Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa
File:                     3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa (raw, json)
Hash identifier:          3gAkLWv3Ya69h1wqTbr3ljTK3KBI514UVcGJcPSfwJI=
Subject key identifier:   8A:6E:BE:FA:2D:EC:C0:7F:E0:1F:94:C2:8E:36:1F:24:29:04:39:25
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       45FD9134B726579A22F4FEAE451BEF2B6A16EB61
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa
Signing time:             Tue 04 Feb 2025 18:25:53 +0000
ROA not before:           Tue 04 Feb 2025 18:20:53 +0000
ROA not after:            Tue 03 Feb 2026 18:25:53 +0000
asID:                     27833
IP address blocks:        190.211.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fd:91:34:b7:26:57:9a:22:f4:fe:ae:45:1b:ef:2b:6a:16:eb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Feb  4 18:20:53 2025 GMT
            Not After : Feb  3 18:25:53 2026 GMT
        Subject: CN=8A6EBEFA2DECC07FE01F94C28E361F2429043925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:20:28:9b:1e:b8:b0:42:62:c8:c9:2c:c3:
                    e2:fa:85:bd:ee:74:ff:7b:78:69:d4:ee:9e:c5:42:
                    9a:67:6d:00:f0:77:3c:f7:98:10:e5:b2:22:c5:73:
                    2c:57:85:c0:a9:25:58:98:0b:c3:b4:40:3b:1b:42:
                    91:2f:14:83:de:38:9f:d1:10:dc:94:55:cf:3c:7a:
                    f4:7e:20:03:7d:dd:7f:af:ac:10:84:9d:92:9e:cd:
                    57:3a:4d:6a:4e:3c:fa:23:8e:58:ce:52:86:26:70:
                    9c:8e:e1:6b:5c:21:d3:8f:1d:8a:99:20:43:9c:2a:
                    19:66:33:2d:3b:f6:6a:25:90:3d:8d:64:ba:8b:d3:
                    6d:e9:9f:2c:78:09:e2:3a:cb:61:56:40:16:9b:91:
                    47:cc:3e:2c:80:64:46:09:aa:cf:4d:19:11:6f:c7:
                    9d:20:be:0a:ac:20:27:17:fd:13:14:91:b9:16:28:
                    e7:a6:ed:97:49:ce:c2:58:f3:9e:11:fe:a2:6a:90:
                    e9:df:bc:de:23:02:04:1c:37:8c:f4:ec:04:69:f1:
                    9b:89:14:1d:ab:33:2f:f3:53:9b:67:e2:e9:44:dd:
                    d2:64:98:8d:4b:94:89:ba:4c:13:a6:21:55:d7:8e:
                    4f:5a:9b:0f:36:16:88:05:c3:86:ab:cb:f8:7d:96:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6E:BE:FA:2D:EC:C0:7F:E0:1F:94:C2:8E:36:1F:24:29:04:39:25
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:8f:7a:46:8e:17:18:80:a2:89:ef:de:b1:4f:c5:b5:bb:
         c2:e0:54:10:b5:07:ab:35:f0:ed:74:7b:6f:1d:cf:64:76:5a:
         43:9b:2f:8d:34:41:f9:83:bd:c0:e3:e0:b9:40:7d:ca:e7:6b:
         48:18:19:ff:7b:d8:b7:55:39:c7:3f:71:85:ae:38:29:0e:a0:
