Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203436313938.roa
File:                     3139302e302e36342e302f31392d3234203d3e203436313938.roa (raw, json)
Hash identifier:          nNjYnEQ+rRR1om/pmkgLF2f0rn7alNkTX5B4ZOIkhmc=
Subject key identifier:   EC:15:06:78:FE:2E:43:8D:EB:03:80:B6:CF:24:76:53:DC:A4:88:3C
Certificate issuer:       /CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
Certificate serial:       45FECB564CE31EA999D15575012A6B60670F7B29
Authority key identifier: 66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203436313938.roa
Signing time:             Tue 04 Feb 2025 18:40:18 +0000
ROA not before:           Tue 04 Feb 2025 18:35:18 +0000
ROA not after:            Tue 03 Feb 2026 18:40:18 +0000
asID:                     46198
IP address blocks:        190.0.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 19:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fe:cb:56:4c:e3:1e:a9:99:d1:55:75:01:2a:6b:60:67:0f:7b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
        Validity
            Not Before: Feb  4 18:35:18 2025 GMT
            Not After : Feb  3 18:40:18 2026 GMT
        Subject: CN=EC150678FE2E438DEB0380B6CF247653DCA4883C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:dc:1f:71:07:bd:49:be:66:d6:e4:b9:ae:
                    19:5d:29:c7:65:ec:29:ef:ca:65:8b:07:47:2f:66:
                    64:c5:82:6b:2c:d3:59:72:f3:e0:ec:46:64:20:9d:
                    5a:d8:db:7b:15:cc:70:33:47:e0:24:1c:0c:66:c9:
                    b7:df:3f:3c:63:4d:5e:48:68:01:d6:85:53:a4:57:
                    8f:61:6e:f5:1a:5d:00:c1:27:79:c1:2a:d6:b8:95:
                    fd:5d:2d:13:74:66:d6:04:88:0b:be:f7:2e:1a:2f:
                    dd:40:9d:29:d1:11:3a:9f:41:5d:01:32:c4:f3:da:
                    05:75:89:a8:32:d0:10:d3:fe:1c:07:56:69:e1:2a:
                    ae:b7:b1:9b:e9:91:7a:3c:52:ce:04:cb:9c:c5:3c:
                    8d:da:a4:1e:15:a9:68:22:5a:15:06:f0:fb:20:a4:
                    ec:b2:15:ff:27:cb:af:73:61:cd:fe:f9:f4:64:de:
                    d7:be:ca:53:ff:d6:d0:07:4b:de:05:8f:eb:6f:44:
                    8e:ee:40:6e:50:26:c2:09:e1:2b:ae:33:53:01:f0:
                    6f:5d:90:ee:69:69:96:82:b9:c3:02:fa:76:3f:3d:
                    ca:c8:f6:be:ef:fb:f5:f2:bf:e6:99:d9:4d:c4:c5:
                    d5:54:b0:f5:62:21:54:a4:c2:ae:b2:ea:57:14:e8:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:15:06:78:FE:2E:43:8D:EB:03:80:B6:CF:24:76:53:DC:A4:88:3C
            X509v3 Authority Key Identifier:
                keyid:66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203436313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:51:90:ce:ca:1e:df:7e:fe:9f:fe:2f:31:3b:0f:14:60:8a:
         b1:cd:86:88:d6:16:66:f5:5b:e4:a7:35:82:8d:a0:0b:b7:84:
         93:17:04:a9:94:21:12:ae:bd:ba:1c:41:b2:83:82:c8:c3:21:
         a7:ce:a9:80:e9:20:5e:d0:f9:16:98:f6:d7:ad:90:3a:ba:35:
         5d:82:f3:0f:0b:0d:0c:6c:f8:61:ef:cc:60:47:1b:d8:69:1e:
         bf:bf:b5:9b:40:0a:08:e6:ac:20:59:66:77:00:2c:db:24:6e:
         fb:3b:63:aa:46:03:7c:34:f3:ce:09:15:7e:cc:ce:9a:2a:77:
         b6:d3:3d:9e:ac:2a:f7:29:9b:32:04:39:ec:e3:90:24:48:5f:
         ac:98:99:73:9b:d0:84:5a:5f:d8:a8:8f:2d:d6:b4:78:13:d7:
         f1:98:95:1e:54:d0:1d:61:d5:28:d4:6a:55:7a:d5:de:4c:fe:
         a9:cc:74:f6:e9:64:2c:81:f7:d7:97:5f:32:b1:af:72:60:6c:
         5f:d9:b5:1a:47:fb:88:b5:47:61:58:48:f3:2b:c0:11:d1:41:
         6b:ca:da:70:6f:cd:8b:1c:e0:8c:3a:4b:af:76:6b:a8:56:83:
         35:ab:fb:13:7f:28:5b:2b:be:b4:77:13:99:3d:e7:91:0b:cd:
         62:5c:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:32:29 2025 by rpki-client