Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa
File:                     3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa (raw, json)
Hash identifier:          E/ZoFX/CdIRDhFPmgg8DL0GD77OG+3AaL6nHiOkFH60=
Subject key identifier:   FC:B9:10:0B:3E:69:A3:28:3B:A1:7D:99:DA:7E:8A:C1:E7:C1:FD:F2
Certificate issuer:       /CN=BA340C77857657BA84C4ACA36039874FAF1238B7
Certificate serial:       35CD5FF22772417371DAED67C929B4DFEA8C0A14
Authority key identifier: BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa
Signing time:             Tue 04 Feb 2025 18:22:50 +0000
ROA not before:           Tue 04 Feb 2025 18:17:50 +0000
ROA not after:            Tue 03 Feb 2026 18:22:50 +0000
asID:                     270100
IP address blocks:        190.109.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cd:5f:f2:27:72:41:73:71:da:ed:67:c9:29:b4:df:ea:8c:0a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA340C77857657BA84C4ACA36039874FAF1238B7
        Validity
            Not Before: Feb  4 18:17:50 2025 GMT
            Not After : Feb  3 18:22:50 2026 GMT
        Subject: CN=FCB9100B3E69A3283BA17D99DA7E8AC1E7C1FDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:64:f1:af:ec:ca:6c:fd:eb:09:ad:da:05:
                    5c:51:b2:a3:f9:04:2a:31:1d:a4:26:0d:70:fc:45:
                    10:3d:8e:89:25:37:1d:77:95:1c:96:88:a9:6e:03:
                    a9:23:25:54:39:09:db:54:52:cc:b2:4c:84:36:e1:
                    ab:b6:6d:7d:33:c3:89:b4:35:68:e1:3f:e7:2b:f8:
                    06:0b:b6:ff:1a:c9:95:52:ea:fc:fc:96:48:d3:b6:
                    5d:7d:49:f3:8c:17:51:23:e7:14:df:5d:6e:ae:b7:
                    af:9e:32:7e:6b:4c:78:e1:f5:0d:e6:31:e7:c8:91:
                    23:6d:80:0f:c9:97:c6:08:22:e0:80:13:2a:be:89:
                    af:5d:a8:02:a3:08:79:6e:8e:48:3a:45:3b:7c:bd:
                    b9:e7:b0:20:3d:cb:57:8b:02:54:d8:d2:84:68:e9:
                    43:ff:fb:dc:e1:44:1d:e1:e4:aa:ec:8e:e3:fb:41:
                    54:70:b1:7b:87:4c:49:ab:51:24:19:ca:18:ab:16:
                    5a:26:db:53:8e:2f:7c:01:fa:46:f8:2c:4e:d5:bb:
                    31:8c:25:65:82:da:f4:97:25:91:0e:57:04:69:da:
                    0f:91:3a:f6:c9:15:08:02:c0:f9:18:9a:e0:e4:71:
                    a5:d0:87:8f:e4:5a:85:a8:59:0f:d5:50:5b:96:9b:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:10:0B:3E:69:A3:28:3B:A1:7D:99:DA:7E:8A:C1:E7:C1:FD:F2
            X509v3 Authority Key Identifier:
                keyid:BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:92:c8:c8:da:9c:0b:64:73:ad:c2:0a:c5:c4:f8:26:b3:93:
         c0:a0:08:a8:51:4b:04:2f:37:19:34:8a:75:a4:51:d2:af:2a:
         51:24:21:0f:31:e6:2e:37:f5:2f:d8:32:be:81:4b:c1:bb:5e:
         0b:95:fd:b3:fb:27:c9:eb:df:aa:ba:6a:43:92:01:24:5b:cf:
         a0:12:77:62:e4:f9:f7:dc:ba:96:5e:d1:19:7a:f4:48:c5:11:
         14:41:c9:cf:c1:af:ec:97:c5:4c:a1:95:48:45:1a:23:b5:30:
         d1:e8:38:f4:03:1b:2c:7f:97:76:fc:84:3f:1e:06:75:5f:56:
         d2:60:79:9e:6a:de:05:3b:99:b2:e9:26:ab:31:d1:cc:6e:73:
         24:64:96:08:e1:e0:9f:e6:a1:c5:f1:5f:bd:ba:43:e4:bf:69:
         89:01:eb:ed:85:a3:5f:4f:53:62:f5:16:44:26:e1:d4:c9:5a:
         ab:b9:a3:f3:8b:41:0f:47:9d:c1:82:3e:ec:24:7a:8c:b7:1a:
         9a:06:2e:2a:d3:7c:f4:9d:49:f0:ed:75:4d:81:52:ce:d1:47:
         9e:5f:6a:1a:83:42:91:05:88:1d:35:cd:f6:b4:ec:fe:6c:29:
         0c:51:c4:59:92:d9:92:1b:64:48:8b:41:a1:c7:e8:58:1b:bb:
         1b:65:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:01 2025 by rpki-client