Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3139302e302f32342d3234203d3e20323639393733.roa
File:                     3138372e34392e3139302e302f32342d3234203d3e20323639393733.roa (raw, json)
Hash identifier:          ng4LmLzHQNnLVE5P6HH6dCB6ep6fq3p8LRJ9zQO8btI=
Subject key identifier:   7D:38:8F:9D:D6:B3:2C:76:9D:79:E8:EA:DE:69:85:43:5D:FB:F0:E2
Certificate issuer:       /CN=5995D747478C5DCDC0151DBD69361708C3663EEC
Certificate serial:       797FD4D9D3B65DD0A689BF0A1BA5927A19BE97E8
Authority key identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3139302e302f32342d3234203d3e20323639393733.roa
Signing time:             Mon 24 Mar 2025 17:35:00 +0000
ROA not before:           Mon 24 Mar 2025 17:30:00 +0000
ROA not after:            Mon 23 Mar 2026 17:35:00 +0000
asID:                     269973
IP address blocks:        187.49.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7f:d4:d9:d3:b6:5d:d0:a6:89:bf:0a:1b:a5:92:7a:19:be:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5995D747478C5DCDC0151DBD69361708C3663EEC
        Validity
            Not Before: Mar 24 17:30:00 2025 GMT
            Not After : Mar 23 17:35:00 2026 GMT
        Subject: CN=7D388F9DD6B32C769D79E8EADE6985435DFBF0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:17:2f:c2:2e:57:ff:0e:9b:53:f3:28:0b:
                    f7:c8:07:80:88:8d:74:4c:62:d9:54:af:b3:b3:a1:
                    25:3c:93:84:06:6b:95:d3:82:2c:35:3e:fe:10:d5:
                    df:97:9a:f8:b3:8b:1c:14:ae:ce:a3:88:45:ef:25:
                    fc:f0:ed:73:ec:ba:d1:37:d8:65:c3:1e:30:81:64:
                    ac:8b:04:73:45:6b:4b:fd:69:31:43:61:4a:82:78:
                    6e:fe:ca:ed:a2:45:6f:fd:d7:d8:e6:4c:7e:f2:e5:
                    13:54:4b:c6:49:64:56:3f:76:a7:da:b2:2b:85:9b:
                    40:82:38:64:a4:df:18:c1:4b:b6:0f:f1:e6:72:cb:
                    e0:89:4e:86:a9:a6:9f:54:78:ba:a2:4e:77:fa:cf:
                    3d:8c:82:33:51:3b:49:d7:bb:e5:9e:b0:00:f5:ee:
                    6f:2b:c3:65:75:e2:06:76:4c:74:1e:59:06:26:81:
                    ff:2d:d8:46:cd:e8:02:b7:dc:7f:93:a7:c0:57:0c:
                    f2:18:a4:fe:25:23:bd:3a:51:0a:30:06:cf:0e:21:
                    f0:70:01:dd:09:77:93:f0:e5:f6:b2:fd:28:e3:fa:
                    f8:2a:75:5b:c5:bb:1d:db:7b:a2:15:df:0d:30:5e:
                    bb:e9:32:b8:b3:72:36:f2:96:0e:fd:af:02:20:e9:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:38:8F:9D:D6:B3:2C:76:9D:79:E8:EA:DE:69:85:43:5D:FB:F0:E2
            X509v3 Authority Key Identifier:
                keyid:59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3139302e302f32342d3234203d3e20323639393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:64:30:d3:46:31:66:f7:b6:c6:ef:21:1e:73:57:6b:3d:
