Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e32312e302f32342d3234203d3e2037303837.roa
File:                     3139302e36302e32312e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          f7nosQj1lzhaixu+1rLxkUmX5ImyPEUiTZhG6soYR78=
Subject key identifier:   71:26:02:64:4C:67:43:48:99:DA:00:8B:B4:A3:C6:FD:C9:74:15:C8
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       67B4724B65DADB474265D6D1AFCAF15D7526B522
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e32312e302f32342d3234203d3e2037303837.roa
Signing time:             Tue 04 Feb 2025 18:23:49 +0000
ROA not before:           Tue 04 Feb 2025 18:18:49 +0000
ROA not after:            Tue 03 Feb 2026 18:23:49 +0000
asID:                     7087
IP address blocks:        190.60.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b4:72:4b:65:da:db:47:42:65:d6:d1:af:ca:f1:5d:75:26:b5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:49 2025 GMT
            Not After : Feb  3 18:23:49 2026 GMT
        Subject: CN=712602644C67434899DA008BB4A3C6FDC97415C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:72:06:89:25:64:b5:42:43:c7:8e:18:8b:
                    d9:f8:19:69:59:62:c8:32:6f:28:a1:54:a3:6f:25:
                    66:57:9b:df:d5:ef:4d:8a:df:31:5d:86:45:af:f0:
                    5d:58:15:d0:ae:70:08:ea:6a:d0:d0:9b:02:f0:9b:
                    b1:74:2a:46:64:0a:2d:f8:3a:ee:a3:b8:70:38:c4:
                    91:ca:a1:8d:b1:0e:d2:3c:ec:c9:7f:c8:08:9b:82:
                    0d:d7:9d:b4:ef:76:14:68:23:8a:19:30:b7:88:82:
                    1b:4e:71:5d:ba:0c:9d:9c:91:1d:32:26:62:af:47:
                    e4:e0:fc:63:ea:fb:ce:ea:7d:7d:f2:e7:cc:3c:a5:
                    bb:c8:81:3c:03:08:7f:65:10:ed:e8:9e:5c:63:0c:
                    57:5d:22:ae:0f:1a:cc:ca:7d:b2:3b:89:3f:c3:bd:
                    7e:89:2f:e4:a7:39:6b:4a:83:1d:db:be:f6:22:32:
                    d4:e8:d0:43:f9:ff:4c:25:50:64:92:83:bd:89:4a:
                    e3:f9:ee:83:80:a2:bb:63:91:0b:fc:6e:24:df:48:
                    90:ee:3c:78:34:84:9d:61:6d:2a:4f:0c:00:99:52:
                    35:21:16:30:c9:d5:f6:56:8a:2f:ad:7a:44:a0:8b:
                    e0:2d:f6:e9:f0:89:dd:0c:2b:92:7b:ce:fd:67:03:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:02:64:4C:67:43:48:99:DA:00:8B:B4:A3:C6:FD:C9:74:15:C8
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e32312e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:87:37:bc:1f:ad:69:39:c5:ce:1f:f7:19:00:9d:1e:65:42:
         9a:d2:64:3c:a7:f8:14:1f:8b:85:7c:10:85:fe:7e:6e:39:6c:
         ce:53:6e:c1:e3:fa:fb:bb:2c:27:10:81:82:21:b7:32:72:e9:
         9a:a0:35:34:9e:69:09:e2:9b:de:a4:93:1c:fd:8a:52:85:8c:
         73:f0:c3:64:2f:8e:cb:22:3f:f7:09:d0:c7:1e:bf:ba:75:83:
         e5:e3:a0:db:d6:dd:c3:da:af:07:9f:24:cb:bc:fe:c1:b0:60:
         fc:81:f4:bb:27:3e:86:39:9e:fc:46:07:45:0e:9c:03:a6:ce:
         25:e8:1d:a8:1e:e3:c4:8e:71:6d:2e:1b:7a:71:9b:0b:ac:21:
         86:2d:7f:60:eb:6f:b7:f2:e0:4e:3f:e7:cd:8e:83:ae:19:24:
         06:7a:68:80:38:fd:6d:37:de:f0:ae:ef:97:87:8e:65:82:bb:
         00:d0:e1:46:22:f2:f8:55:2c:0c:88:9f:9c:50:08:94:a6:ff:
         ea:38:3e:f2:fe:12:30:75:e3:0b:2e:cf:b1:ca:67:99:7f:95:
         5b:bd:95:81:4f:b1:90:1c:65:a9:3e:e7:50:b8:b6:00:0c:51:
         26:a3:1c:36:72:f5:89:48:0f:82:ea:a8:22:e1:55:58:60:c4:
         bf:e6:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:27 2025 by rpki-client