Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa
File:                     3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa (raw, json)
Hash identifier:          dyIaqnVWIif6qaR6FtSFnEuBS4wIyWHRKSJr0ny8MCU=
Subject key identifier:   A1:F7:0E:ED:1A:FD:93:77:96:44:E7:A4:62:BF:DD:78:07:C2:1B:CA
Certificate issuer:       /CN=5995D747478C5DCDC0151DBD69361708C3663EEC
Certificate serial:       54C56BBEB1E2530B8C5C81FC17D8D96F0A64FE6A
Authority key identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa
Signing time:             Mon 24 Mar 2025 17:35:00 +0000
ROA not before:           Mon 24 Mar 2025 17:30:00 +0000
ROA not after:            Mon 23 Mar 2026 17:35:00 +0000
asID:                     269973
IP address blocks:        187.49.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:6b:be:b1:e2:53:0b:8c:5c:81:fc:17:d8:d9:6f:0a:64:fe:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5995D747478C5DCDC0151DBD69361708C3663EEC
        Validity
            Not Before: Mar 24 17:30:00 2025 GMT
            Not After : Mar 23 17:35:00 2026 GMT
        Subject: CN=A1F70EED1AFD93779644E7A462BFDD7807C21BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:b7:34:c2:c1:77:62:ff:bb:8f:57:c7:71:
                    ef:df:6a:b7:9d:fe:88:40:0c:64:20:73:06:86:15:
                    3f:df:6f:1f:7e:15:47:6f:50:e7:d5:47:49:9a:02:
                    ac:68:26:79:6b:48:1c:cc:25:80:d3:67:68:ff:a5:
                    de:0e:4e:d3:e7:fb:53:c4:d1:b1:d3:bb:11:b0:df:
                    dd:69:c5:74:73:d9:d0:bf:da:ec:99:76:38:57:1e:
                    82:1a:e4:98:75:fa:f9:f6:72:04:23:44:9d:28:e2:
                    67:6b:a7:3a:1e:4b:a7:68:e9:fa:06:94:2e:2d:7d:
                    ab:cf:56:30:71:b4:9c:a1:c1:e1:bf:ea:69:b4:ae:
                    25:0d:4f:46:98:d2:1f:37:51:17:41:e4:d3:9b:4b:
                    a0:03:e2:68:18:10:f4:69:2e:22:f1:fe:33:a8:5d:
                    7c:7a:be:30:ea:d0:87:52:13:d2:91:98:58:ea:c7:
                    be:68:ec:54:41:0b:b9:d3:63:24:3b:6f:58:10:23:
                    df:34:b7:85:74:be:1a:08:f1:35:9b:18:d7:bf:dd:
                    9b:a5:7b:95:b3:48:cc:c3:c5:cf:14:78:df:16:31:
                    4f:12:c7:8c:3b:d1:3b:d1:6f:b7:b2:61:43:cc:67:
                    f4:3a:0f:8a:4c:3f:30:d2:15:99:60:65:07:bd:45:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F7:0E:ED:1A:FD:93:77:96:44:E7:A4:62:BF:DD:78:07:C2:1B:CA
            X509v3 Authority Key Identifier:
                keyid:59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:44:21:24:e9:59:de:a7:00:b4:44:63:8f:16:b6:a4:9b:
         d4:81:26:13:21:9d:40:9b:4c:ae:a7:21:9b:6f:22:e2:b3:cd:
         4d:8f:98:7b:40:c2:80:32:b0:8a:a7:f1:1f:37:1b:96:db:41:
         8b:c8:f0:a5:b1:05:33:31:0f:48:10:b9:e9:c2:c8:38:6c:28:
         5e:da:19:b2:6b:e3:aa:41:21:71:39:57:0c:79:4b:b9:3c:59:
         22:13:bd:ce:ac:8c:84:7f:95:5c:a3:7d:b4:57:d3:6f:b1:92:
         cd:76:37:81:e0:8d:74:08:ce:b7:bd:9f:da:6d:7b:23:9f:8d:
         f3:96:19:91:e0:72:4a:db:30:f1:76:c0:0e:2d:34:ee:98:ed:
         36:3f:32:93:40:12:bc:fa:fa:ee:d8:fa:e3:71:24:e8:29:3e:
         38:7b:01:4a:09:0f:d7:9b:9b:c8:91:2b:ca:17:be:4f:66:8c:
         cf:ad:5b:1d:55:0f:65:80:b4:77:51:70:03:b7:15:a0:d8:51:
         50:ee:ea:3b:14:ae:bd:bb:25:9f:1a:c8:cc:e5:de:19:e2:e7:
         c7:6a:b6:63:60:6b:66:25:52:36:b7:0e:bf:eb:69:f5:23:45:
         19:5f:c7:60:aa:71:6c:83:ff:e8:b1:e7:a1:3b:f3:68:b0:b8:
         32:05:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:38:28 2025 by rpki-client