Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203139313639.roa
File:                     3139302e39352e3132382e302f31372d3234203d3e203139313639.roa (raw, json)
Hash identifier:          OCX1kQ3nTKFUWe9fXhjtciYl5x1AtO7ZjGjhDGIHuhk=
Subject key identifier:   E7:E1:04:CA:33:A9:BD:B0:63:3B:6A:FA:7E:66:48:83:93:AD:A4:09
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       6D1640C080636E7D459A9BF07C33EEAF7D867311
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:21 +0000
ROA not before:           Tue 04 Feb 2025 18:06:21 +0000
ROA not after:            Tue 03 Feb 2026 18:11:21 +0000
asID:                     19169
IP address blocks:        190.95.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:40:c0:80:63:6e:7d:45:9a:9b:f0:7c:33:ee:af:7d:86:73:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:21 2025 GMT
            Not After : Feb  3 18:11:21 2026 GMT
        Subject: CN=E7E104CA33A9BDB0633B6AFA7E66488393ADA409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:a9:49:89:98:a0:f8:c1:58:fc:31:86:55:
                    82:60:11:f5:4a:f2:e5:5e:24:2b:e0:ea:7a:3f:ca:
                    78:88:9e:98:52:71:1a:d8:01:84:8e:5b:c4:cb:ca:
                    be:71:9a:a1:55:0e:32:83:c5:e4:df:c6:22:b8:e6:
                    6f:e1:e1:42:68:f1:ce:ec:84:48:55:ee:2d:ff:4f:
                    f9:43:ee:df:0d:b4:e8:ae:dd:5e:0c:e1:89:50:24:
                    1b:b0:0c:94:40:1b:c6:44:78:d1:60:97:47:0e:2d:
                    b2:65:8a:9b:3f:33:82:7f:5d:4f:77:bb:ad:6c:f3:
                    50:ca:a9:e2:ba:bf:af:d1:a6:bf:3f:bf:35:c1:6e:
                    58:dc:0d:94:fc:06:c0:07:5d:f5:99:43:f4:78:97:
                    3a:fb:18:c0:b2:a2:75:35:78:51:f6:27:b3:36:e9:
                    f1:46:5d:09:59:d7:09:0f:1b:f2:d0:f1:56:e3:36:
                    de:9d:bf:57:fb:f7:73:72:6c:97:60:0d:ae:9b:27:
                    e9:4c:86:43:12:6a:d0:26:fb:df:cb:25:5c:46:f0:
                    b3:ef:c4:fa:7a:20:1a:50:7c:13:a8:b2:f1:77:0a:
                    f7:82:f5:76:ed:fd:78:b5:5f:48:21:88:75:d9:20:
                    5c:fe:3c:3f:19:55:6c:68:50:29:c3:81:cf:36:cf:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E1:04:CA:33:A9:BD:B0:63:3B:6A:FA:7E:66:48:83:93:AD:A4:09
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.95.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:23:ed:7b:fe:54:35:19:e4:e0:76:6f:f5:8c:67:01:9d:e6:
         29:c3:70:6e:a7:ef:c6:6e:34:75:7f:7c:14:d1:42:35:ed:2b:
         41:71:34:95:81:85:2f:f4:75:0a:df:10:90:12:ea:7e:a6:96:
         8d:7a:d1:ac:59:dd:07:34:95:30:1a:56:3e:bc:32:b2:84:ac:
         9b:b6:60:f7:8b:6f:5b:59:54:b1:5c:a1:eb:3c:af:a2:5f:cc:
         08:77:16:1d:4d:71:82:86:0b:f2:8b:a4:2b:70:5c:1a:6c:4a:
         fe:7d:69:2f:6b:00:a3:de:93:14:27:5e:35:0d:b9:0f:7f:e8:
         6f:4e:a9:83:e4:5c:9f:83:79:5a:4c:3b:86:58:a4:43:f1:d5:
         42:eb:57:7a:cf:71:a6:01:77:f9:05:72:17:49:4b:70:c0:68:
         9e:ba:30:39:16:d7:81:1f:a7:19:b3:80:18:ef:ba:70:67:d4:
         c0:d0:61:88:da:41:9b:bf:a1:2b:fb:6c:2a:1e:af:52:53:bd:
         f0:fc:17:5a:66:c3:3e:bc:5c:27:01:73:d8:f3:43:00:25:94:
         ee:c5:6b:fb:f7:d8:3c:03:21:ea:4d:dc:5d:fe:ea:67:21:9a:
         16:69:b5:55:26:c6:7c:a7:30:75:e5:63:de:2d:c3:1b:45:69:
         48:83:e1:98
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbRZAwIBjbn1FmpvwfDPur32GcxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MjFaFw0yNjAyMDMxODExMjFaMDMxMTAvBgNV
BAMTKEU3RTEwNENBMzNBOUJEQjA2MzNCNkFGQTdFNjY0ODgzOTNBREE0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAKlJiZig+MFY/DGGVYJgEfVK
8uVeJCvg6no/yniInphScRrYAYSOW8TLyr5xmqFVDjKDxeTfxiK45m/h4UJo8c7s
hEhV7i3/T/lD7t8NtOiu3V4M4YlQJBuwDJRAG8ZEeNFgl0cOLbJlips/M4J/XU93
u61s81DKqeK6v6/Rpr8/vzXBbljcDZT8BsAHXfWZQ/R4lzr7GMCyonU1eFH2J7M2
6fFGXQlZ1wkPG/LQ8VbjNt6dv1f793NybJdgDa6bJ+lMhkMSatAm+9/LJVxG8LPv
xPp6IBpQfBOosvF3CveC9Xbt/Xi1X0ghiHXZIFz+PD8ZVWxoUCnDgc82z67jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5+EEyjOpvbBjO2r6fmZIg5OtpAkwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzkzMDJlMzkzNTJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzEzOTMxMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB75fgDAN
BgkqhkiG9w0BAQsFAAOCAQEAYiPte/5UNRnk4HZv9YxnAZ3mKcNwbqfvxm40dX98
FNFCNe0rQXE0lYGFL/R1Ct8QkBLqfqaWjXrRrFndBzSVMBpWPrwysoSsm7Zg94tv
W1lUsVyh6zyvol/MCHcWHU1xgoYL8oukK3BcGmxK/n1pL2sAo96TFCdeNQ25D3/o
b06pg+Rcn4N5Wkw7hlikQ/HVQutXes9xpgF3+QVyF0lLcMBonrowORbXgR+nGbOA
GO+6cGfUwNBhiNpBm7+hK/tsKh6vUlO98PwXWmbDPrxcJwFz2PNDACWU7sVr+/fY
PAMh6k3cXf7qZyGaFmm1VSbGfKcwdeVj3i3DG0VpSIPhmA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:33 2025 by rpki-client