Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138382e302f32342d3234203d3e20323639393733.roa
File:                     3138372e34392e3138382e302f32342d3234203d3e20323639393733.roa (raw, json)
Hash identifier:          UGV+TRNn2aTYPPXLaRlhjOtxpc79bLYSKfit63AqsoE=
Subject key identifier:   13:B7:59:63:A8:A6:02:9D:6B:1A:71:9E:38:92:61:FF:C3:E2:A7:DB
Certificate issuer:       /CN=5995D747478C5DCDC0151DBD69361708C3663EEC
Certificate serial:       09F30672F33D28357D3CE62A6A409603FB1076BD
Authority key identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138382e302f32342d3234203d3e20323639393733.roa
Signing time:             Mon 24 Mar 2025 17:35:01 +0000
ROA not before:           Mon 24 Mar 2025 17:30:01 +0000
ROA not after:            Mon 23 Mar 2026 17:35:01 +0000
asID:                     269973
IP address blocks:        187.49.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f3:06:72:f3:3d:28:35:7d:3c:e6:2a:6a:40:96:03:fb:10:76:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5995D747478C5DCDC0151DBD69361708C3663EEC
        Validity
            Not Before: Mar 24 17:30:01 2025 GMT
            Not After : Mar 23 17:35:01 2026 GMT
        Subject: CN=13B75963A8A6029D6B1A719E389261FFC3E2A7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:cd:62:ea:53:4a:6c:82:0a:78:e5:45:fb:
                    4c:c0:ca:78:f9:47:2a:0d:bf:ad:b2:ec:b8:db:e1:
                    1d:9c:42:73:7f:a3:d9:af:c1:46:e7:f9:7b:76:f0:
                    23:3a:18:4d:6d:da:98:42:2d:b2:59:dd:27:79:8a:
                    04:03:2d:0c:0c:e6:6f:03:82:8c:f2:1d:c8:32:b0:
                    57:08:17:fa:26:cf:e1:a0:32:2a:0d:46:af:10:d0:
                    4f:08:54:28:76:54:dd:38:d9:62:33:f5:a2:27:c5:
                    74:ea:be:c6:83:63:7a:3c:35:0d:96:2f:8e:83:f3:
                    44:35:30:ab:0d:6b:a2:50:0b:d1:fc:22:4f:c5:fa:
                    d0:a4:de:e7:ae:0e:9d:bf:ee:27:fa:f5:9b:02:f7:
                    79:7c:f6:81:bd:e7:ea:5e:17:d1:d9:ec:34:fd:b5:
                    cb:0e:a5:82:b6:a7:d6:9a:54:0f:e2:b4:d4:43:df:
                    42:8f:9c:99:0c:d6:e1:84:33:3e:52:49:fe:73:cd:
                    d9:bd:b3:68:94:30:86:3f:7e:f5:9c:c8:33:72:3d:
                    a5:f2:24:d0:78:bb:b0:99:1e:d4:30:a6:c3:58:30:
                    11:b2:46:ba:f8:79:19:ae:7b:72:7a:d8:71:4b:91:
                    12:6a:5c:10:5f:77:a5:a6:db:29:b1:a3:ff:d1:8e:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B7:59:63:A8:A6:02:9D:6B:1A:71:9E:38:92:61:FF:C3:E2:A7:DB
            X509v3 Authority Key Identifier:
                keyid:59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138382e302f32342d3234203d3e20323639393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:bb:a4:b3:33:b7:07:83:fb:7b:9b:c9:a5:55:aa:b0:00:
