Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230362e302f32342d3234203d3e20323733383834.roa
File:                     3139302e3132312e3230362e302f32342d3234203d3e20323733383834.roa (raw, json)
Hash identifier:          lPpd423hGGgp3IlG7e5klQanyDPwDrMiIJB3VLgSKRo=
Subject key identifier:   60:77:73:52:E2:A2:98:11:E0:83:E1:39:11:66:C5:21:C8:36:A1:08
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       437264C791EA83550A47D8E2E556B6798995547B
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230362e302f32342d3234203d3e20323733383834.roa
Signing time:             Sat 31 May 2025 03:30:00 +0000
ROA not before:           Sat 31 May 2025 03:25:00 +0000
ROA not after:            Sat 30 May 2026 03:30:00 +0000
asID:                     273884
IP address blocks:        190.121.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:72:64:c7:91:ea:83:55:0a:47:d8:e2:e5:56:b6:79:89:95:54:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: May 31 03:25:00 2025 GMT
            Not After : May 30 03:30:00 2026 GMT
        Subject: CN=60777352E2A29811E083E1391166C521C836A108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:8e:8a:ab:1f:93:78:a8:ec:95:3f:eb:ec:
                    c2:c6:d0:7a:a9:5d:67:ee:87:27:30:a1:09:cf:88:
                    67:83:6e:21:74:13:7a:35:6a:4d:07:1f:f0:d0:13:
                    7c:3d:26:4d:af:66:47:d5:40:cc:01:00:76:29:d0:
                    24:39:c7:90:f4:3c:2a:23:5e:39:8d:34:15:13:fc:
                    e8:85:b1:53:47:e6:71:7c:f1:76:9d:ca:72:16:62:
                    8c:95:b6:44:65:d0:89:98:e9:55:c2:5f:90:ac:67:
                    5e:0b:ac:9b:f1:a0:82:df:1a:cf:a0:f0:2e:90:0f:
                    f5:31:f0:15:e0:1e:16:9a:e6:87:82:ff:0d:6b:9a:
                    3e:bb:7b:e1:b8:3e:15:6d:72:f6:96:a7:e9:36:07:
                    35:e8:d0:72:8d:ef:e2:ae:e9:6d:05:a7:3a:b6:32:
                    1d:6c:5e:84:ff:93:7c:2f:47:b2:50:6c:5d:6a:78:
                    4e:86:3d:4d:15:ef:4c:51:45:25:e9:5b:93:cc:60:
                    09:d5:b3:ff:72:26:39:9f:02:55:66:5e:e4:25:f1:
                    44:c0:67:7e:3a:fd:17:91:8c:18:5b:e7:43:e4:6e:
                    d0:f9:97:5d:bc:ca:36:8d:e9:5d:e7:bf:6c:f4:b2:
                    33:2c:f1:5a:86:4f:44:47:b8:54:3a:5a:27:60:ce:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:77:73:52:E2:A2:98:11:E0:83:E1:39:11:66:C5:21:C8:36:A1:08
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230362e302f32342d3234203d3e20323733383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:13:b2:db:12:18:da:e7:ac:5a:3c:e4:d7:e8:1e:cc:99:
         44:9a:41:8e:42:d2:ad:a6:df:af:81:38:3a:57:25:f0:a3:8b:
         4f:1f:66:79:e3:6b:bc:a7:98:1e:84:0d:5d:c0:9b:ef:ec:10:
         d9:f6:85:f5:48:c6:00:55:1d:f0:cb:c9:dd:e8:c6:e5:89:e0:
         25:07:15:d3:41:25:8f:0b:0f:1e:e9:71:8d:c1:10:23:22:f4:
         b8:5b:79:8d:17:c9:69:e9:6b:e1:3e:76:31:bd:30:92:54:37:
         37:ca:bc:24:69:23:8b:2b:47:2c:fc:05:27:d6:cf:3a:03:12:
         62:74:d5:b0:31:37:89:00:b6:48:6e:63:0f:67:6a:43:d4:75:
         fe:c1:77:b8:f4:69:5f:82:e3:3e:a9:2d:83:b7:1e:2a:24:96:
         66:fb:93:7c:53:2e:78:22:b2:93:f2:32:98:b3:e6:11:04:53:
         dc:70:b8:95:5c:2e:be:f3:b7:07:db:8d:67:1f:0a:17:a9:e0:
         4f:83:d8:a9:ab:2c:c0:1a:3b:ae:a6:b3:50:72:55:4e:08:bb:
         37:a9:1e:cb:3c:0b:42:a4:43:06:4b:32:2f:f7:11:d3:3d:2b:
         bf:e5:1d:f7:04:ee:d1:88:c1:2f:fb:4a:0d:58:a1:05:07:24:
         b8:6e:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:08:49 2025 by rpki-client