Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa
File:                     3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa (raw, json)
Hash identifier:          6OPwCrUJi69quKyDXT78ygO4v/lRzas1kF55i7pzBT0=
Subject key identifier:   A5:88:1D:0E:40:B9:03:76:90:3B:F9:E8:97:96:24:34:DD:3F:0F:BA
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       732904F0E5E27C44AD525D68BC613332EBF164F8
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa
Signing time:             Tue 04 Feb 2025 18:47:52 +0000
ROA not before:           Tue 04 Feb 2025 18:42:52 +0000
ROA not after:            Tue 03 Feb 2026 18:47:52 +0000
asID:                     265768
IP address blocks:        190.112.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:04:f0:e5:e2:7c:44:ad:52:5d:68:bc:61:33:32:eb:f1:64:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Feb  4 18:42:52 2025 GMT
            Not After : Feb  3 18:47:52 2026 GMT
        Subject: CN=A5881D0E40B90376903BF9E897962434DD3F0FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8d:97:4a:80:5a:37:8b:59:6f:0d:51:49:32:
                    29:51:71:4c:19:a7:58:13:6c:5b:bb:2d:64:9f:68:
                    5b:ea:2d:47:0e:d4:0a:2a:6b:e2:ca:07:2a:2e:77:
                    57:fd:da:c0:3d:b4:32:b5:31:3d:dd:bd:95:3e:c2:
                    fc:6b:bf:df:e3:9f:71:39:c8:bf:df:7f:59:98:94:
                    c3:3d:c7:39:41:d2:2e:67:17:cb:b3:e8:2c:bf:45:
                    7d:76:86:15:bc:f7:88:7a:36:01:4a:47:03:31:a5:
                    01:b4:da:d8:ef:63:4e:79:cd:11:b3:c7:e9:bf:c4:
                    ef:c9:21:4d:fa:81:f7:40:35:a9:47:5a:4c:43:c7:
                    28:51:d0:fb:e2:36:37:f6:d3:39:72:95:de:6a:e0:
                    b6:3e:b1:25:14:d9:f9:94:12:1d:5f:b5:59:d2:7e:
                    b0:a0:d9:15:8a:59:0b:10:b5:a1:89:0e:3c:a7:bc:
                    a0:42:df:ef:66:6a:4b:d8:0d:b5:b6:2b:75:81:62:
                    0a:fe:06:8c:e6:ca:06:2e:9d:ad:f6:48:a1:22:db:
                    9c:a1:4c:80:57:1b:2e:05:66:89:cd:b8:4d:ee:02:
                    c1:74:35:cc:d2:a3:79:73:89:ef:e6:18:15:d7:bb:
                    2e:e7:30:30:d4:8b:a1:16:fc:17:e4:9d:63:e7:74:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:88:1D:0E:40:B9:03:76:90:3B:F9:E8:97:96:24:34:DD:3F:0F:BA
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:37:96:a2:6d:79:24:78:54:e4:22:92:ac:ac:3a:bb:22:84:
         0c:45:93:0c:62:09:15:95:be:af:8f:0a:15:e0:37:c8:cc:1a:
         83:70:5b:39:b6:31:0a:72:16:f7:98:a4:e8:a0:6c:60:7e:73:
         b4:cd:46:ea:07:74:ed:62:2b:6e:1f:3f:c1:40:f7:fb:76:4d:
