Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139313830.roa
File:                     3139302e382e3132382e302f31392d3234203d3e203139313830.roa (raw, json)
Hash identifier:          JyEC/A42iiuUASwCA5vYzhI/mb4gW9uT84YcxRGqvfg=
Subject key identifier:   BE:C4:30:0A:8D:A1:4B:37:07:22:83:02:2E:51:F7:88:FA:35:3E:F8
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       3D9A59AC38E03B6B6B5CA9F8A556A81C3D911A2B
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:42:30 +0000
ROA not before:           Tue 04 Feb 2025 18:37:30 +0000
ROA not after:            Tue 03 Feb 2026 18:42:30 +0000
asID:                     19180
IP address blocks:        190.8.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9a:59:ac:38:e0:3b:6b:6b:5c:a9:f8:a5:56:a8:1c:3d:91:1a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:30 2025 GMT
            Not After : Feb  3 18:42:30 2026 GMT
        Subject: CN=BEC4300A8DA14B37072283022E51F788FA353EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:0b:52:52:cc:8e:9a:fb:a7:36:96:8e:b6:
                    35:0b:6b:06:c5:1e:98:90:8d:0f:ef:41:45:54:bd:
                    ae:a5:2f:f4:e8:ab:d5:20:58:49:30:52:52:5f:72:
                    fd:62:82:32:71:f7:13:0f:ae:eb:99:96:c8:dc:c0:
                    f9:f8:f3:9a:33:cd:70:2b:38:f2:81:b4:0e:c4:f5:
                    c3:cf:89:a0:f4:9b:f3:ea:0a:7c:ff:d6:86:07:ab:
                    76:61:b6:c8:c2:71:c0:43:e9:49:4f:8a:2c:8e:7b:
                    13:6b:54:1f:0d:1b:aa:07:0f:b7:2b:8c:60:57:ac:
                    73:a8:9b:63:a3:eb:8f:7f:46:b1:bf:c1:42:0b:d2:
                    a0:6d:4a:5f:70:5b:08:c5:73:45:0f:ec:52:4d:c3:
                    fc:c7:4c:fe:2f:7c:1f:10:46:48:a4:30:fd:ff:6e:
                    9a:d8:51:d8:a2:e5:0b:f0:55:5f:0a:eb:84:26:b3:
                    20:92:d6:df:1b:10:dc:98:bd:b0:0b:54:0a:0c:42:
                    06:f4:d3:20:c4:0e:72:9d:99:f8:39:51:8e:13:58:
                    4f:fe:d8:8a:95:36:cc:ed:04:cb:0e:b7:4a:41:f1:
                    6c:ed:49:ae:ce:4a:89:98:58:76:11:b7:0a:58:dd:
                    06:af:fe:fe:9e:5a:ab:0f:6a:97:fe:41:28:93:2d:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:30:0A:8D:A1:4B:37:07:22:83:02:2E:51:F7:88:FA:35:3E:F8
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:d7:3d:6a:a9:16:2e:24:af:e8:77:5c:c1:ea:cb:b3:67:
         bb:b2:a1:b7:1c:25:b2:d8:62:73:86:4b:f4:5a:ca:3f:d4:af:
         d7:63:82:87:7d:88:15:4a:6d:be:54:c9:d0:14:06:e6:90:2d:
         32:ce:cf:19:97:6f:73:7e:51:02:03:30:78:5f:06:65:8c:86:
         39:85:64:f2:9a:c1:9f:29:c3:69:d8:da:69:69:81:23:54:87:
         00:79:b9:91:41:bc:7f:f8:52:a3:66:89:92:2f:46:c4:e2:45:
         d5:51:4d:12:e4:b9:d6:a4:6e:20:d9:79:61:e0:4c:b0:d5:29:
         4f:46:1c:c2:c5:71:e2:56:b4:6c:c0:2d:84:e8:2b:c4:aa:a0:
         fc:2a:52:f4:e3:42:3e:3e:fd:cb:97:72:65:63:f7:51:aa:13:
         1c:6f:fa:b8:af:1d:ab:8b:b2:9b:11:3d:bd:ad:f8:e9:f2:57:
         7b:7e:95:f6:f4:d8:c3:9b:4b:4a:71:4f:7a:cb:a0:4e:37:0e:
         d0:fe:4c:75:2f:57:06:d5:51:51:0c:70:af:3c:f1:2f:d7:db:
         56:73:1d:7b:e0:94:23:1c:72:55:7c:1c:9e:ef:8b:ea:cf:3d:
         92:a9:07:c9:4e:6f:48:75:aa:1d:c9:9b:15:4b:b4:b3:7b:08:
         5d:01:e7:2f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUPZpZrDjgO2trXKn4pVaoHD2RGiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC
M0E2NzhFNTAeFw0yNTAyMDQxODM3MzBaFw0yNjAyMDMxODQyMzBaMDMxMTAvBgNV
BAMTKEJFQzQzMDBBOERBMTRCMzcwNzIyODMwMjJFNTFGNzg4RkEzNTNFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgAtSUsyOmvunNpaOtjULawbF
HpiQjQ/vQUVUva6lL/Toq9UgWEkwUlJfcv1igjJx9xMPruuZlsjcwPn485ozzXAr
OPKBtA7E9cPPiaD0m/PqCnz/1oYHq3ZhtsjCccBD6UlPiiyOexNrVB8NG6oHD7cr
jGBXrHOom2Oj649/RrG/wUIL0qBtSl9wWwjFc0UP7FJNw/zHTP4vfB8QRkikMP3/
bprYUdii5QvwVV8K64QmsyCS1t8bENyYvbALVAoMQgb00yDEDnKdmfg5UY4TWE/+
2IqVNsztBMsOt0pB8WztSa7OSomYWHYRtwpY3Qav/v6eWqsPapf+QSiTLfRFAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUvsQwCo2hSzcHIoMCLlH3iPo1PvgwHwYDVR0j
BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0
QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw
NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1
NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2
MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzkzMDJlMzgyZTMxMzIzODJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzkzMTM4MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+CIAwDQYJ
KoZIhvcNAQELBQADggEBAF2s1z1qqRYuJK/od1zB6suzZ7uyobccJbLYYnOGS/Ra
yj/Ur9djgod9iBVKbb5UydAUBuaQLTLOzxmXb3N+UQIDMHhfBmWMhjmFZPKawZ8p
w2nY2mlpgSNUhwB5uZFBvH/4UqNmiZIvRsTiRdVRTRLkudakbiDZeWHgTLDVKU9G
HMLFceJWtGzALYToK8SqoPwqUvTjQj4+/cuXcmVj91GqExxv+rivHauLspsRPb2t
+OnyV3t+lfb02MObS0pxT3rLoE43DtD+THUvVwbVUVEMcK888S/X21ZzHXvglCMc
clV8HJ7vi+rPPZKpB8lOb0h1qh3JmxVLtLN7CF0B5y8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:35 2025 by rpki-client