Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e38332e3132382e302f31372d3234203d3e203237363635.roa
File:                     3139302e38332e3132382e302f31372d3234203d3e203237363635.roa (raw, json)
Hash identifier:          L66BTAB2D1qP0ZQ1uha/HsoCbM2eL/4kpHsW6j95++I=
Subject key identifier:   58:A3:92:FA:D7:B8:40:A5:84:4F:F3:25:FF:CF:1F:EA:49:B8:E9:5A
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       3B114334C15AA323B1C837D3C77F34336516AF2A
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e38332e3132382e302f31372d3234203d3e203237363635.roa
Signing time:             Tue 04 Feb 2025 18:36:50 +0000
ROA not before:           Tue 04 Feb 2025 18:31:50 +0000
ROA not after:            Tue 03 Feb 2026 18:36:50 +0000
asID:                     27665
IP address blocks:        190.83.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:43:34:c1:5a:a3:23:b1:c8:37:d3:c7:7f:34:33:65:16:af:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Feb  4 18:31:50 2025 GMT
            Not After : Feb  3 18:36:50 2026 GMT
        Subject: CN=58A392FAD7B840A5844FF325FFCF1FEA49B8E95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:78:61:9e:80:e9:c3:1e:9f:02:4a:0c:db:
                    2b:6b:c9:9c:bd:0d:e2:d8:66:e2:30:c0:a7:b8:91:
                    58:7a:61:cb:5b:fe:13:fd:c3:5d:02:44:04:54:d3:
                    05:dc:4b:12:f3:db:b8:72:f4:d1:14:d1:4e:45:09:
                    8d:a2:35:7b:78:9b:03:a3:0d:d4:f2:06:58:6d:51:
                    72:4c:da:ee:ef:9a:1d:6f:c7:44:44:f7:77:50:8f:
                    be:d6:d0:6f:83:2c:57:ca:39:c3:87:aa:c3:0c:d6:
                    87:00:10:8d:77:0f:ef:4a:b4:f1:8d:97:81:aa:aa:
                    7e:3f:c9:29:05:de:57:94:2f:f8:b2:ec:de:06:e7:
                    34:a3:ae:de:90:73:3e:3f:bd:27:d3:9f:06:b5:3a:
                    91:eb:21:b9:3a:65:05:33:96:9d:49:f3:2a:1a:8b:
                    d4:58:af:de:29:ba:42:4b:a7:e5:69:dd:1c:51:32:
                    dd:f0:86:ed:48:4b:e0:ad:ca:e7:3d:85:aa:12:f2:
                    5c:15:4a:da:2d:6d:b1:22:d3:96:bb:2b:e3:76:5f:
                    90:90:dd:8f:30:31:ad:fa:45:7c:a3:88:17:7e:4c:
                    39:ad:0b:41:e4:64:da:d7:f2:eb:3c:17:e8:5b:1e:
                    65:e3:44:54:44:73:5f:7f:80:44:73:96:9b:5d:a9:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A3:92:FA:D7:B8:40:A5:84:4F:F3:25:FF:CF:1F:EA:49:B8:E9:5A
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e38332e3132382e302f31372d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         26:59:14:35:f1:04:12:2d:39:e9:82:d7:03:6a:cc:c5:f9:65:
         d5:23:0d:89:a1:4d:0a:a2:b0:8f:57:36:b9:6b:3f:6c:e8:44:
         d3:c3:a4:da:89:fb:cc:2d:8a:c5:7e:e8:5f:fa:0c:24:27:6b:
         bf:d8:a4:26:4f:ff:c5:94:80:2e:45:f0:d2:0e:ac:ab:d7:62:
         f0:97:ba:a2:e5:96:d8:4c:5f:02:e0:90:ef:63:16:b9:e7:a3:
         5e:3f:e3:bf:1e:a9:e8:37:88:79:c5:45:f4:75:6f:71:e5:ce:
         e0:46:b9:9e:bf:11:43:e0:2d:c7:a8:4e:d5:f7:da:e5:56:ea:
         f9:7b:76:56:04:0c:9f:b9:0e:37:b1:e9:6f:8f:06:ed:97:c9:
         ff:50:40:c8:cb:1c:6d:af:d3:b3:87:08:97:f4:39:8e:59:88:
         07:b3:d0:40:4c:5c:48:63:9e:e1:52:d1:78:6f:75:09:bc:71:
         44:ba:46:50:1d:c4:ab:b0:4f:e7:e7:e6:37:cd:d4:ed:d8:8b:
         b1:c4:52:78:a4:a8:aa:01:f1:ab:8d:b7:88:d8:44:2e:53:44:
         19:ed:6c:36:46:fd:79:2f:c1:c5:e9:52:05:37:1b:2d:3c:c0:
         b4:b0:d9:6b:bb:fc:d0:eb:c6:a4:45:f1:14:eb:8b:b2:53:94:
         21:05:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:00:52 2025 by rpki-client