Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa
File:                     3139302e3132302e39362e302f31392d3234203d3e203238313030.roa (raw, json)
Hash identifier:          KN5buHFa3ATCj2PhCIP2buP+Ucm+hmwNzy81kpde7Qg=
Subject key identifier:   EB:B9:23:D1:C5:F1:64:DF:6C:98:BE:CB:6E:9C:64:77:A3:49:DE:18
Certificate issuer:       /CN=7522038107C274858A7861E432C932176D64E119
Certificate serial:       59263C640E25FA0E1587B0E33F544642EB4F4AFA
Authority key identifier: 75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa
Signing time:             Tue 04 Feb 2025 18:26:12 +0000
ROA not before:           Tue 04 Feb 2025 18:21:12 +0000
ROA not after:            Tue 03 Feb 2026 18:26:12 +0000
asID:                     28100
IP address blocks:        190.120.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 14:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:26:3c:64:0e:25:fa:0e:15:87:b0:e3:3f:54:46:42:eb:4f:4a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7522038107C274858A7861E432C932176D64E119
        Validity
            Not Before: Feb  4 18:21:12 2025 GMT
            Not After : Feb  3 18:26:12 2026 GMT
        Subject: CN=EBB923D1C5F164DF6C98BECB6E9C6477A349DE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:0e:ff:51:70:99:b1:47:a7:9f:c9:52:19:
                    77:d4:99:8e:10:22:f9:e8:0c:d4:38:34:01:fa:88:
                    ed:6c:54:65:66:d8:7f:41:48:32:ac:0b:80:4a:0e:
                    d0:aa:21:37:b3:e4:16:57:29:de:34:cd:3e:db:3b:
                    1f:60:2f:22:b3:ab:ff:ee:9e:66:08:d7:73:cc:ed:
                    9f:1c:be:41:0b:42:d8:7a:a9:6d:91:80:0b:96:3e:
                    df:1a:47:73:09:02:57:13:85:33:ac:34:db:3c:42:
                    6a:36:86:5a:9c:e9:73:b2:bf:f3:3c:aa:f4:8f:a8:
                    20:92:3a:71:39:e9:fd:cb:e5:e8:5a:c8:53:50:48:
                    3f:8b:68:f6:47:d9:98:de:a2:bd:c5:a8:b0:8e:8c:
                    cb:2f:05:17:83:42:29:67:a8:77:c4:c9:3c:28:24:
                    a8:9b:c1:bb:a5:85:93:1d:47:c5:51:c2:9e:02:5b:
                    3c:84:f7:31:e0:d7:9f:7e:78:84:c3:b9:98:b2:8e:
                    b7:1d:fe:2e:ab:ef:c0:ee:1d:c4:55:cd:76:53:65:
                    62:14:74:67:6e:ca:27:dd:d1:52:8f:0c:c8:03:67:
                    4d:77:0a:ab:c3:f0:40:75:c8:c4:45:e8:ef:c4:c8:
                    da:42:5b:60:97:a4:08:fe:e8:32:2c:d5:f8:c5:fe:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:23:D1:C5:F1:64:DF:6C:98:BE:CB:6E:9C:64:77:A3:49:DE:18
            X509v3 Authority Key Identifier:
                keyid:75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:06:1d:48:19:d9:0a:d1:56:74:fe:63:18:ed:59:a0:9d:9b:
         5e:0a:32:df:15:b8:53:b1:0b:df:77:bc:b1:9d:d1:1e:e7:87:
         ac:93:0e:43:6a:d8:5b:26:90:3b:c4:2d:c4:b8:6b:c5:29:5e:
         d4:25:eb:44:71:87:b1:ba:c7:90:ae:6a:e4:67:7e:9b:e5:da:
         d8:15:be:56:90:33:58:55:71:09:34:2b:b2:72:e1:36:9c:f0:
         ab:18:ba:c0:d2:cd:7f:c7:45:19:5c:30:33:3c:d5:76:e1:38:
         29:e9:5b:38:35:76:60:7e:b2:0f:89:96:38:2f:a8:fb:8e:4a:
         0a:de:b1:ba:44:a5:6f:75:8e:66:7f:fc:86:dc:f9:93:70:ad:
         43:81:8a:e6:3f:b3:b7:07:2d:3e:87:c2:88:af:36:76:9f:8a:
         93:d1:c4:d1:8a:a0:3a:ff:c2:5d:02:8e:6a:e3:f5:00:ca:57:
         d2:08:06:3a:67:30:46:fb:fa:57:f0:00:a0:80:fd:85:0d:fc:
         7b:27:0f:82:1a:1a:bc:a3:79:d3:5e:22:aa:44:97:57:a9:f3:
         ef:43:fd:a6:52:8c:b4:01:14:1c:d7:ec:d2:a8:85:df:d5:9b:
         fe:e8:98:b7:fb:09:e0:5d:3d:23:4a:30:b4:20:ce:b8:55:20:
         f4:9a:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:50 2025 by rpki-client