Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f31392d3234203d3e2033383136.roa
File:                     3139302e39362e3132382e302f31392d3234203d3e2033383136.roa (raw, json)
Hash identifier:          0bYUl5zDt9N8jVIEXmDEn85SbpSvcO6Cgs/Feu/qwuE=
Subject key identifier:   1E:E1:E7:60:3B:64:93:EF:63:08:6D:0E:03:9F:F9:9E:77:1D:0C:21
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       338367AC1D137C4E6E0D457A9E00BDB4FB914BE4
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f31392d3234203d3e2033383136.roa
Signing time:             Thu 29 May 2025 18:20:25 +0000
ROA not before:           Thu 29 May 2025 18:15:25 +0000
ROA not after:            Thu 28 May 2026 18:20:25 +0000
asID:                     3816
IP address blocks:        190.96.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:83:67:ac:1d:13:7c:4e:6e:0d:45:7a:9e:00:bd:b4:fb:91:4b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: May 29 18:15:25 2025 GMT
            Not After : May 28 18:20:25 2026 GMT
        Subject: CN=1EE1E7603B6493EF63086D0E039FF99E771D0C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:7f:d7:1c:0c:28:72:9a:5f:4b:b8:9d:07:
                    c6:ca:2f:a4:e0:42:91:ec:d8:fd:a6:2b:4a:41:7f:
                    23:4d:25:fb:f9:43:61:28:2e:5f:f1:dc:dd:20:2b:
                    59:74:db:a9:01:4e:72:cf:a6:0b:01:43:5f:40:3b:
                    38:ab:16:1d:b5:0a:76:a6:92:c3:29:60:da:9e:6c:
                    cb:e2:d4:66:6c:6d:f7:42:40:0f:d9:b5:9a:84:1a:
                    5b:68:34:53:e0:af:47:43:f4:07:10:dc:04:3c:8e:
                    14:eb:34:5f:ad:51:f4:09:f3:d1:03:e2:9f:33:16:
                    9b:4e:21:ad:90:14:b0:1e:75:49:17:28:ac:b0:22:
                    ed:18:6f:05:3c:b9:22:29:d6:5e:f7:81:48:db:c5:
                    87:60:06:71:8f:92:47:6d:38:f6:a8:d1:e7:3b:aa:
                    62:63:d7:42:11:02:dd:d5:6a:3a:8f:0b:c3:27:2e:
                    e0:6d:f9:5b:98:5d:b8:f9:6e:e4:5c:b4:3d:5f:70:
                    72:66:33:b8:59:23:67:29:92:e2:ff:3b:74:1b:0a:
                    8e:ef:02:3a:6a:6b:e4:fd:a8:ac:f6:01:bf:34:8b:
                    b2:8e:30:e1:31:2b:d9:fe:e8:8d:41:e4:2b:27:d3:
                    98:d4:9e:06:4e:a7:a0:cc:53:37:bc:a1:a1:ee:57:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:E7:60:3B:64:93:EF:63:08:6D:0E:03:9F:F9:9E:77:1D:0C:21
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f31392d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:39:0a:d6:44:d4:0d:bc:9a:29:4f:fa:bc:e8:29:7e:1a:c5:
         71:59:ef:25:e7:ba:6a:05:56:30:61:2e:22:08:5b:90:41:74:
         ba:75:4b:5f:6a:70:f0:44:be:89:25:45:26:56:7c:f0:8d:06:
         b3:9a:ee:4a:22:1d:19:e7:9b:34:54:a3:d4:82:dd:68:25:34:
         ac:5c:49:2e:a5:52:aa:da:31:5d:25:04:1c:7e:c9:2c:b7:7b:
         e7:22:9d:37:98:5f:e2:6a:e2:29:61:ec:da:ad:6b:47:11:a0:
         da:b4:24:d3:55:a3:2a:e2:86:91:02:25:bf:bc:95:6e:d4:e4:
         56:51:54:e0:71:31:cf:33:ee:cc:a2:50:c2:5b:2b:d1:4d:9f:
         2f:48:5c:2c:b8:b9:22:8d:dd:a8:b4:dd:dd:67:a5:1a:a7:fd:
         99:a8:db:d2:ea:b1:98:63:1c:8d:74:31:0a:c9:38:3e:b5:33:
         62:5c:6d:8a:6c:92:51:e8:05:d4:23:b3:fc:43:5f:0d:2c:88:
         da:cc:13:6e:71:df:e7:c0:28:fc:bd:45:9e:82:b3:c6:87:6c:
         24:f4:e4:1a:7d:ea:84:25:b4:7e:93:4c:2d:0e:a1:2c:93:75:
         59:aa:0f:e2:73:55:07:29:a7:48:6a:69:9a:f7:90:25:22:fd:
         05:75:15:b5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUM4NnrB0TfE5uDUV6ngC9tPuRS+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTA1MjkxODE1MjVaFw0yNjA1MjgxODIwMjVaMDMxMTAvBgNV
BAMTKDFFRTFFNzYwM0I2NDkzRUY2MzA4NkQwRTAzOUZGOTlFNzcxRDBDMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHIX/XHAwocppfS7idB8bKL6Tg
QpHs2P2mK0pBfyNNJfv5Q2EoLl/x3N0gK1l026kBTnLPpgsBQ19AOzirFh21Cnam
ksMpYNqebMvi1GZsbfdCQA/ZtZqEGltoNFPgr0dD9AcQ3AQ8jhTrNF+tUfQJ89ED
4p8zFptOIa2QFLAedUkXKKywIu0YbwU8uSIp1l73gUjbxYdgBnGPkkdtOPao0ec7
qmJj10IRAt3VajqPC8MnLuBt+VuYXbj5buRctD1fcHJmM7hZI2cpkuL/O3QbCo7v
Ajpqa+T9qKz2Ab80i7KOMOExK9n+6I1B5Csn05jUngZOp6DMUze8oaHuV+8BAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHuHnYDtkk+9jCG0OA5/5nncdDCEwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzkzNjJlMzEzMjM4MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzMzODMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+YIAwDQYJ
KoZIhvcNAQELBQADggEBAEQ5CtZE1A28milP+rzoKX4axXFZ7yXnumoFVjBhLiII
W5BBdLp1S19qcPBEvoklRSZWfPCNBrOa7koiHRnnmzRUo9SC3WglNKxcSS6lUqra
MV0lBBx+ySy3e+cinTeYX+Jq4ilh7Nqta0cRoNq0JNNVoyrihpECJb+8lW7U5FZR
VOBxMc8z7syiUMJbK9FNny9IXCy4uSKN3ai03d1npRqn/Zmo29LqsZhjHI10MQrJ
OD61M2JcbYpsklHoBdQjs/xDXw0siNrME25x3+fAKPy9RZ6Cs8aHbCT05Bp96oQl
tH6TTC0OoSyTdVmqD+JzVQcpp0hqaZr3kCUi/QV1FbU=
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:20:38 2025 by rpki-client