         55:97:e5:4d:86:f2:74:53:87:f7:a6:42:03:95:5f:82:17:2e:
         9e:64:30:e0:e0:cf:d4:9c:ce:68:4b:7c:34:1c:e4:b2:81:3f:
         7e:9b:f9:2e:c1:8a:a0:52:7c:ad:c3:9f:cd:94:88:25:3a:62:
         c7:ac:18:87:49:0d:86:6c:e0:c1:05:6e:86:64:8c:a3:b9:93:
         6e:51:e3:e1:fa:35:1e:7d:cb:7a:ea:5e:e1:e5:bc:50:76:32:
         2c:03:de:95:e8:1f:cc:09:86:2d:93:c0:d1:8f:48:d5:ae:13:
         1d:a0:78:b2:14:63:94:72:e8:7b:68:17:49:1b:88:2b:ed:de:
         6f:04:21:1c:11:bd:14:12:38:e1:56:ab:88:2f:1e:a4:a4:a5:
         82:ae:a3:c6:b1:91:ec:d9:ae:7a:16:79:9e:38:c8:86:f4:f2:
         03:6d:e9:9b:f9:63:9c:59:02:92:08:9b:cf:aa:97:32:7b:33:
         39:0e:b9:a1:b5:66:ec:ed:39:1b:c0:6c:ed:56:99:d8:99:6a:
         8a:05:cb:eb:11:bd:32:1f:97:4a:5f:25:9c:da:88:da:f5:6e:
         cd:69:d3:cb:c6:16:27:96:3b:82:e9:bd:f7:8b:eb:f7:ec:a9:
         38:26:6b:b1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeX/U2dO2XdCmib8KG6WSehm+l+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk5NUQ3NDc0NzhDNURDREMwMTUxREJENjkzNjE3MDhD
MzY2M0VFQzAeFw0yNTAzMjQxNzMwMDBaFw0yNjAzMjMxNzM1MDBaMDMxMTAvBgNV
BAMTKDdEMzg4RjlERDZCMzJDNzY5RDc5RThFQURFNjk4NTQzNURGQkYwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rxcvwi5X/w6bU/MoC/fIB4CI
jXRMYtlUr7OzoSU8k4QGa5XTgiw1Pv4Q1d+XmvizixwUrs6jiEXvJfzw7XPsutE3
2GXDHjCBZKyLBHNFa0v9aTFDYUqCeG7+yu2iRW/919jmTH7y5RNUS8ZJZFY/dqfa
siuFm0CCOGSk3xjBS7YP8eZyy+CJToappp9UeLqiTnf6zz2MgjNRO0nXu+WesAD1
7m8rw2V14gZ2THQeWQYmgf8t2EbN6AK33H+Tp8BXDPIYpP4lI706UQowBs8OIfBw
Ad0Jd5Pw5fay/Sjj+vgqdVvFux3be6IV3w0wXrvpMrizcjbylg79rwIg6cf5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfTiPndazLHadeejq3mmFQ1378OIwHwYDVR0j
BBgwFoAUWZXXR0eMXc3AFR29aTYXCMNmPuwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEQ2NDc4MzZCOEU2MDQ2OTgzQzdDN0RGRjQ5RjBGMjg4
RDZCRTJDQzJFQkVBNURCRDczNkMzRUU3Qjc0QjEyLzAvNTk5NUQ3NDc0NzhDNURD
REMwMTUxREJENjkzNjE3MDhDMzY2M0VFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTk1RDc0NzQ3OEM1RENEQzAx
NTFEQkQ2OTM2MTcwOEMzNjYzRUVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRENjQ3ODM2QjhFNjA0Njk4M0M3QzdERkY0OUYwRjI4OEQ2QkUyQ0My
RUJFQTVEQkQ3MzZDM0VFN0I3NEIxMi8wLzMxMzgzNzJlMzQzOTJlMzEzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuzG+
MA0GCSqGSIb3DQEBCwUAA4IBAQA1xWQw00YxZve2xu8hHnNXaz1Vl+VNhvJ0U4f3
pkIDlV+CFy6eZDDg4M/UnM5oS3w0HOSygT9+m/kuwYqgUnytw5/NlIglOmLHrBiH
SQ2GbODBBW6GZIyjuZNuUePh+jUefct66l7h5bxQdjIsA96V6B/MCYYtk8DRj0jV
rhMdoHiyFGOUcuh7aBdJG4gr7d5vBCEcEb0UEjjhVquILx6kpKWCrqPGsZHs2a56
FnmeOMiG9PIDbemb+WOcWQKSCJvPqpcyezM5DrmhtWbs7TkbwGztVpnYmWqKBcvr
Eb0yH5dKXyWc2oja9W7NadPLxhYnljuC6b33i+v37Kk4Jmux
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:08 2025 by rpki-client