Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa
File:                     3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          FGFMdgarpiInCFALPAsvTpSK36yDDj6Bh1LrN6+kTeA=
Subject key identifier:   95:C7:22:9C:33:45:B6:B5:C0:1A:A5:55:DE:9F:2D:7B:52:D5:56:7A
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       6F9A1E1D0624E2DCA8F41FD2974722ABD246C804
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 04 Feb 2025 18:48:22 +0000
ROA not before:           Tue 04 Feb 2025 18:43:22 +0000
ROA not after:            Tue 03 Feb 2026 18:48:22 +0000
asID:                     395161
IP address blocks:        190.120.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9a:1e:1d:06:24:e2:dc:a8:f4:1f:d2:97:47:22:ab:d2:46:c8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Feb  4 18:43:22 2025 GMT
            Not After : Feb  3 18:48:22 2026 GMT
        Subject: CN=95C7229C3345B6B5C01AA555DE9F2D7B52D5567A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:ed:a4:c4:e7:5a:f3:34:23:b6:e3:0d:5a:
                    3b:7e:46:49:64:4e:f0:23:e7:17:09:9d:68:56:78:
                    58:93:fb:f0:a2:ac:0e:1e:0a:dd:84:7c:ca:15:ef:
                    99:75:2c:cc:55:9a:a3:4a:70:f5:b1:fe:0e:64:14:
                    e0:5a:5f:64:2c:2a:c9:46:7d:8a:7a:c1:c6:b4:72:
                    2d:21:46:73:e0:a9:93:98:1f:f2:ac:db:2f:ef:82:
                    e9:3b:f7:a0:e5:33:79:87:e1:c4:8f:be:8b:cb:5a:
                    d2:1b:4b:ac:99:75:7d:cf:62:b5:f6:d7:ce:6a:99:
                    af:c4:9d:94:f6:6e:8f:2e:c1:b9:78:20:31:fc:59:
                    4e:70:d5:c5:ab:2b:af:d7:0b:cb:7b:35:7e:e9:06:
                    df:6a:c3:f9:ed:3c:5f:99:1c:ad:e5:ad:1b:ac:6a:
                    67:01:61:c8:ce:03:04:32:10:e0:34:95:d4:32:32:
                    33:ae:a5:37:ea:cd:2f:25:cc:65:88:de:76:b4:c8:
                    6f:3a:16:22:7e:95:0f:65:81:75:af:fa:2e:a4:85:
                    25:c0:6b:1e:03:f6:4c:2d:d6:98:62:30:c4:07:9d:
                    59:aa:eb:d7:aa:5f:39:24:80:86:d0:02:ee:30:82:
                    86:4d:47:58:66:d5:c3:a1:5a:25:c5:1f:54:69:e0:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:22:9C:33:45:B6:B5:C0:1A:A5:55:DE:9F:2D:7B:52:D5:56:7A
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:35:0a:9c:b9:92:8f:a4:1d:c4:10:43:3b:bd:e0:ed:9a:f5:
         dd:0b:46:30:18:7f:7f:7f:58:60:d7:5c:26:ba:1d:36:4f:18:
         d9:0e:9e:94:4b:75:b2:a0:43:86:42:e6:f7:5f:80:92:1a:d6:
         9f:c8:df:16:53:d2:3a:2a:89:ef:8a:7f:17:31:57:3a:d2:38:
         87:40:ce:2d:5e:77:c6:45:42:3f:84:48:6e:64:74:6a:60:0f:
         57:0c:9c:94:b7:f5:31:50:17:85:96:d5:1f:eb:6b:b7:5d:3e:
         d1:35:c8:19:c5:0c:e7:f4:e7:15:fd:12:dc:3b:3c:e5:9a:18:
         80:77:49:2d:87:c8:2a:11:46:84:f3:8e:bf:e6:f5:04:d0:30:
         90:f1:eb:e1:10:08:fe:64:fb:01:a7:ff:45:81:d5:11:cf:93:
         87:e3:f2:a7:a4:89:60:5d:d2:1e:c7:73:49:3c:f9:87:bc:d8:
         02:70:fd:e0:29:3e:6e:58:5b:f2:dd:58:2a:3f:10:67:96:ab:
         5b:5f:14:20:76:92:c4:88:0c:ec:bd:09:51:01:73:d1:45:e4:
         d6:e8:e4:c0:bc:67:9a:45:b3:33:5b:f5:ba:fa:71:8c:d6:e7:
         61:ee:21:8c:1c:22:c7:de:4e:06:be:88:05:b4:7c:27:27:3f:
         58:0f:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:53 2025 by rpki-client