Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa
File:                     3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa (raw, json)
Hash identifier:          leNm3aWM+i8PqDLUbmJghhTHzmKCdpzVmx5WkDAeuiU=
Subject key identifier:   42:E0:7F:35:3C:5C:EA:69:54:47:7B:C8:65:0E:60:89:DA:95:40:6B
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       6A3191D3BE05D9B2A4EB2C97A0987C6F18743E25
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa
Signing time:             Thu 29 May 2025 19:20:27 +0000
ROA not before:           Thu 29 May 2025 19:15:27 +0000
ROA not after:            Thu 28 May 2026 19:20:27 +0000
asID:                     3816
IP address blocks:        190.184.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:31:91:d3:be:05:d9:b2:a4:eb:2c:97:a0:98:7c:6f:18:74:3e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: May 29 19:15:27 2025 GMT
            Not After : May 28 19:20:27 2026 GMT
        Subject: CN=42E07F353C5CEA6954477BC8650E6089DA95406B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:82:b7:7c:6e:4c:c1:07:79:96:ab:3d:a1:
                    31:82:ee:96:45:2d:f3:8a:e1:2c:93:6b:5b:d0:94:
                    4f:59:8b:b2:f0:32:e5:7e:66:cf:6b:61:58:6b:29:
                    93:ec:3f:6f:f4:87:e2:29:cc:2a:5c:57:91:aa:73:
                    5d:1f:4f:87:6f:09:a2:91:ae:4e:31:d6:cc:00:02:
                    66:5f:e7:e5:ee:34:a5:07:38:2e:6c:c1:f6:0d:90:
                    2d:de:5a:2a:9b:13:7f:34:99:2f:45:40:2b:39:15:
                    43:a5:91:4a:2f:23:f9:92:16:99:b8:09:94:a1:fd:
                    d7:b6:52:5c:e1:38:6d:ae:29:e6:33:d9:74:ba:b5:
                    cf:20:36:73:72:62:79:3f:88:56:f4:44:10:d7:0d:
                    fb:23:f4:5d:10:9a:ed:71:9d:42:9e:b4:26:20:be:
                    04:ad:62:b0:59:34:46:b9:aa:fa:9a:68:09:ef:67:
                    66:32:5b:c1:ed:8d:2c:44:f9:36:4a:69:bc:f2:6a:
                    6c:f2:f4:c5:1e:e7:a1:1f:45:31:9f:27:a1:2f:f8:
                    ef:69:e6:83:62:47:48:8b:ec:e2:a5:61:6b:8c:a3:
                    8d:51:68:d0:9b:01:c7:f4:48:f2:0b:1a:b7:bf:15:
                    90:2f:bd:f6:8a:23:f8:e9:1f:2d:8e:0b:88:39:bf:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E0:7F:35:3C:5C:EA:69:54:47:7B:C8:65:0E:60:89:DA:95:40:6B
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:0f:d5:81:b3:b4:bc:d2:a8:5a:91:4d:74:c1:81:18:cd:
         41:7c:48:6c:9d:32:28:b6:ae:61:ae:53:1a:c7:7d:da:eb:e7:
         d4:bb:ee:c3:b0:d4:42:4f:7e:e0:2d:3a:17:76:5b:30:d9:19:
         77:27:e3:5d:60:5e:4b:ab:0e:0e:68:9c:56:49:90:5b:bc:a7:
         a6:49:0f:03:47:bd:00:5c:d9:b0:c3:db:17:fe:7f:7e:2c:4e:
         e4:fd:b4:a3:81:f0:5e:df:26:2b:ee:77:53:04:ab:41:1b:d4:
         be:90:f9:50:be:65:b8:8f:7f:ce:b6:96:39:8a:a7:d2:bb:fa:
         eb:6b:4f:ff:4f:7e:34:14:e2:37:ed:d3:7a:2e:3c:28:a0:52:
         ca:65:8d:0c:a3:49:12:68:1b:96:53:6b:56:97:3f:4c:51:9f:
         1b:c5:a3:2f:62:c5:45:cf:84:aa:39:20:9e:b1:df:5d:05:e4:
         89:c6:bb:a2:4e:09:ad:80:f8:cb:da:60:aa:cb:2a:5c:66:c7:
         41:33:1e:48:e1:03:41:4c:9e:5e:45:d5:d9:b4:78:cc:0d:03:
         06:86:c3:e1:35:b9:db:5d:82:50:07:45:6c:f5:cd:20:8f:b3:
         bf:fe:71:02:3e:a2:c1:76:4c:3e:e9:c2:bf:9c:9a:d9:60:81:
         58:fd:3f:bf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUajGR074F2bKk6yyXoJh8bxh0PiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTA1MjkxOTE1MjdaFw0yNjA1MjgxOTIwMjdaMDMxMTAvBgNV
BAMTKDQyRTA3RjM1M0M1Q0VBNjk1NDQ3N0JDODY1MEU2MDg5REE5NTQwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSQ4K3fG5MwQd5lqs9oTGC7pZF
LfOK4SyTa1vQlE9Zi7LwMuV+Zs9rYVhrKZPsP2/0h+IpzCpcV5Gqc10fT4dvCaKR
rk4x1swAAmZf5+XuNKUHOC5swfYNkC3eWiqbE380mS9FQCs5FUOlkUovI/mSFpm4
CZSh/de2UlzhOG2uKeYz2XS6tc8gNnNyYnk/iFb0RBDXDfsj9F0Qmu1xnUKetCYg
vgStYrBZNEa5qvqaaAnvZ2YyW8HtjSxE+TZKabzyamzy9MUe56EfRTGfJ6Ev+O9p
5oNiR0iL7OKlYWuMo41RaNCbAcf0SPILGre/FZAvvfaKI/jpHy2OC4g5v+sHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQuB/NTxc6mlUR3vIZQ5gidqVQGswHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzEzODM0MmUzMTM1MzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA764mDAN
BgkqhkiG9w0BAQsFAAOCAQEAZKcP1YGztLzSqFqRTXTBgRjNQXxIbJ0yKLauYa5T
Gsd92uvn1Lvuw7DUQk9+4C06F3ZbMNkZdyfjXWBeS6sODmicVkmQW7ynpkkPA0e9
AFzZsMPbF/5/fixO5P20o4HwXt8mK+53UwSrQRvUvpD5UL5luI9/zraWOYqn0rv6
62tP/09+NBTiN+3Tei48KKBSymWNDKNJEmgbllNrVpc/TFGfG8WjL2LFRc+Eqjkg
nrHfXQXkica7ok4JrYD4y9pgqssqXGbHQTMeSOEDQUyeXkXV2bR4zA0DBobD4TW5
212CUAdFbPXNII+zv/5xAj6iwXZMPunCv5ya2WCBWP0/vw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:25:23 2025 by rpki-client