         d4:58:03:7f:f0:9a:2c:33:4c:9a:d1:02:3e:96:99:26:c5:94:
         29:82:98:27:37:55:cc:79:7b:af:7d:a9:d6:29:04:aa:2e:03:
         f0:5d:a7:f5:b7:0c:de:c4:ae:1a:0c:b4:70:8f:62:6e:c3:08:
         d5:5b:55:17:12:6a:c5:df:b8:8a:48:a9:90:ee:aa:fa:c0:9a:
         d6:70:d2:84:5f:8f:41:94:d9:21:19:a2:21:64:27:40:03:49:
         0d:ca:31:f8:c7:ab:14:27:fc:38:13:00:8f:a0:c0:ed:b6:bd:
         bb:67:6b:bf:88:1d:89:f7:b0:87:86:6f:ec:2b:31:de:77:19:
         2e:d8:16:42:8f:4e:e9:8e:a3:d7:e3:96:14:ca:ec:1a:98:ca:
         67:87:3a:77:5c:2e:23:03:31:4e:ce:e9:9f:58:e6:6e:de:c7:
         d5:6b:c0:58:98:e7:30:1d:2f:6e:bc:29:f6:dd:cc:9c:57:61:
         71:0a:84:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURf2RNLcmV5oi9P6uRRvvK2oW62EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwNDkwMjdBRUQzODQ3RUZFRjNFMkQyN0M2NkZFOUQ1
MjBFNDRCMTAeFw0yNTAyMDQxODIwNTNaFw0yNjAyMDMxODI1NTNaMDMxMTAvBgNV
BAMTKDhBNkVCRUZBMkRFQ0MwN0ZFMDFGOTRDMjhFMzYxRjI0MjkwNDM5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfiAomx64sEJiyMksw+L6hb3u
dP97eGnU7p7FQppnbQDwdzz3mBDlsiLFcyxXhcCpJViYC8O0QDsbQpEvFIPeOJ/R
ENyUVc88evR+IAN93X+vrBCEnZKezVc6TWpOPPojjljOUoYmcJyO4WtcIdOPHYqZ
IEOcKhlmMy079molkD2NZLqL023pnyx4CeI6y2FWQBabkUfMPiyAZEYJqs9NGRFv
x50gvgqsICcX/RMUkbkWKOem7ZdJzsJY854R/qJqkOnfvN4jAgQcN4z07ARp8ZuJ
FB2rMy/zU5tn4ulE3dJkmI1LlIm6TBOmIVXXjk9amw82FogFw4ary/h9lv0rAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUim6++i3swH/gH5TCjjYfJCkEOSUwHwYDVR0j
BBgwFoAUuwSQJ67ThH7+8+LSfGb+nVIORLEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0EyNTVGQ0UxMkJCMjZENUUxMjAyRjc5ODczNjJBRjk1
NTFCRkM1QjAzMzZCRDBFRDk3OUZEQUVCQTIwNTcxLzAvQkIwNDkwMjdBRUQzODQ3
RUZFRjNFMkQyN0M2NkZFOUQ1MjBFNDRCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjA0OTAyN0FFRDM4NDdFRkVG
M0UyRDI3QzY2RkU5RDUyMEU0NEIxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNBMjU1RkNFMTJCQjI2RDVFMTIwMkY3OTg3MzYyQUY5NTUxQkZDNUIw
MzM2QkQwRUQ5NzlGREFFQkEyMDU3MS8wLzMxMzkzMDJlMzIzMTMxMmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzgzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvtPA
MA0GCSqGSIb3DQEBCwUAA4IBAQC0ZI96Ro4XGICiie/esU/FtbvC4FQQtQerNfDt
dHtvHc9kdlpDmy+NNEH5g73A4+C5QH3K52tIGBn/e9i3VTnHP3GFrjgpDqDUWAN/
8JosM0ya0QI+lpkmxZQpgpgnN1XMeXuvfanWKQSqLgPwXaf1twzexK4aDLRwj2Ju
wwjVW1UXEmrF37iKSKmQ7qr6wJrWcNKEX49BlNkhGaIhZCdAA0kNyjH4x6sUJ/w4
EwCPoMDttr27Z2u/iB2J97CHhm/sKzHedxku2BZCj07pjqPX45YUyuwamMpnhzp3
XC4jAzFOzumfWOZu3sfVa8BYmOcwHS9uvCn23cycV2FxCoSA
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:37 2025 by rpki-client on console.sobornost.net