Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3138302e302f32342d3234203d3e203532323638.roa
File:                     3139302e31342e3138302e302f32342d3234203d3e203532323638.roa (raw, json)
Hash identifier:          sBHyAdYJYIBJRSpW3qldkjVmMNomtE/7W9vN5ONTVvA=
Subject key identifier:   E8:41:00:7D:49:0F:AB:04:A6:1D:4A:54:07:75:E3:91:36:EC:0D:52
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       3FD95C85B01A473F3C1AC865C3E8F9920EF59951
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3138302e302f32342d3234203d3e203532323638.roa
Signing time:             Fri 10 Jan 2025 13:25:01 +0000
ROA not before:           Fri 10 Jan 2025 13:20:01 +0000
ROA not after:            Fri 09 Jan 2026 13:25:01 +0000
asID:                     52268
IP address blocks:        190.14.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d9:5c:85:b0:1a:47:3f:3c:1a:c8:65:c3:e8:f9:92:0e:f5:99:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Jan 10 13:20:01 2025 GMT
            Not After : Jan  9 13:25:01 2026 GMT
        Subject: CN=E841007D490FAB04A61D4A540775E39136EC0D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:6b:80:78:72:82:c7:70:90:58:3d:12:55:
                    58:40:17:08:3c:5b:15:c0:2e:87:1d:a0:9e:30:50:
                    d9:74:4b:b3:d6:6e:d5:5e:8a:23:9a:e2:09:12:ea:
                    37:75:17:9e:7c:3c:16:cd:c8:ce:66:57:e9:61:8a:
                    b8:27:b2:2d:aa:88:f1:1d:ff:0b:6b:ff:cc:d5:f3:
                    e1:11:79:71:58:f9:5b:1c:be:82:44:3a:44:c0:cc:
                    fe:00:09:c6:9d:ad:b5:5a:2d:d0:31:c7:df:6d:9b:
                    ce:78:3b:7a:ea:fe:a3:b1:f2:03:94:5a:4b:87:a2:
                    75:39:95:65:20:a9:34:c9:81:2d:38:a4:a4:97:dd:
                    bf:eb:89:d2:1e:7e:d3:79:d3:52:29:d1:a4:95:38:
                    f3:71:18:39:c1:b9:e8:fe:29:f0:09:2a:2c:25:82:
                    56:c9:70:75:53:e5:0a:16:55:b8:10:6e:51:f3:42:
                    80:7e:5f:2e:52:c8:bc:3d:48:94:d7:4a:18:c9:83:
                    e5:13:75:b5:30:2f:0b:67:fc:74:f4:b2:58:e2:31:
                    a2:3b:1c:d3:30:88:8d:d5:a1:29:2f:e4:9c:d5:4c:
                    0a:96:06:48:f8:56:52:a6:7e:31:ae:c7:9c:0e:21:
                    a1:88:da:e3:9e:cf:63:9e:9f:2c:89:b5:e5:3e:8e:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:41:00:7D:49:0F:AB:04:A6:1D:4A:54:07:75:E3:91:36:EC:0D:52
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3138302e302f32342d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:1d:6f:d0:d8:a2:9a:f4:ff:64:21:ff:48:2e:1b:37:89:
         4d:88:0d:67:cf:d2:d7:80:76:73:23:f8:b4:48:6e:c7:21:68:
         26:ae:4f:d5:9a:df:09:6d:2e:19:97:2d:60:83:d7:9b:32:7c:
         d1:16:53:45:10:b0:55:0d:f4:ed:3d:8a:de:7b:0e:23:88:fb:
         3a:01:95:8c:0d:97:f3:a8:d0:ee:24:dc:8e:15:d9:bd:35:bb:
         bb:e7:ed:1c:8d:b9:ef:89:21:0b:a8:28:5e:15:7a:b3:24:da:
         1a:11:f9:c3:80:4d:ab:c9:ba:63:95:0a:f9:39:2c:b0:ec:18:
         98:c3:d5:27:ab:01:28:dc:68:b9:43:9f:89:bf:ed:b4:31:8b:
         b8:36:2c:62:7d:e6:b3:8d:15:28:8e:04:8a:00:6e:b7:35:a7:
         30:1a:6c:8c:a4:78:d8:8a:cd:89:e6:e1:2a:dc:ec:0f:83:64:
         48:dc:97:4e:be:86:1f:6e:ed:2f:ec:c4:12:8f:fb:ea:01:69:
         3b:d1:3c:2b:f2:bd:e0:45:f9:3e:45:9e:d6:43:a7:2a:a1:b7:
         23:3c:74:bd:37:6b:1f:fe:c1:57:7d:e2:67:65:f9:76:e4:af:
         1a:99:0e:b4:bb:44:65:2b:7f:35:0c:a7:d2:24:18:c7:2a:06:
         36:fe:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:41:28 2025 by rpki-client