Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/3139302e3138312e302e302f31382d3234203d3e203236323130.roa
File:                     3139302e3138312e302e302f31382d3234203d3e203236323130.roa (raw, json)
Hash identifier:          UzIfjY4LRPqssyFpG9ExPDuvxQrzZE6mrih3UZw4i90=
Subject key identifier:   E6:3A:E3:8B:37:77:06:69:41:B5:3B:72:25:A2:79:93:97:2A:C0:59
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       6443C9FB88EB1803AC509E9269E9465B080D3400
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/3139302e3138312e302e302f31382d3234203d3e203236323130.roa
Signing time:             Tue 04 Feb 2025 18:17:51 +0000
ROA not before:           Tue 04 Feb 2025 18:12:51 +0000
ROA not after:            Tue 03 Feb 2026 18:17:51 +0000
asID:                     26210
IP address blocks:        190.181.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:43:c9:fb:88:eb:18:03:ac:50:9e:92:69:e9:46:5b:08:0d:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Feb  4 18:12:51 2025 GMT
            Not After : Feb  3 18:17:51 2026 GMT
        Subject: CN=E63AE38B3777066941B53B7225A27993972AC059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:a9:4a:96:d8:8c:d7:a8:1c:05:9e:ab:32:
                    e9:d8:fc:75:94:39:ec:3d:32:af:8a:e1:26:4e:bb:
                    1f:06:8d:db:23:92:9c:d0:9e:aa:b9:b1:12:a1:c4:
                    95:f4:16:1e:8c:22:51:63:d6:9e:b2:24:7f:82:12:
                    af:dd:b0:c3:44:26:8d:46:ae:ce:bb:1b:4a:78:9e:
                    17:3d:de:c9:96:d8:87:92:0c:c1:ac:20:e9:db:e9:
                    30:dd:b1:55:46:33:1e:d8:53:08:9d:b5:fa:b1:40:
                    14:9c:63:7c:f6:55:12:b3:71:a9:40:d9:7f:40:49:
                    a6:a8:4e:b3:ac:55:90:b6:ba:58:41:21:34:b1:97:
                    9d:47:8a:e6:7e:89:4a:e9:33:eb:44:55:10:52:35:
                    86:6b:51:20:a9:5d:d7:e9:4c:1d:b4:e2:92:16:bf:
                    12:6d:0d:40:bb:e5:8a:1e:6d:d5:7b:43:fc:4f:49:
                    94:41:bc:c1:ab:49:6f:82:19:84:21:09:31:d3:df:
                    01:e5:04:51:13:ff:56:d1:8d:d5:eb:99:e5:36:17:
                    bb:9e:45:e1:ab:a9:bd:ec:9f:42:a6:89:a8:c3:6b:
                    73:f0:34:89:66:09:32:e8:34:a2:88:16:73:53:76:
                    e5:f3:58:14:3e:80:54:be:aa:df:62:af:0c:d5:3b:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3A:E3:8B:37:77:06:69:41:B5:3B:72:25:A2:79:93:97:2A:C0:59
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/3139302e3138312e302e302f31382d3234203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:aa:e8:b3:ed:67:56:24:74:a0:f0:0f:b2:22:93:09:53:
         79:2a:ff:47:ed:6b:b7:08:39:4a:1c:3b:d6:54:17:6c:c7:32:
         4e:b9:4a:3e:3f:54:3c:95:b3:0e:75:23:04:d3:c4:5f:ac:5e:
         62:65:39:b7:4f:72:a3:0b:92:be:c7:ba:50:ee:3f:0e:84:8c:
         ae:ae:0b:53:ad:4e:0e:be:f3:3a:ef:e4:5d:01:80:ae:9b:46:
         e8:73:ea:b3:3d:07:a7:90:e2:58:17:3c:4a:0b:91:ee:b7:de:
         94:87:25:ba:b9:b2:98:39:15:77:7a:ec:5f:05:14:31:d5:ae:
         3e:92:cc:d7:41:f0:89:b1:24:c6:42:26:e3:f0:71:69:9c:1e:
         1d:90:69:56:45:c8:02:cd:eb:b1:2c:f8:10:3a:ca:4d:10:a4:
         c7:e8:4f:ea:af:15:10:50:2e:f1:97:bc:32:9b:7a:f5:d3:17:
         75:b8:3f:f2:ec:53:cc:eb:f7:20:af:c4:db:ed:22:70:04:56:
         de:7b:ee:ca:b5:42:9a:52:3d:a6:7a:dd:e7:ea:a9:9c:ff:10:
         4e:d5:13:3d:a2:0b:38:86:b9:d1:5a:98:5c:cc:ad:2c:59:bb:
         30:9a:92:17:82:e0:51:4f:04:7c:0c:25:08:4f:24:16:54:6b:
         52:7d:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:03:51 2025 by rpki-client