Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa
File:                     3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa (raw, json)
Hash identifier:          1yqLGRIzdXUWKyIVEzxSBdXxt0wqhM4PZ+zKrbBNg8A=
Subject key identifier:   43:BF:35:5B:AC:65:25:48:E0:19:96:7F:32:FE:D0:26:C8:E2:CF:5D
Certificate issuer:       /CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
Certificate serial:       605378E7FBE5709157B5D2DFDEE51BEF0448709A
Authority key identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa
Signing time:             Tue 04 Feb 2025 18:14:39 +0000
ROA not before:           Tue 04 Feb 2025 18:09:39 +0000
ROA not after:            Tue 03 Feb 2026 18:14:39 +0000
asID:                     267853
IP address blocks:        190.211.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:53:78:e7:fb:e5:70:91:57:b5:d2:df:de:e5:1b:ef:04:48:70:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
        Validity
            Not Before: Feb  4 18:09:39 2025 GMT
            Not After : Feb  3 18:14:39 2026 GMT
        Subject: CN=43BF355BAC652548E019967F32FED026C8E2CF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:b2:e1:1e:02:0f:2c:f2:7f:54:75:5c:a4:
                    7c:1a:6e:2d:31:c6:b9:18:61:90:f6:2e:90:eb:bb:
                    a7:7c:cf:dd:2f:cf:ad:eb:0b:8d:44:8a:2a:cf:d7:
                    2a:72:b4:ae:06:42:76:80:29:69:b3:60:40:9a:f7:
                    17:c3:14:1b:fd:97:f4:93:e1:c8:a9:3e:72:38:54:
                    cd:1f:97:d8:49:54:8b:3b:8d:8d:d8:f1:ec:68:ce:
                    77:fb:d2:89:80:a4:80:30:84:f4:0e:9c:6a:eb:e1:
                    a9:27:00:5e:d6:01:a9:17:27:00:2c:c8:72:90:c0:
                    e9:83:b1:24:c2:89:c9:40:59:1a:15:fb:be:87:2e:
                    6b:18:fd:0f:3a:27:ff:8f:b8:30:c5:87:d1:e0:4a:
                    cb:6a:98:18:c7:e5:b0:e0:a0:27:74:dd:ec:28:b7:
                    58:98:10:76:bd:8d:e3:ea:4b:fd:c5:b2:84:62:d9:
                    5b:78:e5:c2:e8:ae:25:ce:35:f5:6f:62:6e:ba:86:
                    8a:3d:ee:14:47:a6:4d:c7:ce:14:d1:82:11:06:3b:
                    3d:13:d2:dd:8d:70:09:c9:fd:42:df:8e:14:a3:20:
                    78:43:00:8c:f6:c7:c8:b1:95:64:c6:bc:d6:09:c8:
                    2d:e4:2b:d6:f3:44:2b:dd:6f:f6:43:79:6a:ba:bd:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BF:35:5B:AC:65:25:48:E0:19:96:7F:32:FE:D0:26:C8:E2:CF:5D
            X509v3 Authority Key Identifier:
                keyid:2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:9e:4f:b2:70:45:3b:79:1b:51:2a:6b:60:02:28:40:12:
         30:6e:a2:02:f8:10:c8:70:21:3d:60:3e:1d:b7:99:cd:b3:72:
         73:b1:d8:67:e3:ee:a2:b3:7a:b2:bf:e7:e8:c9:70:86:b0:c7:
         53:7c:e4:04:8a:1a:83:ae:5b:11:f9:85:db:6b:4f:c9:9d:bd:
         11:42:f3:d3:9d:3d:2a:22:1e:18:9f:c8:31:cb:9c:45:ac:6e:
         e4:7b:fd:9a:5e:7d:ac:5d:42:ae:8f:79:0e:51:de:2d:aa:18:
         64:c5:df:71:3e:65:1c:32:34:5e:42:e9:9e:e3:90:50:0f:06:
         2d:e5:b7:27:76:33:44:9d:7e:56:26:d1:c6:34:c6:02:88:c5:
         e1:3d:9b:e0:9d:35:ec:c0:d5:cd:49:4a:81:c3:bb:b6:0d:f8:
         f8:97:c8:c9:a2:3a:31:45:60:36:66:9c:9c:91:d3:2b:e7:9c:
         0a:50:d0:84:2b:97:59:e8:59:3a:93:6b:79:49:e5:c5:dc:85:
         dc:03:38:c7:34:61:51:d3:82:aa:0c:4e:b6:db:3b:54:be:ab:
         75:43:de:e1:1f:64:40:b6:18:ad:1a:7e:3b:96:f3:ba:77:bb:
         48:ba:47:ee:bb:a8:b8:30:f8:0d:30:30:d8:12:27:3d:29:4f:
         d8:0d:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:04:05 2025 by rpki-client