Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa
File:                     3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa (raw, json)
Hash identifier:          NZzs/Po+hNLewO1CdC5yp6WlR9p5lLEsYOGMzfLZLO0=
Subject key identifier:   D6:EE:C5:4E:3D:AC:34:F1:37:68:A4:AA:95:44:1E:83:46:8D:B2:93
Certificate issuer:       /CN=7576B30485208191B54BA2BD59339967753E0699
Certificate serial:       1775140E788278D243A473671196674D325317AD
Authority key identifier: 75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa
Signing time:             Tue 04 Feb 2025 18:55:00 +0000
ROA not before:           Tue 04 Feb 2025 18:50:00 +0000
ROA not after:            Tue 03 Feb 2026 18:55:00 +0000
asID:                     13805
IP address blocks:        190.123.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:75:14:0e:78:82:78:d2:43:a4:73:67:11:96:67:4d:32:53:17:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7576B30485208191B54BA2BD59339967753E0699
        Validity
            Not Before: Feb  4 18:50:00 2025 GMT
            Not After : Feb  3 18:55:00 2026 GMT
        Subject: CN=D6EEC54E3DAC34F13768A4AA95441E83468DB293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:4a:a2:46:a5:b7:87:3b:c9:dc:c2:ac:4f:
                    b8:57:f4:34:56:2a:8f:f6:c7:d9:31:35:b4:2e:44:
                    c6:7d:59:8f:2a:a4:6b:be:5e:13:02:3b:8d:e2:d4:
                    6a:fe:a6:9e:f0:a8:07:69:80:b8:5d:21:04:a0:f5:
                    9c:81:4f:f2:ff:1b:41:3e:b1:db:8c:c7:6a:d9:8d:
                    c3:ed:d7:bd:d8:68:4e:45:10:ef:4b:77:6b:d2:a1:
                    fe:f8:04:2a:57:68:3a:80:af:41:4e:85:47:8f:ae:
                    04:5d:a5:5f:c6:19:97:6c:d4:c2:1a:2d:cf:13:2c:
                    13:0c:80:58:ac:c0:c1:c4:5a:fa:a1:8a:00:fc:fd:
                    a3:4f:d2:47:97:6f:30:a1:b1:5d:98:5a:38:05:c8:
                    e9:f0:c4:85:e5:28:c4:88:be:58:80:46:6f:2e:3f:
                    4b:be:56:24:c8:a5:c3:68:bf:9a:51:9c:d6:60:84:
                    91:96:ee:da:86:5a:96:5d:09:df:00:c2:51:1c:06:
                    8e:77:a9:db:67:3a:b8:99:54:b6:f6:83:ab:90:07:
                    77:8e:de:d4:cb:80:18:0f:a9:21:f7:79:e2:a1:45:
                    8b:dd:b5:c0:d3:c4:6e:35:95:23:2b:cc:4a:22:08:
                    ba:e3:1a:ba:d9:b0:7e:57:5c:41:07:fd:7f:84:41:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EE:C5:4E:3D:AC:34:F1:37:68:A4:AA:95:44:1E:83:46:8D:B2:93
            X509v3 Authority Key Identifier:
                keyid:75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:9b:47:66:3f:31:f0:da:bf:67:da:49:61:46:ad:02:d8:
         c0:57:65:98:3a:e3:8a:c6:ac:f5:8e:0f:db:16:c1:19:c5:2d:
         1e:b9:e4:d1:9b:b4:c4:55:15:18:a0:6c:b9:9e:d0:cb:1e:c5:
         17:bf:43:a9:a2:20:f6:9d:95:57:34:57:76:56:71:4d:4c:8b:
         c2:4f:cb:8e:87:2a:17:ad:de:f4:2b:e6:38:8e:0f:9c:2f:70:
         fe:13:ec:c1:1a:d6:70:cf:63:07:92:e7:90:5d:69:a6:16:76:
         f8:b7:52:c6:0a:3e:57:23:37:8b:7b:0e:9c:f4:1f:d6:8c:f7:
         04:6a:66:09:9d:c6:62:45:5e:14:60:a9:13:85:ec:76:19:fd:
         7e:2f:31:e6:d1:45:dc:32:49:75:ce:08:a7:7d:00:70:96:c9:
         5a:79:4e:b4:eb:cb:b0:4b:6e:34:ca:33:d7:4b:85:84:16:d7:
         43:00:cf:e9:94:95:7d:fb:d5:5b:3c:a6:a3:d8:a2:2d:3d:b3:
         5f:b0:01:f1:40:d5:bd:e8:73:ab:48:6e:bd:00:eb:18:36:ce:
         71:cb:e8:70:20:d8:e7:82:0c:1e:2d:36:31:49:5c:cf:09:3a:
         bc:17:fc:f2:ce:6a:a8:a1:a6:c7:6b:70:9b:b2:3e:9f:56:40:
         3f:07:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:09 2025 by rpki-client