Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3139302e3132322e39362e302f32302d3234203d3e203237383837.roa
File:                     3139302e3132322e39362e302f32302d3234203d3e203237383837.roa (raw, json)
Hash identifier:          HMIHNTQ2yDYO6cOzfYf72Vkj5t310xrov2vpPF6LgGs=
Subject key identifier:   EB:26:FC:39:E6:4B:18:8D:17:B4:ED:29:CC:5B:54:0C:63:E1:2B:8C
Certificate issuer:       /CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
Certificate serial:       0F102297E259CC4ABCFE991C9D06BA96A2E399E2
Authority key identifier: F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3139302e3132322e39362e302f32302d3234203d3e203237383837.roa
Signing time:             Tue 04 Feb 2025 20:00:34 +0000
ROA not before:           Tue 04 Feb 2025 19:55:34 +0000
ROA not after:            Tue 03 Feb 2026 20:00:34 +0000
asID:                     27887
IP address blocks:        190.122.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:10:22:97:e2:59:cc:4a:bc:fe:99:1c:9d:06:ba:96:a2:e3:99:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
        Validity
            Not Before: Feb  4 19:55:34 2025 GMT
            Not After : Feb  3 20:00:34 2026 GMT
        Subject: CN=EB26FC39E64B188D17B4ED29CC5B540C63E12B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:7d:b0:89:56:95:83:12:5e:b4:2a:f9:28:
                    c3:1a:25:59:c5:39:3a:1f:f1:31:b7:46:35:72:9f:
                    5e:4c:4c:c2:0a:3c:1f:03:2f:b4:84:72:23:25:1b:
                    e9:dd:11:61:05:ac:40:98:13:b4:66:60:31:b7:8a:
                    88:e7:46:42:4c:21:f5:10:12:24:f8:f6:6c:4d:cb:
                    08:ef:73:4b:12:55:8d:29:fa:34:04:d6:f0:32:54:
                    34:14:d5:e0:9d:8d:d0:6e:38:16:be:1b:70:84:1f:
                    63:d6:46:ac:a3:bc:e7:b6:56:6d:f0:ac:83:b4:c0:
                    df:de:a4:ba:8f:76:53:35:06:41:08:be:09:1c:ed:
                    03:6e:45:3d:4d:cf:fc:e7:c3:42:02:d6:e9:e1:14:
                    a5:89:25:a3:9a:40:0c:6c:f8:36:9f:d8:d9:0d:d0:
                    4f:04:41:57:61:11:f0:a8:0c:cc:f5:5a:77:1d:dd:
                    b9:9e:71:8b:20:1d:e5:7c:d4:5c:b9:97:49:e0:08:
                    3c:c5:e4:0c:b5:0c:7e:0e:fb:bf:eb:19:6d:d6:1e:
                    d6:b4:b2:52:05:57:00:6f:c7:90:6b:fe:1f:db:64:
                    a6:dc:93:f1:56:7f:f0:26:77:c8:54:40:75:d3:b3:
                    ae:ba:e8:58:2b:cd:7f:e1:96:bc:bb:bb:2e:9f:80:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:FC:39:E6:4B:18:8D:17:B4:ED:29:CC:5B:54:0C:63:E1:2B:8C
            X509v3 Authority Key Identifier:
                keyid:F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3139302e3132322e39362e302f32302d3234203d3e203237383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:f2:2f:a9:1a:79:7d:9f:70:02:28:6e:5a:90:ae:3d:af:
