Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233352e302f32342d3234203d3e203237393739.roa
File:                     3139302e39332e3233352e302f32342d3234203d3e203237393739.roa (raw, json)
Hash identifier:          c+HBJMlQShI4FipVSucNjwJg1YlyQ9zgD9dUqXDK1jU=
Subject key identifier:   A1:B1:34:16:8D:48:B5:FA:62:E6:D1:6C:CD:4C:4C:48:AC:B8:00:24
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       511B0C5AEB747A32B0FD4363A351CD8D82EC26BB
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233352e302f32342d3234203d3e203237393739.roa
Signing time:             Tue 04 Feb 2025 18:44:08 +0000
ROA not before:           Tue 04 Feb 2025 18:39:08 +0000
ROA not after:            Tue 03 Feb 2026 18:44:08 +0000
asID:                     27979
IP address blocks:        190.93.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1b:0c:5a:eb:74:7a:32:b0:fd:43:63:a3:51:cd:8d:82:ec:26:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Feb  4 18:39:08 2025 GMT
            Not After : Feb  3 18:44:08 2026 GMT
        Subject: CN=A1B134168D48B5FA62E6D16CCD4C4C48ACB80024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:1e:fd:ec:d9:f2:5a:f7:d2:f9:91:28:61:
                    3f:eb:d3:a2:12:88:b9:c5:70:a5:d4:5a:26:34:d5:
                    39:ee:7d:2e:26:58:c0:87:74:68:0d:80:9e:8f:7a:
                    90:3c:05:25:db:aa:c4:24:12:2f:30:96:31:8f:32:
                    f8:41:fa:b8:01:ac:ce:73:b5:9d:3f:4c:80:a0:6b:
                    5f:14:26:a0:7e:11:a1:10:9e:6a:c8:20:47:a2:ad:
                    c4:57:58:d0:ac:cb:22:25:96:db:a7:3c:70:f2:f8:
                    aa:86:5f:ab:56:d6:2c:48:3f:e7:89:a7:cf:cf:81:
                    83:db:60:05:0f:48:2a:ea:12:31:93:bc:50:dd:c0:
                    88:dd:2f:e3:e7:31:5e:4e:91:88:69:70:e4:4a:cf:
                    05:c0:71:4a:28:13:51:ec:e3:92:19:a4:82:4f:b7:
                    58:6f:5d:e8:64:7f:d0:34:f2:1a:4e:71:92:17:06:
                    4c:73:c8:f0:d7:2b:91:2b:0a:a2:fb:dd:28:f1:c5:
                    42:2f:1c:7f:e3:a7:6a:18:f9:7d:a4:62:d9:49:d0:
                    f1:a0:96:e5:af:2b:54:5f:91:b5:0a:6f:0b:28:e4:
                    e3:88:82:9a:35:f4:a7:94:bb:d5:1b:32:f9:81:a6:
                    b2:70:75:36:a9:42:18:36:2c:60:d4:21:08:38:eb:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B1:34:16:8D:48:B5:FA:62:E6:D1:6C:CD:4C:4C:48:AC:B8:00:24
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233352e302f32342d3234203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:6b:96:43:e9:ad:2b:e7:9f:63:81:22:f9:2a:99:60:5f:
         c1:4f:35:3b:13:5e:98:72:f6:d2:8c:62:5f:02:c3:53:18:00:
         48:b1:eb:80:aa:5c:40:30:4f:ff:c0:93:5a:6f:a7:79:b8:fc:
         c4:c5:40:50:c5:f1:a6:e6:bb:83:3f:d3:c6:09:bc:1b:88:d8:
         58:35:ab:9f:15:f9:c0:ec:60:dc:ab:8b:fa:b7:9d:5c:11:78:
         6c:74:94:d7:fd:82:5b:6f:ca:e8:8f:31:22:de:f9:28:43:17:
         a1:fe:b0:59:c4:5b:4a:3c:10:0f:63:9e:2c:11:9c:c6:85:2d:
         64:34:9b:43:10:a1:1c:3a:26:b1:85:3d:0f:e2:90:0e:3d:0a:
         56:b3:56:c3:1b:d9:72:49:2a:ae:54:1a:94:69:00:d2:54:43:
         d7:a7:2b:ac:24:57:74:5b:42:6b:25:b6:49:af:f0:ec:5f:8a:
         10:f8:98:2f:c7:e9:a3:4a:18:12:4f:93:5d:ae:0a:4b:f8:26:
         c0:53:ff:40:eb:f3:86:f1:36:1a:b9:91:a5:d4:87:b1:d2:da:
         5b:bf:68:83:99:a2:31:b1:89:4e:fb:bc:64:9e:c7:df:8a:f5:
         1a:5b:4d:7d:93:28:39:22:64:26:38:56:64:1d:e3:90:93:a5:
         11:0c:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:04 2025 by rpki-client