Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa
File:                     3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa (raw, json)
Hash identifier:          IPOFvUgkPPriC1/fYLuvDUH8QdC7bv9aT43GHmDuuTE=
Subject key identifier:   7E:49:CF:E3:F2:32:8D:18:4C:B5:05:50:1F:DE:58:93:83:DF:43:BF
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       463A7D60CA2F9400FEEF7EC56CBB385221E76770
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa
Signing time:             Fri 25 Apr 2025 23:00:00 +0000
ROA not before:           Fri 25 Apr 2025 22:55:00 +0000
ROA not after:            Fri 24 Apr 2026 23:00:00 +0000
asID:                     28049
IP address blocks:        190.121.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3a:7d:60:ca:2f:94:00:fe:ef:7e:c5:6c:bb:38:52:21:e7:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Apr 25 22:55:00 2025 GMT
            Not After : Apr 24 23:00:00 2026 GMT
        Subject: CN=7E49CFE3F2328D184CB505501FDE589383DF43BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:fb:7e:b2:61:a6:d4:a7:6e:6a:11:b7:d1:
                    fa:1d:fa:bc:e5:7b:5a:e5:ae:48:9e:ee:3f:c8:0e:
                    38:a3:4a:6f:33:57:16:ce:2d:90:59:f1:51:e3:bd:
                    a4:5b:b1:aa:39:ab:29:0b:5d:27:f8:38:c4:f4:1f:
                    7e:38:05:8a:56:c1:8b:9d:1b:3a:f0:51:2f:52:37:
                    6f:0b:5a:c7:b8:b6:9b:6b:4d:54:13:1e:cd:74:37:
                    c7:bf:2c:f7:d6:8e:47:5b:39:ca:a6:65:62:1c:cd:
                    14:9c:d8:f4:88:ea:18:38:00:74:ec:f6:ff:21:d2:
                    d2:10:53:de:be:e7:cb:3a:c3:1c:c7:e6:7f:4c:a3:
                    a8:7a:cf:5b:ed:16:dd:3c:a8:48:9f:8b:cb:d3:9a:
                    04:f9:f6:59:4f:16:1c:31:aa:48:f3:7a:7b:65:b2:
                    e1:d3:2f:bb:ea:f1:35:f0:1c:af:2d:63:47:75:c6:
                    1e:68:ea:43:09:01:55:9d:71:ad:11:79:d9:7f:20:
                    d3:0e:fe:b9:4e:96:7f:1c:00:ca:4c:6d:a5:bb:80:
                    5d:b5:f3:8c:92:37:a7:b4:9e:4c:4f:52:81:ed:e9:
                    97:1f:cd:ee:a9:13:34:4a:8f:38:ff:a8:79:d7:03:
                    b5:64:37:e3:91:04:10:08:f8:41:03:b8:5f:1d:46:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:CF:E3:F2:32:8D:18:4C:B5:05:50:1F:DE:58:93:83:DF:43:BF
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32322d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:47:24:73:0a:a2:40:1d:e9:db:20:cf:92:dd:7a:f7:12:13:
         e7:3e:22:00:14:7d:69:a6:ab:93:69:1d:63:a9:58:d9:3d:cb:
         10:5f:21:d7:88:d9:94:d2:62:b1:f4:b3:ac:8b:4b:bc:95:cd:
         c6:e7:95:a6:10:fa:43:89:2f:5f:68:e1:ee:3e:01:7d:5a:3e:
         59:b7:a4:25:d8:58:5e:ec:af:0b:cd:b4:47:8a:aa:89:11:40:
         b0:f0:66:85:91:38:12:fb:27:6b:28:ef:a7:22:97:d2:56:83:
         3d:fc:6d:c1:42:b7:ea:9b:25:d7:f1:9e:88:73:3b:fe:c9:c5:
         5d:aa:90:8b:a2:22:63:36:ee:ed:fd:91:b1:a8:70:ff:fa:23:
         a4:89:70:d6:e7:5c:86:66:48:7c:1e:ec:6a:bf:1b:cc:9f:c4:
         20:d3:51:49:a4:e7:a5:48:7e:cb:6f:54:c6:0e:18:dd:b8:e5:
         4a:05:33:73:7d:0d:cd:d2:7a:b9:7b:43:4d:0b:3e:1d:d1:d3:
         11:f4:36:d0:63:3c:83:5f:34:cd:61:4d:fc:01:3c:f7:e8:e1:
         11:6d:27:85:b5:8a:d9:07:70:82:7f:3f:29:14:e2:84:3e:80:
         09:70:7d:2b:34:a3:8f:14:68:3d:d8:4a:5a:45:d0:bb:2c:df:
         f2:5f:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:30 2025 by rpki-client on console.sobornost.net