         67:af:02:44:1b:55:16:75:e4:e0:ee:82:e6:d3:3a:a1:b1:c1:
         05:b4:4a:34:5e:03:c3:89:54:f2:ca:1d:4d:51:16:a6:83:36:
         68:66:0f:ae:d7:78:5e:6d:d6:95:f4:29:30:56:b1:f9:b2:66:
         95:7f:a7:a6:0d:8c:6b:18:84:9d:ef:a0:8b:37:c5:77:fd:3c:
         8d:04:e7:5c:70:7c:c9:0a:d1:05:45:db:8e:5e:af:9d:5b:f4:
         3a:e8:0c:99:09:f4:11:eb:26:92:ee:48:96:bd:3e:24:9c:24:
         82:4b:0d:26:a1:0d:bb:be:0b:f9:91:b1:53:c8:a6:c5:8b:5e:
         f9:c1:43:85:87:74:cb:bf:89:8e:4b:68:98:6f:f1:c1:5c:18:
         31:87:05:2e:87:1a:13:aa:1b:bf:28:c7:78:62:f8:cc:a1:4c:
         fc:b3:a2:92:be:7f:44:94:66:6d:04:86:bf:d9:6d:6f:71:0b:
         38:72:01:46:65:45:b7:ae:36:64:29:8a:3b:c1:db:0e:d9:13:
         75:e3:82:fe:f1:40:44:66:81:25:4a:cf:f8:c0:60:e3:dc:1c:
         cf:86:63:45:4d:34:67:97:04:c7:71:16:2d:34:f7:ad:5b:17:
         b9:a0:89:c1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDxAil+JZzEq8/pkcnQa6lqLjmeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAwRkJCQTMyRDQzQkFGM0VGMzE3NTQ1OEJERDAzRjRD
RTg3Njc0RjAeFw0yNTAyMDQxOTU1MzRaFw0yNjAyMDMyMDAwMzRaMDMxMTAvBgNV
BAMTKEVCMjZGQzM5RTY0QjE4OEQxN0I0RUQyOUNDNUI1NDBDNjNFMTJCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBH2wiVaVgxJetCr5KMMaJVnF
OTof8TG3RjVyn15MTMIKPB8DL7SEciMlG+ndEWEFrECYE7RmYDG3iojnRkJMIfUQ
EiT49mxNywjvc0sSVY0p+jQE1vAyVDQU1eCdjdBuOBa+G3CEH2PWRqyjvOe2Vm3w
rIO0wN/epLqPdlM1BkEIvgkc7QNuRT1Nz/znw0IC1unhFKWJJaOaQAxs+Daf2NkN
0E8EQVdhEfCoDMz1Wncd3bmecYsgHeV81Fy5l0ngCDzF5Ay1DH4O+7/rGW3WHta0
slIFVwBvx5Br/h/bZKbck/FWf/Amd8hUQHXTs6666FgrzX/hlry7uy6fgL91AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6yb8OeZLGI0XtO0pzFtUDGPhK4wwHwYDVR0j
BBgwFoAU8A+7oy1DuvPvMXVFi90D9M6HZ08wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQkFDRDRCQ0NDQkJGRkE5MkQ2RDI2MTlGMDc2QzI1Q0NG
NkQ3MTY4NUY0RjI0NzEyRUNENDNBNjcxOEMxQzJDLzAvRjAwRkJCQTMyRDQzQkFG
M0VGMzE3NTQ1OEJERDAzRjRDRTg3Njc0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDBGQkJBMzJENDNCQUYzRUYz
MTc1NDU4QkREMDNGNENFODc2NzRGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkJBQ0Q0QkNDQ0JCRkZBOTJENkQyNjE5RjA3NkMyNUNDRjZENzE2ODVG
NEYyNDcxMkVDRDQzQTY3MThDMUMyQy8wLzMxMzkzMDJlMzEzMjMyMmUzOTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL56YDAN
BgkqhkiG9w0BAQsFAAOCAQEAPxDyL6kaeX2fcAIoblqQrj2vZ68CRBtVFnXk4O6C
5tM6obHBBbRKNF4Dw4lU8sodTVEWpoM2aGYPrtd4Xm3WlfQpMFax+bJmlX+npg2M
axiEne+gizfFd/08jQTnXHB8yQrRBUXbjl6vnVv0OugMmQn0Eesmku5Ilr0+JJwk
gksNJqENu74L+ZGxU8imxYte+cFDhYd0y7+JjktomG/xwVwYMYcFLocaE6obvyjH
eGL4zKFM/LOikr5/RJRmbQSGv9ltb3ELOHIBRmVFt642ZCmKO8HbDtkTdeOC/vFA
RGaBJUrP+MBg49wcz4ZjRU00Z5cEx3EWLTT3rVsXuaCJwQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:12:37 2025 by rpki-client