8c:85:be:d7:ec:22:ed:32:c2:
         2f:cd:4e:ff:bf:5e:08:e5:ce:52:ea:e7:7b:90:ac:8c:86:59:
         f2:c6:92:46:f6:84:e2:85:d1:93:fd:35:5c:56:9a:a7:34:ba:
         6f:81:9c:3d:b0:4b:e8:d1:bc:4e:f7:4a:e1:c0:3d:a3:b4:0c:
         1a:2a:c2:ec:3e:c7:67:86:04:90:d6:a8:66:08:ff:76:9c:dd:
         72:6a:61:c1:ee:70:46:8b:b7:35:33:50:7e:92:47:52:b3:4c:
         84:4d:a4:91:cb:a2:43:59:87:72:ac:46:91:be:b0:39:68:18:
         c5:64:90:71:00:95:93:f2:38:4b:3e:bf:48:5e:1b:1b:6c:6e:
         14:0f:1e:79:08:d8:0f:73:5e:2f:00:c8:dd:51:74:45:10:34:
         fd:ce:bc:a3:b4:d0:e3:a9:e7:b3:0a:4d:4c:42:1d:69:24:e5:
         91:75:98:7b:90:64:d1:07:61:03:f9:4d:2e:ba:6c:3c:ff:ea:
         24:a9:66:c6:41:48:08:11:b4:61:62:c0:45:18:0f:4a:32:31:
         4b:d5:02:ce
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaTpOrJh0DF07RLEIiO2boWo7UbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNBNzZGNjdGOTgxMDdDMkQ2QjNGMTQ4Q0E2QTBGRjk1
M0Y3NEIyNTAeFw0yNTAyMDQxODQ5NThaFw0yNjAyMDMxODU0NThaMDMxMTAvBgNV
BAMTKDVCRTg5NDgyNjJCMzQ3NjRFMjBEREIzRTJDQzdBQ0REN0QxQTU4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWRPC/nwoK6b6s7qI/mp5OPta
wLALuhNnXWzEpotMazjjc1GqnO/xmJMbesq69v7vMRKvE8nk5vz7f+QxgBL85S7X
CNlVFeqRsTbIBcTuHo3PRruraIA6DfJttZ0XXR3Bse4kUQPmszrMSNYlgGvE7lgl
o1eXrk7/1RcTiud6DicIiORioYegiu4O9tPej4GMlmylh05CD5hV4+TrDYdHeCsR
9Owbd2v6T+GVZtwfyDPAsCvH0BULO91suiYWNJG6BaLTUF+Jn4R2Znf1dx8TSVA3
yZ1TIpZeUfoTpsnPsu+akcHSf240hf+ruA0Peu0RHpMt4Mp8bGQ+ynNpXPUtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUW+iUgmKzR2TiDds+LMes3X0aWEIwHwYDVR0j
BBgwFoAUnKdvZ/mBB8LWs/FIymoP+VP3SyUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQURGOEI0QThENjI4NUEyMDMzRjE2MDIzMzdDQUZCM0My
REQ5NEVEQzJFNUEyNTQ4MDAzM0ZFREZCNzc2QjJDLzAvOUNBNzZGNjdGOTgxMDdD
MkQ2QjNGMTQ4Q0E2QTBGRjk1M0Y3NEIyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0E3NkY2N0Y5ODEwN0MyRDZC
M0YxNDhDQTZBMEZGOTUzRjc0QjI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0FERjhCNEE4RDYyODVBMjAzM0YxNjAyMzM3Q0FGQjNDMkREOTRFREMy
RTVBMjU0ODAwMzNGRURGQjc3NkIyQy8wLzMxMzkzMDJlMzgzMzJlMzczMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5TSDAN
BgkqhkiG9w0BAQsFAAOCAQEANmev1eUKtm2XB8f1Vi3gjQWmjVUGW7X6JatdtkjI
2BJk326+ZcwbCMpO50d+jIW+1+wi7TLCL81O/79eCOXOUurne5CsjIZZ8saSRvaE
4oXRk/01XFaapzS6b4GcPbBL6NG8TvdK4cA9o7QMGirC7D7HZ4YEkNaoZgj/dpzd
cmphwe5wRou3NTNQfpJHUrNMhE2kkcuiQ1mHcqxGkb6wOWgYxWSQcQCVk/I4Sz6/
SF4bG2xuFA8eeQjYD3NeLwDI3VF0RRA0/c68o7TQ46nnswpNTEIdaSTlkXWYe5Bk
0QdhA/lNLrpsPP/qJKlmxkFICBG0YWLARRgPSjIxS9UCzg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:54:58 2025 by rpki-client