Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa
File:                     3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          fP0nwdAwxjmfHnFyq1AsAwrlKSmkS/BhIHmnxk1f0oQ=
Subject key identifier:   60:3F:D9:18:81:CD:AC:24:ED:87:D0:BB:9F:28:6E:06:3F:E6:48:A5
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       616686D6455840A7FDE4BE95EAECB0F1196148B6
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:14:36 +0000
ROA not before:           Tue 04 Feb 2025 18:09:36 +0000
ROA not after:            Tue 03 Feb 2026 18:14:36 +0000
asID:                     14754
IP address blocks:        190.212.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:66:86:d6:45:58:40:a7:fd:e4:be:95:ea:ec:b0:f1:19:61:48:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Feb  4 18:09:36 2025 GMT
            Not After : Feb  3 18:14:36 2026 GMT
        Subject: CN=603FD91881CDAC24ED87D0BB9F286E063FE648A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:81:81:6a:82:80:47:b7:70:a7:71:c1:83:
                    d5:75:33:72:47:eb:d4:c4:28:6c:4c:83:a4:01:8d:
                    1f:49:34:1e:01:37:0a:7e:61:de:97:49:c8:26:5a:
                    0c:e3:8f:0c:dd:82:36:de:73:35:a3:77:5e:56:f9:
                    be:35:14:74:01:5e:72:30:67:af:43:90:26:25:6a:
                    44:19:3e:fc:33:95:c6:6e:cd:47:3d:86:2b:df:96:
                    73:cb:f4:09:49:dc:1e:5e:b1:fc:58:93:68:f0:ba:
                    03:22:be:9a:cb:7e:de:e3:7e:05:e0:a8:71:16:d5:
                    fe:a5:35:58:d4:59:1c:87:d5:8b:c5:af:0c:5b:b3:
                    c1:b3:41:d7:d6:b6:74:8a:33:38:00:ce:30:01:e3:
                    a7:7b:9e:e1:d1:a6:a3:c0:36:39:56:1d:4a:70:a2:
                    cc:e4:60:69:dd:75:a9:32:70:3e:22:89:86:f6:e1:
                    04:53:41:e5:79:bd:4b:cc:5d:1c:38:80:d4:d4:58:
                    9e:21:68:c4:de:7c:db:6a:58:3f:b0:89:d4:23:4d:
                    a7:c1:3f:ad:77:4c:92:bc:33:9c:53:ab:1c:c1:83:
                    e3:2d:ff:a6:f5:36:2d:61:da:80:16:8e:72:76:0f:
                    ec:20:5e:2d:e1:76:84:53:d3:c8:8e:a8:ac:2b:28:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3F:D9:18:81:CD:AC:24:ED:87:D0:BB:9F:28:6E:06:3F:E6:48:A5
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.212.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:87:50:b9:1c:94:1c:59:f5:74:c8:03:5f:55:bb:3f:d4:
         c5:77:da:30:b0:18:47:4d:cf:12:40:2f:a2:47:45:44:f3:e7:
         1f:7d:e6:b3:61:62:17:0f:74:ae:6e:4a:6d:e0:6b:2d:2e:9e:
         9f:13:8b:66:ab:d4:b9:c1:90:ee:8d:b0:53:fd:f4:3d:b8:b3:
         01:3b:9f:70:7d:4a:b9:69:0c:4b:5c:94:27:b7:db:fc:57:00:
         5a:3d:ac:b9:24:43:28:31:cc:ca:94:f5:25:ca:4b:b5:c6:b5:
         a1:d0:4f:50:58:32:27:95:6e:34:80:f0:d4:f6:92:62:82:2d:
         ba:f8:ab:82:e3:44:a3:9e:61:bd:a1:cf:49:a4:c9:cb:8c:03:
         a3:5c:71:60:85:7a:c7:35:91:09:dc:94:05:5b:57:d0:c1:8f:
         24:de:9a:ee:97:5a:49:34:5b:1c:dd:32:dc:6a:d2:87:46:e8:
         5d:fb:15:4d:77:81:59:ab:8b:35:d9:75:ca:c4:d7:7e:ee:5b:
         3a:60:54:18:71:c0:37:f3:3a:81:71:d4:7d:5b:d4:1b:40:b4:
         a2:0a:f2:6c:f3:70:8e:c7:3b:69:12:e5:d0:4b:84:97:c1:89:
         20:e2:45:5f:26:c9:9c:15:a9:ca:1f:24:58:0b:4d:35:69:ff:
         28:87:06:78
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYWaG1kVYQKf95L6V6uyw8RlhSLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyRkM5QTMwNjZEMkUwQzI5NEYwRTAwMUE5NEYyRjBB
RUQ3MjcwQzAeFw0yNTAyMDQxODA5MzZaFw0yNjAyMDMxODE0MzZaMDMxMTAvBgNV
BAMTKDYwM0ZEOTE4ODFDREFDMjRFRDg3RDBCQjlGMjg2RTA2M0ZFNjQ4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXYGBaoKAR7dwp3HBg9V1M3JH
69TEKGxMg6QBjR9JNB4BNwp+Yd6XScgmWgzjjwzdgjbeczWjd15W+b41FHQBXnIw
Z69DkCYlakQZPvwzlcZuzUc9hivflnPL9AlJ3B5esfxYk2jwugMivprLft7jfgXg
qHEW1f6lNVjUWRyH1YvFrwxbs8GzQdfWtnSKMzgAzjAB46d7nuHRpqPANjlWHUpw
oszkYGnddakycD4iiYb24QRTQeV5vUvMXRw4gNTUWJ4haMTefNtqWD+widQjTafB
P613TJK8M5xTqxzBg+Mt/6b1Ni1h2oAWjnJ2D+wgXi3hdoRT08iOqKwrKAb5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYD/ZGIHNrCTth9C7nyhuBj/mSKUwHwYDVR0j
BBgwFoAUUS/JowZtLgwpTw4AGpTy8K7XJwwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENkNCNTEzMUU2RTlGNjI4NTVEQzBFQzUwNjU1Q0Q4MTBE
RDk4NUFCQkJGRkJGNEYwQzY1Mzc5NUYyMTRFRDk5LzAvNTEyRkM5QTMwNjZEMkUw
QzI5NEYwRTAwMUE5NEYyRjBBRUQ3MjcwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTJGQzlBMzA2NkQyRTBDMjk0
RjBFMDAxQTk0RjJGMEFFRDcyNzBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDZDQjUxMzFFNkU5RjYyODU1REMwRUM1MDY1NUNEODEwREQ5ODVBQkJC
RkZCRjRGMEM2NTM3OTVGMjE0RUQ5OS8wLzMxMzkzMDJlMzIzMTMyMmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHvtSA
MA0GCSqGSIb3DQEBCwUAA4IBAQBIWodQuRyUHFn1dMgDX1W7P9TFd9owsBhHTc8S
QC+iR0VE8+cffeazYWIXD3Subkpt4GstLp6fE4tmq9S5wZDujbBT/fQ9uLMBO59w
fUq5aQxLXJQnt9v8VwBaPay5JEMoMczKlPUlyku1xrWh0E9QWDInlW40gPDU9pJi
gi26+KuC40SjnmG9oc9JpMnLjAOjXHFghXrHNZEJ3JQFW1fQwY8k3prul1pJNFsc
3TLcatKHRuhd+xVNd4FZq4s12XXKxNd+7ls6YFQYccA38zqBcdR9W9QbQLSiCvJs
83COxztpEuXQS4SXwYkg4kVfJsmcFanKHyRYC001af8ohwZ4
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:36:08 2025 by rpki-client