         09:3c:de:15:a7:d1:55:34:14:dc:ca:41:bd:a7:a4:38:e5:3e:
         9a:da:e5:12:99:e9:29:9a:b8:df:bb:91:08:29:6a:b2:c4:71:
         1e:86:53:ce:1b:e7:ac:e9:c4:60:2d:9c:d9:01:d6:12:5b:d1:
         f1:d8:07:c2:b4:f5:6f:fc:b5:1d:32:7e:1e:9f:0c:83:22:70:
         3d:59:da:c8:70:ab:1f:d5:1e:ff:bb:6c:d8:71:00:c3:61:2c:
         cb:d9:18:15:d8:76:fb:12:5c:00:d6:9a:0d:1a:59:06:86:f3:
         29:9a:d8:e2:69:32:e5:7b:5a:6f:e3:1a:a6:a0:8b:f1:68:3b:
         3b:9a:01:f7:1d:74:78:4a:17:e1:90:28:bf:63:b3:69:a4:d9:
         b9:cc:43:93:0c:85:cd:8c:81:25:c4:b3:7d:aa:62:2d:1f:ab:
         99:13:88:a9:b2:00:bc:fe:f1:8e:ea:28:d7:ac:b4:ce:be:98:
         26:74:4c:f8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcykE8OXifEStUl1ovGEzMuvxZPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0ODVDNUNENjM1NUVGQjZCREFGMUUyMkU3NDI0RDIx
QURDNkM5RjAeFw0yNTAyMDQxODQyNTJaFw0yNjAyMDMxODQ3NTJaMDMxMTAvBgNV
BAMTKEE1ODgxRDBFNDBCOTAzNzY5MDNCRjlFODk3OTYyNDM0REQzRjBGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4jZdKgFo3i1lvDVFJMilRcUwZ
p1gTbFu7LWSfaFvqLUcO1Aoqa+LKByoud1f92sA9tDK1MT3dvZU+wvxrv9/jn3E5
yL/ff1mYlMM9xzlB0i5nF8uz6Cy/RX12hhW894h6NgFKRwMxpQG02tjvY055zRGz
x+m/xO/JIU36gfdANalHWkxDxyhR0PviNjf20zlyld5q4LY+sSUU2fmUEh1ftVnS
frCg2RWKWQsQtaGJDjynvKBC3+9makvYDbW2K3WBYgr+BozmygYuna32SKEi25yh
TIBXGy4FZonNuE3uAsF0NczSo3lzie/mGBXXuy7nMDDUi6EW/BfknWPndBQzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpYgdDkC5A3aQO/nol5YkNN0/D7owHwYDVR0j
BBgwFoAUn0hcXNY1Xvtr2vHiLnQk0hrcbJ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FM0I3MDNDRTE4MUVDRjdGNkZCNTdEQ0Y1NzYzMTE5NkFG
RjBCRDE0RDFBQUEwODZGNjc5NzJDODIyMDgzQjZFLzAvOUY0ODVDNUNENjM1NUVG
QjZCREFGMUUyMkU3NDI0RDIxQURDNkM5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjQ4NUM1Q0Q2MzU1RUZCNkJE
QUYxRTIyRTc0MjREMjFBREM2QzlGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTNCNzAzQ0UxODFFQ0Y3RjZGQjU3RENGNTc2MzExOTZBRkYwQkQxNEQx
QUFBMDg2RjY3OTcyQzgyMjA4M0I2RS8wLzMxMzkzMDJlMzEzMTMyMmUzMzMyMmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjM1MzczNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvnAg
MA0GCSqGSIb3DQEBCwUAA4IBAQBON5aibXkkeFTkIpKsrDq7IoQMRZMMYgkVlb6v
jwoV4DfIzBqDcFs5tjEKchb3mKTooGxgfnO0zUbqB3TtYituHz/BQPf7dk0JPN4V
p9FVNBTcykG9p6Q45T6a2uUSmekpmrjfu5EIKWqyxHEehlPOG+es6cRgLZzZAdYS
W9Hx2AfCtPVv/LUdMn4enwyDInA9WdrIcKsf1R7/u2zYcQDDYSzL2RgV2Hb7ElwA
1poNGlkGhvMpmtjiaTLle1pv4xqmoIvxaDs7mgH3HXR4ShfhkCi/Y7NppNm5zEOT
DIXNjIElxLN9qmItH6uZE4ipsgC8/vGO6ijXrLTOvpgmdEz4
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:19:26 2025 by rpki-client