         90:1d:42:1c:fa:70:68:ea:59:ff:56:8a:df:53:52:15:e3:6c:
         a8:df:5e:06:92:90:50:4c:dc:e7:bc:67:ac:0d:a1:50:f7:c3:
         a2:61:63:90:87:2f:78:9e:74:59:e5:b1:e4:83:47:a1:61:62:
         58:3f:b8:41:21:c9:8b:37:87:55:71:37:e2:2c:3e:33:d9:35:
         9d:08:8f:a6:df:40:7f:ca:8e:3c:89:c6:f5:73:cf:f5:f1:48:
         de:8f:7e:1b:43:aa:ca:2c:86:bf:2d:56:5b:7a:fd:47:d8:8c:
         80:ec:dc:3d:77:31:81:79:98:78:28:76:db:20:d9:74:2d:dd:
         05:b7:d3:33:03:57:54:bb:00:a3:3e:a5:81:84:cb:ba:3d:bc:
         5c:93:b6:8e:f3:17:7d:69:bb:9a:72:89:fc:6e:ed:a3:3e:bb:
         bf:6d:a6:94:bc:7f:46:c5:09:26:35:93:2f:ca:be:78:41:c7:
         bd:53:66:e5:e0:ff:8a:0d:17:17:99:54:88:dd:c2:fc:79:12:
         fa:34:7e:4c:d9:2a:54:a6:7c:ba:3b:74:82:f5:e6:4c:7b:b6:
         e5:29:c0:e1:07:aa:b7:ce:0c:85:d0:b8:6c:6f:b5:2b:da:77:
         96:a6:e1:19
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCfMGcvM9KDV9POYqakCWA/sQdr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk5NUQ3NDc0NzhDNURDREMwMTUxREJENjkzNjE3MDhD
MzY2M0VFQzAeFw0yNTAzMjQxNzMwMDFaFw0yNjAzMjMxNzM1MDFaMDMxMTAvBgNV
BAMTKDEzQjc1OTYzQThBNjAyOUQ2QjFBNzE5RTM4OTI2MUZGQzNFMkE3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5s1i6lNKbIIKeOVF+0zAynj5
RyoNv62y7Ljb4R2cQnN/o9mvwUbn+Xt28CM6GE1t2phCLbJZ3Sd5igQDLQwM5m8D
gozyHcgysFcIF/omz+GgMioNRq8Q0E8IVCh2VN042WIz9aInxXTqvsaDY3o8NQ2W
L46D80Q1MKsNa6JQC9H8Ik/F+tCk3ueuDp2/7if69ZsC93l89oG95+peF9HZ7DT9
tcsOpYK2p9aaVA/itNRD30KPnJkM1uGEMz5SSf5zzdm9s2iUMIY/fvWcyDNyPaXy
JNB4u7CZHtQwpsNYMBGyRrr4eRmue3J62HFLkRJqXBBfd6Wm2ymxo//RjuM/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUE7dZY6imAp1rGnGeOJJh/8Pip9swHwYDVR0j
BBgwFoAUWZXXR0eMXc3AFR29aTYXCMNmPuwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEQ2NDc4MzZCOEU2MDQ2OTgzQzdDN0RGRjQ5RjBGMjg4
RDZCRTJDQzJFQkVBNURCRDczNkMzRUU3Qjc0QjEyLzAvNTk5NUQ3NDc0NzhDNURD
REMwMTUxREJENjkzNjE3MDhDMzY2M0VFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTk1RDc0NzQ3OEM1RENEQzAx
NTFEQkQ2OTM2MTcwOEMzNjYzRUVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRENjQ3ODM2QjhFNjA0Njk4M0M3QzdERkY0OUYwRjI4OEQ2QkUyQ0My
RUJFQTVEQkQ3MzZDM0VFN0I3NEIxMi8wLzMxMzgzNzJlMzQzOTJlMzEzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuzG8
MA0GCSqGSIb3DQEBCwUAA4IBAQB/TLukszO3B4P7e5vJpVWqsACQHUIc+nBo6ln/
VorfU1IV42yo314GkpBQTNznvGesDaFQ98OiYWOQhy94nnRZ5bHkg0ehYWJYP7hB
IcmLN4dVcTfiLD4z2TWdCI+m30B/yo48icb1c8/18Ujej34bQ6rKLIa/LVZbev1H
2IyA7Nw9dzGBeZh4KHbbINl0Ld0Ft9MzA1dUuwCjPqWBhMu6Pbxck7aO8xd9abua
con8bu2jPru/baaUvH9GxQkmNZMvyr54Qce9U2bl4P+KDRcXmVSI3cL8eRL6NH5M
2SpUpny6O3SC9eZMe7blKcDhB6q3zgyF0Lhsb7Ur2neWpuEZ
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:50 2025 by rpki-client