Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130342e302f32342d3234203d3e203238303634.roa
File:                     3139302e36312e3130342e302f32342d3234203d3e203238303634.roa (raw, json)
Hash identifier:          ONG/xJyMQrctyh7uNH7OxKLi90nj5eytjreF3obTWbY=
Subject key identifier:   92:64:7F:FA:ED:7A:A6:BA:47:8C:47:34:3F:9C:FA:0E:77:8E:6B:5F
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       78BDCD394920C297A4B4481449470DC694D02B7A
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130342e302f32342d3234203d3e203238303634.roa
Signing time:             Tue 04 Feb 2025 18:23:52 +0000
ROA not before:           Tue 04 Feb 2025 18:18:52 +0000
ROA not after:            Tue 03 Feb 2026 18:23:52 +0000
asID:                     28064
IP address blocks:        190.61.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bd:cd:39:49:20:c2:97:a4:b4:48:14:49:47:0d:c6:94:d0:2b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:52 2025 GMT
            Not After : Feb  3 18:23:52 2026 GMT
        Subject: CN=92647FFAED7AA6BA478C47343F9CFA0E778E6B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:8f:1e:65:ea:71:e6:c8:cd:be:15:ab:07:
                    87:01:b3:af:a6:74:b7:46:63:12:4f:0a:91:57:c7:
                    b7:d4:0a:4d:c9:40:28:eb:4f:14:df:6a:f3:da:f5:
                    77:1f:da:94:12:4b:81:7d:4a:da:1d:b3:3c:2f:3f:
                    cc:6d:2d:fd:41:47:9d:b2:20:d2:87:5a:be:a1:1b:
                    be:81:e4:e5:ad:3e:2a:4a:cd:f7:1c:de:8b:06:13:
                    9a:40:85:84:d5:87:67:25:ba:ca:5c:ec:0b:c2:77:
                    5c:67:17:dd:60:13:af:25:92:fd:18:cf:76:83:1e:
                    5d:02:3f:41:43:e2:80:2a:a0:a3:f0:62:bf:54:f6:
                    df:d3:47:02:db:21:6e:10:39:f7:32:72:ba:4e:36:
                    3f:b5:d3:24:db:1d:7f:98:ba:90:05:d4:01:08:60:
                    70:ee:24:16:b2:11:01:cf:91:88:e7:56:62:7a:93:
                    45:ac:b6:93:1f:82:0f:d1:91:be:d8:80:28:a2:01:
                    10:1a:5c:40:9a:2a:fc:3d:f6:1c:a0:dd:21:f7:68:
                    9f:bb:d5:f3:4d:23:22:7c:13:29:08:5b:ff:93:8d:
                    2c:5b:8c:d8:dd:96:a0:86:2b:89:91:d5:32:6c:5d:
                    65:88:9d:e0:db:7a:4e:7c:9b:81:c5:1f:33:fd:1d:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:7F:FA:ED:7A:A6:BA:47:8C:47:34:3F:9C:FA:0E:77:8E:6B:5F
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130342e302f32342d3234203d3e203238303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:12:02:a6:a5:ec:90:ba:d9:fe:3a:d0:b2:07:45:9d:1e:05:
         7f:0f:a6:49:cc:51:f8:35:db:e4:1f:21:67:ad:31:1a:e6:a2:
         38:7c:1b:34:52:73:3d:5d:b0:b4:f0:f8:91:d2:a6:71:e2:64:
         d7:2a:17:b5:f9:f6:c5:c1:3d:5a:0d:ed:08:2b:e7:d0:49:ef:
         85:87:28:d7:cb:b2:af:06:27:ae:87:e9:38:81:59:54:b0:cc:
         8c:60:3a:f3:35:c2:3e:f8:be:a2:ad:ae:27:18:1b:8b:73:23:
         22:dc:a5:98:22:33:35:fc:b3:87:1a:43:58:63:ff:d9:77:27:
         08:8d:ce:93:49:0e:66:7e:04:5b:a2:fe:5e:4a:08:ab:c5:d6:
         2d:99:31:ca:08:b8:25:be:ee:ab:56:fd:17:85:32:f3:b1:28:
         72:28:2e:fe:2e:6c:00:11:86:77:0a:d8:fa:06:75:58:9e:bc:
         ab:69:4e:e7:d7:fc:31:80:8b:5c:de:a0:30:a5:86:3b:fc:9c:
         c4:85:37:c7:7f:de:03:b3:ec:c0:73:82:60:0d:74:57:c4:91:
         77:b8:49:77:1d:a6:9d:0c:6c:e2:bf:dd:e0:df:74:65:94:99:
         e0:50:61:15:10:16:37:54:77:f2:c9:19:29:db:61:25:d9:14:
         e8:60:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:15 2025 by rpki-client