Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139332e302f32342d3234203d3e203238303439.roa
File:                     3139302e3132312e3139332e302f32342d3234203d3e203238303439.roa (raw, json)
Hash identifier:          qwlBQjBSUZ4a5Kumr9M6EeBwi4bV7Ilwz+qfuJ+YGcQ=
Subject key identifier:   03:E5:AA:61:18:F3:28:67:2B:77:EC:DC:FB:46:CF:EA:5D:C0:D9:2D
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       7327CE13E6DA7A485512734FD3E3D1495988FBFD
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139332e302f32342d3234203d3e203238303439.roa
Signing time:             Tue 04 Feb 2025 20:06:22 +0000
ROA not before:           Tue 04 Feb 2025 20:01:22 +0000
ROA not after:            Tue 03 Feb 2026 20:06:22 +0000
asID:                     28049
IP address blocks:        190.121.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:27:ce:13:e6:da:7a:48:55:12:73:4f:d3:e3:d1:49:59:88:fb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Feb  4 20:01:22 2025 GMT
            Not After : Feb  3 20:06:22 2026 GMT
        Subject: CN=03E5AA6118F328672B77ECDCFB46CFEA5DC0D92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:d1:45:f7:eb:c1:a3:99:59:c1:11:7f:be:
                    e8:f0:ca:77:c2:b9:28:95:fe:1b:78:e2:e5:0d:b3:
                    b2:d8:77:bf:41:cf:e7:1f:c2:66:ae:7c:0e:7f:ad:
                    30:55:f8:e1:47:43:b0:17:3c:45:86:f6:f8:6e:ab:
                    79:16:e0:5c:be:58:89:d4:05:9f:cc:a6:3c:ba:37:
                    13:87:33:15:8d:ba:8c:bc:d6:f2:41:65:56:df:8f:
                    11:7e:74:af:97:e6:18:db:84:e3:48:72:c8:1e:c7:
                    de:c0:d9:c7:a5:0d:8b:25:79:66:ee:57:ed:7f:a7:
                    e2:1e:4d:46:21:c5:9e:eb:f6:53:6c:ea:02:24:24:
                    05:cc:07:2d:e8:00:65:38:ef:ec:23:f6:bb:19:d4:
                    15:aa:08:86:b3:b9:92:8c:51:a6:8a:0f:4b:b1:df:
                    aa:1c:47:ba:4f:e9:b1:fc:37:20:07:22:00:5f:53:
                    b2:17:de:cf:86:09:1e:ff:ea:75:52:1a:22:40:cb:
                    5c:c6:18:8e:c1:0d:ed:96:50:96:d8:33:63:f8:7c:
                    01:58:00:57:02:a7:d4:e3:63:71:78:63:b6:07:c9:
                    96:f4:e6:31:7e:26:32:00:2e:fb:89:1b:ba:ca:24:
                    80:24:95:b9:7f:1c:79:b2:e5:ae:f8:31:b4:b2:16:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:AA:61:18:F3:28:67:2B:77:EC:DC:FB:46:CF:EA:5D:C0:D9:2D
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139332e302f32342d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:be:ff:a3:de:6c:02:16:fd:cb:35:15:5c:43:7a:b8:00:
         82:4d:e4:c0:0c:e1:e2:f4:66:e5:36:15:5b:2b:e2:22:e1:83:
         ca:31:ef:63:a4:e0:3b:3d:07:e0:8a:c2:d5:94:39:e6:42:b7:
         22:11:ae:24:12:bd:b3:eb:e7:5e:95:83:57:09:47:5f:67:51:
         af:a5:22:dc:9f:07:2e:ba:e5:09:4c:ae:81:6c:b3:ce:bb:99:
         dd:5c:f8:96:e8:6a:96:19:54:14:8d:9a:ad:a2:eb:ff:3c:c8:
         29:b6:6e:ab:31:f1:2d:b1:e8:06:b8:27:b7:ae:85:7b:1f:f2:
         92:4f:d8:2c:2b:e2:63:4c:3c:e6:e1:ea:a8:ca:8f:be:f3:db:
         37:12:bb:e7:73:6a:cb:04:fb:84:c0:42:a1:f5:19:14:5f:c0:
         8a:e0:17:d6:b0:67:d5:6d:06:0e:89:7a:32:0a:16:9a:15:d1:
         60:5b:d3:9c:9e:bf:d8:df:28:74:c8:f0:bf:dc:30:e0:4d:8a:
         47:4f:4d:56:e5:7a:d8:4b:ec:37:a9:b6:b3:84:80:76:bf:79:
         2e:30:59:2d:46:01:08:9c:b1:7f:3b:e2:3f:7c:6b:23:e8:46:
         66:14:f6:aa:01:a5:99:2d:ae:fa:98:93:52:96:4b:d3:f0:0c:
         63:c2:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:37 2025 by rpki-client