Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39322e302f32322d3232203d3e2036353638.roa
File:                     3139302e39392e39322e302f32322d3232203d3e2036353638.roa (raw, json)
Hash identifier:          ACYX5TPuMTwYqn9gG9tyII3Q0chEYjS6wcKIiNw3ZDg=
Subject key identifier:   76:53:39:2C:5E:DB:15:67:0D:40:03:32:57:EE:D0:3A:03:E1:4B:70
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       32C353637A0BC8664276A4D7C7083B390CD489B1
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39322e302f32322d3232203d3e2036353638.roa
Signing time:             Tue 04 Feb 2025 18:15:43 +0000
ROA not before:           Tue 04 Feb 2025 18:10:43 +0000
ROA not after:            Tue 03 Feb 2026 18:15:43 +0000
asID:                     6568
IP address blocks:        190.99.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c3:53:63:7a:0b:c8:66:42:76:a4:d7:c7:08:3b:39:0c:d4:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Feb  4 18:10:43 2025 GMT
            Not After : Feb  3 18:15:43 2026 GMT
        Subject: CN=7653392C5EDB15670D40033257EED03A03E14B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:2a:66:ea:c0:40:16:43:46:22:0f:7f:a2:
                    7e:72:49:76:cc:2e:cc:98:b9:cf:66:c9:03:d7:13:
                    5b:27:c3:1f:ea:12:06:44:c5:d7:7f:a3:91:9b:bc:
                    98:e4:9c:b3:a6:56:9e:b0:ce:e4:59:ac:3f:2a:31:
                    67:7f:0b:8a:d1:5c:18:83:ee:be:ec:a8:24:32:60:
                    5d:95:b4:65:f7:e0:e7:fe:4b:c0:b8:dc:6b:64:d8:
                    58:e3:6a:15:f2:70:0c:bd:cb:bf:79:f3:a1:5d:1a:
                    bc:d1:01:8b:d8:72:31:d2:7e:b9:c1:9a:48:05:cf:
                    3f:11:d9:fb:43:3b:bf:9d:35:68:a8:54:5e:c2:0a:
                    0f:ff:07:59:4f:0b:68:de:3e:67:54:c6:dd:67:ec:
                    e7:c9:1b:66:c2:48:08:f3:27:6f:fd:b3:20:8b:01:
                    a9:01:86:60:dd:ce:c5:df:28:0e:19:9e:71:e2:ac:
                    c8:4d:21:09:2b:44:53:13:6f:9f:02:14:87:e5:0c:
                    ac:75:e7:a6:43:d2:d4:7a:d6:8a:93:93:01:a6:2a:
                    6f:97:b2:41:86:7e:79:34:fb:f5:09:b0:e3:36:65:
                    fa:69:1b:9d:d3:66:f6:69:85:4f:5d:16:b0:d0:64:
                    70:69:55:72:f9:ae:69:a5:78:19:c7:9c:a0:28:86:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:39:2C:5E:DB:15:67:0D:40:03:32:57:EE:D0:3A:03:E1:4B:70
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39322e302f32322d3232203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:57:53:bf:9c:c5:2b:d3:26:06:a0:fb:17:47:d7:9e:4a:d4:
         3a:18:68:75:55:d3:67:3a:15:8d:2c:78:5e:e0:71:d5:c3:56:
         cf:2d:71:05:ad:ef:d5:cb:99:d9:c3:6a:74:ce:1b:b6:ed:97:
         f0:66:58:c7:81:7a:aa:bf:2b:f8:41:c7:55:38:bc:58:f5:89:
         0e:54:d5:0d:51:b0:8f:42:a9:d7:bd:e8:a6:a8:3f:42:e9:d3:
         fd:dc:6b:55:6d:7c:cb:93:dc:f3:25:9b:cf:4f:8f:2c:a7:c2:
         3b:36:c8:0e:8b:2f:c8:8c:70:fc:6a:b0:7f:5b:89:ce:36:88:
         21:d1:6a:d9:19:0a:90:8b:8e:80:17:ab:ca:24:60:e6:de:46:
         e3:cb:e0:e6:0c:d1:a3:7f:2c:43:df:c0:67:a9:ef:e8:b0:34:
         8e:a8:42:5d:fe:38:f4:6b:1e:88:2c:04:a7:11:82:75:75:b5:
         ed:ed:26:27:fd:b6:27:33:f5:43:6a:4c:0b:4b:9a:c1:ce:12:
         2f:9f:86:69:ee:24:27:5c:42:4a:6d:aa:00:9a:9a:8c:1c:47:
         b7:9e:39:be:88:ba:75:2e:86:d8:f2:87:58:b8:85:c5:91:f7:
         2c:f8:63:05:a7:4e:9d:af:34:56:fd:58:3a:e4:86:b8:39:fb:
         8e:2c:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client