Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e203136363239.roa
File:                     3139312e3131322e302e302f31342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          xt4MB1tagY8tNRTsa4aZwjONMUU/FPcoyclU40qv/SQ=
Subject key identifier:   F9:A1:6E:E1:38:1F:B2:63:8C:1B:C1:90:50:0D:AC:34:F4:70:54:B6
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       15B8A6E8318ACC2510BB1D265598693A8C630FA1
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:30:02 +0000
ROA not before:           Tue 04 Feb 2025 18:25:02 +0000
ROA not after:            Tue 03 Feb 2026 18:30:02 +0000
asID:                     16629
IP address blocks:        191.112.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b8:a6:e8:31:8a:cc:25:10:bb:1d:26:55:98:69:3a:8c:63:0f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:25:02 2025 GMT
            Not After : Feb  3 18:30:02 2026 GMT
        Subject: CN=F9A16EE1381FB2638C1BC190500DAC34F47054B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:af:d7:0c:1e:90:65:b2:be:61:e8:bf:fc:
                    a9:78:9a:b0:96:dc:fe:d9:c0:ba:c7:56:9c:ef:6b:
                    26:ee:d7:01:99:b2:7c:07:2c:8e:9f:93:5e:f4:de:
                    5c:b7:58:23:4b:73:45:01:c0:06:19:57:db:42:ee:
                    84:3e:66:e9:75:06:f6:4a:d6:51:25:f9:9a:a9:85:
                    1e:51:72:88:06:1c:3f:fc:51:5c:e8:07:03:1e:1a:
                    84:f2:2a:73:ec:e5:bb:9f:7c:2c:7b:75:79:10:d3:
                    4c:51:9b:21:8c:4d:e1:a7:8c:8f:7b:e2:a4:fd:ec:
                    9a:bc:18:41:47:17:c9:7a:ab:f8:de:43:f0:e4:b4:
                    27:1f:38:8b:7c:e4:e2:fd:fa:13:da:81:04:27:a8:
                    e2:70:8f:af:65:56:f8:aa:86:eb:1a:fe:84:b8:f1:
                    ae:5a:40:13:45:b7:ad:45:23:7a:53:2d:c0:e9:a1:
                    87:e3:6d:e7:73:26:32:f4:8f:1c:c0:bc:6e:62:40:
                    51:92:f4:df:c2:8b:8c:01:41:c8:32:60:1b:40:45:
                    c0:7e:34:86:23:ec:dc:96:ad:44:cf:bf:3a:9b:19:
                    d6:a3:4a:4b:35:f5:12:0a:5f:6e:da:18:19:4e:85:
                    1e:d8:28:d7:57:a3:95:22:48:24:47:39:74:37:22:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:6E:E1:38:1F:B2:63:8C:1B:C1:90:50:0D:AC:34:F4:70:54:B6
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:3d:45:b6:e5:f3:7e:b2:19:11:14:9d:64:f2:8e:a9:b7:
         4d:d9:91:b4:a5:d0:6a:ed:56:97:a6:21:c8:9c:2d:3b:5a:81:
         85:ba:88:f5:61:fb:4c:01:b7:7d:2c:b9:4b:0d:fd:62:08:0b:
         39:94:d6:5d:bd:a6:8f:11:2e:8c:fe:74:34:72:1c:42:61:09:
         d4:d9:e6:89:7f:4f:3b:d9:de:55:2c:40:03:30:56:43:f3:0d:
         eb:76:02:c8:b9:82:14:40:eb:3d:66:3d:02:6c:b9:ba:73:a2:
         39:a4:ed:99:0a:f3:0a:86:03:78:ad:f3:39:29:0c:e3:0e:8a:
         8c:dd:06:25:da:8b:04:0f:ff:e8:44:0b:a5:21:df:74:32:c5:
         d4:9f:aa:49:61:ef:05:1c:45:63:bd:d6:c0:e3:fb:1d:9b:97:
         98:32:63:f0:a3:af:7d:f2:82:80:cf:f6:f1:08:67:89:e3:c7:
         d4:de:11:ae:01:41:0a:6d:84:df:b4:a3:58:20:05:2e:d6:c1:
         68:fc:92:dd:49:88:c7:51:1c:30:8c:49:2f:c9:91:3a:b7:1f:
         b9:bf:f8:b5:f0:af:d1:41:7a:92:59:cd:d8:9b:12:2f:f2:f1:
         8d:c7:1c:90:c0:0a:55:58:76:d6:1c:92:e0:c4:12:ba:c0:1f:
         ff:35:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:57 2025 by rpki-client