Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e2037343138.roa
File:                     3139302e32312e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          qaLzxY327zRiOAspPMIk7aiu+a7gYXqIUtjusqcl4Rk=
Subject key identifier:   21:08:66:AC:16:94:39:BB:D0:D7:26:C6:12:71:2E:78:31:BB:32:35
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       29E0D540B7A76B4FE5507E0985DC3F903768B4F7
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:30:01 +0000
ROA not before:           Tue 04 Feb 2025 18:25:01 +0000
ROA not after:            Tue 03 Feb 2026 18:30:01 +0000
asID:                     7418
IP address blocks:        190.21.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 21:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e0:d5:40:b7:a7:6b:4f:e5:50:7e:09:85:dc:3f:90:37:68:b4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:25:01 2025 GMT
            Not After : Feb  3 18:30:01 2026 GMT
        Subject: CN=210866AC169439BBD0D726C612712E7831BB3235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:2d:a2:bd:f2:ae:c9:6c:35:88:d6:12:69:
                    46:bc:7a:36:9e:2e:45:61:41:7b:a5:72:5f:90:ab:
                    95:04:82:92:e7:6c:bb:81:ac:9b:b4:18:c1:af:80:
                    a2:d1:cd:d8:06:83:53:33:e5:ce:a8:b3:be:84:be:
                    2b:12:9d:7c:00:55:1c:21:80:4e:7b:0b:31:a2:0e:
                    a7:96:a0:b7:4d:f6:ba:f1:dd:c1:6a:0d:3f:39:dd:
                    d6:4d:2f:96:65:e5:72:4e:72:0e:2c:25:96:39:9d:
                    75:d5:78:7a:f6:05:47:1a:b6:2c:2e:fa:58:36:f3:
                    cf:c7:4b:c5:20:4e:88:62:d8:6f:f9:c7:11:b2:5d:
                    f9:dd:23:ea:1b:b6:5a:23:ff:92:a5:c1:12:5a:4c:
                    2e:18:c7:d6:db:9a:f6:84:be:a0:6c:ae:91:4c:ea:
                    65:86:db:3f:61:d6:2b:22:6f:01:e6:b8:70:ef:27:
                    74:9d:97:b8:bc:60:73:e0:53:9f:ce:3d:21:f2:61:
                    85:fc:1f:6d:77:31:04:ad:80:a4:54:9d:65:e4:28:
                    6b:a0:8d:44:9e:e3:47:16:02:71:e3:cd:40:8f:6b:
                    f5:a2:61:cb:ab:39:15:95:f3:49:2f:b4:d5:b1:38:
                    e0:20:7e:10:b6:e2:67:0d:1e:25:6f:e5:86:3a:53:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:08:66:AC:16:94:39:BB:D0:D7:26:C6:12:71:2E:78:31:BB:32:35
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:9f:16:31:ab:5b:4e:ba:e4:45:85:22:9c:c8:6f:12:0b:
         bd:ce:f3:32:63:66:21:ed:c3:53:fc:67:a3:12:59:cb:0a:78:
         8f:f9:ac:3a:98:dc:cf:8b:97:f3:60:09:e7:c0:24:b1:8e:34:
         ac:08:af:56:2b:d2:29:ec:6b:49:8e:d8:ad:73:71:65:c8:b8:
         40:85:fb:fd:bb:c7:ca:fc:db:49:78:fd:20:c3:dc:09:3b:d8:
         0a:23:23:ae:88:09:a3:d6:cc:77:23:0d:5f:0d:bf:0d:c8:07:
         b9:b5:35:56:90:b1:75:f5:a4:f5:8f:96:7f:b1:51:45:d2:fb:
         03:26:d0:30:0e:26:94:a0:74:e9:89:8a:d2:01:b9:8b:13:30:
         1f:36:56:7b:8d:04:cf:eb:dd:a5:8d:72:34:c5:5b:7a:d3:b5:
         bc:44:aa:4a:a0:8b:35:1a:d0:f8:41:a0:c1:c5:05:ef:b9:3e:
         6f:fc:0d:41:d0:c7:19:9d:ca:76:85:3d:1c:8c:d3:0b:ef:d6:
         02:67:57:4c:95:4f:35:00:65:e6:46:72:90:ca:49:d2:87:e0:
         c1:8f:85:46:bd:3d:30:a9:b2:03:79:b2:d1:7e:2f:43:6f:43:
         16:4a:a4:52:64:be:58:2c:88:39:ac:8e:a5:6f:06:c5:a1:c4:
         0a:c2:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:25:51 2025 by rpki-client