Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa
File:                     3139322e3139302e33302e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          KXvtx5vrgfzVxMjhA9+h0B6ttYMOf5AZBgIk3vrSDS4=
Subject key identifier:   99:04:C3:C4:29:3A:2D:8B:6F:73:E5:2C:96:FE:EC:97:30:A8:0E:D5
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       7597E95BE50CBEE3151494AC1834627C1FEFE9EC
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:47 +0000
ROA not before:           Tue 04 Feb 2025 18:47:47 +0000
ROA not after:            Tue 03 Feb 2026 18:52:47 +0000
asID:                     11172
IP address blocks:        192.190.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:e9:5b:e5:0c:be:e3:15:14:94:ac:18:34:62:7c:1f:ef:e9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:47 2025 GMT
            Not After : Feb  3 18:52:47 2026 GMT
        Subject: CN=9904C3C4293A2D8B6F73E52C96FEEC9730A80ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:ef:78:9a:2b:ae:4b:2a:83:25:7d:b4:cf:
                    db:54:64:05:24:7b:5f:fe:54:0f:1e:d2:3c:26:2b:
                    7a:d1:d4:61:4a:25:23:41:ce:8d:5a:c1:f7:f4:4a:
                    23:af:da:73:7d:8f:5b:47:a4:18:b0:6c:cb:0a:3e:
                    20:9f:20:9f:8d:14:0a:e6:b1:dd:a3:03:08:9e:4f:
                    37:e8:de:74:f3:af:2d:7b:02:ba:25:ce:5a:8f:f0:
                    cb:c2:1c:24:1c:c1:2f:2e:9b:fe:af:7e:4f:d3:25:
                    e5:d2:ab:01:62:9f:55:35:e5:9a:54:fc:e2:c8:1f:
                    36:c6:f6:b4:b2:7e:07:33:5d:8f:d0:ec:db:b6:16:
                    d2:9e:be:c8:b5:7b:8a:7e:d3:44:44:a7:e8:b7:0c:
                    38:6e:9d:19:43:c2:41:50:fd:c7:c5:c2:3f:d6:97:
                    07:40:27:a3:6a:61:89:84:81:71:53:84:2d:36:7e:
                    6c:97:5e:9c:c2:8a:a1:0f:16:69:f6:11:b9:0b:bd:
                    76:3b:76:f2:08:ee:5e:4b:cf:28:7f:d5:48:95:79:
                    13:0c:00:69:06:14:c8:f5:16:77:ad:d6:f0:73:94:
                    50:43:22:79:3b:86:26:19:10:c7:c3:58:43:18:f5:
                    95:77:d7:06:41:12:a4:ed:46:d7:64:dd:7f:31:6b:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:C3:C4:29:3A:2D:8B:6F:73:E5:2C:96:FE:EC:97:30:A8:0E:D5
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:6d:21:4b:b2:21:b7:85:e3:d2:11:35:2c:39:3c:15:da:
         3c:a7:47:fd:cc:f7:d6:13:ea:93:35:ed:52:7d:9b:d6:d3:87:
         b8:9d:a0:fa:79:7a:51:d5:22:02:22:d2:40:35:f6:d7:8e:90:
         65:17:56:a0:8c:0f:57:4b:a3:96:be:ce:df:80:4e:92:27:0a:
         f3:a8:d4:a5:fc:9b:fd:83:27:4d:61:ec:72:be:11:8d:d5:35:
         6f:d0:a5:c0:af:1f:b5:e2:7b:b2:53:13:9d:bb:af:2c:bd:ef:
         ec:f0:5a:a0:94:5f:ab:8e:a4:fa:b4:59:a8:d3:68:69:f4:36:
         18:5a:19:3c:de:c4:e8:10:e2:e1:38:2a:00:27:ba:e9:f2:4e:
         99:8d:b0:1e:35:3b:5e:77:b6:a9:26:4c:e5:e4:58:73:7d:e9:
         5e:80:88:09:75:b7:be:c8:dd:4d:28:19:37:df:10:71:74:88:
         c4:53:12:eb:04:82:fd:0d:7e:15:ff:6f:47:1d:68:1c:8d:7e:
         88:61:79:19:f2:5d:9f:ce:9e:8b:44:3e:37:9b:d5:40:90:58:
         a5:a1:09:74:ea:e9:59:fb:6f:81:49:61:4f:9a:b5:9b:a3:f4:
         c9:4f:83:30:8a:a6:1a:1c:45:c6:07:54:af:fd:2c:c9:c3:68:
         57:36:04:24
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdZfpW+UMvuMVFJSsGDRifB/v6ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNTAyMDQxODQ3NDdaFw0yNjAyMDMxODUyNDdaMDMxMTAvBgNV
BAMTKDk5MDRDM0M0MjkzQTJEOEI2RjczRTUyQzk2RkVFQzk3MzBBODBFRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutO94miuuSyqDJX20z9tUZAUk
e1/+VA8e0jwmK3rR1GFKJSNBzo1awff0SiOv2nN9j1tHpBiwbMsKPiCfIJ+NFArm
sd2jAwieTzfo3nTzry17ArolzlqP8MvCHCQcwS8um/6vfk/TJeXSqwFin1U15ZpU
/OLIHzbG9rSyfgczXY/Q7Nu2FtKevsi1e4p+00REp+i3DDhunRlDwkFQ/cfFwj/W
lwdAJ6NqYYmEgXFThC02fmyXXpzCiqEPFmn2EbkLvXY7dvII7l5Lzyh/1UiVeRMM
AGkGFMj1Fnet1vBzlFBDInk7hiYZEMfDWEMY9ZV31wZBEqTtRtdk3X8xa7GXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmQTDxCk6LYtvc+Uslv7slzCoDtUwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMxMzkzMjJlMzEzOTMwMmUzMzMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMTMxMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcC+HjAN
BgkqhkiG9w0BAQsFAAOCAQEAC7ltIUuyIbeF49IRNSw5PBXaPKdH/cz31hPqkzXt
Un2b1tOHuJ2g+nl6UdUiAiLSQDX2146QZRdWoIwPV0ujlr7O34BOkicK86jUpfyb
/YMnTWHscr4RjdU1b9ClwK8fteJ7slMTnbuvLL3v7PBaoJRfq46k+rRZqNNoafQ2
GFoZPN7E6BDi4TgqACe66fJOmY2wHjU7Xne2qSZM5eRYc33pXoCICXW3vsjdTSgZ
N98QcXSIxFMS6wSC/Q1+Ff9vRx1oHI1+iGF5GfJdn86ei0Q+N5vVQJBYpaEJdOrp
WftvgUlhT5q1m6P0yU+DMIqmGhxFxgdUr/0sycNoVzYEJA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:05 2025 by rpki-client