Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3139302e35322e34382e302f32312d3234203d3e20323632313631.roa
File:                     3139302e35322e34382e302f32312d3234203d3e20323632313631.roa (raw, json)
Hash identifier:          pzxT8OFLZX/OSeRcYrSmruJiSQ5nlYKuR/W09jwHqWQ=
Subject key identifier:   79:43:B5:72:15:11:39:37:D1:19:7F:2F:BE:A0:52:15:C5:C6:C7:9F
Certificate issuer:       /CN=4B84C283EBC8873151EF0DFD0D5E4DB824C81206
Certificate serial:       7F7C45B547575548A90438E63B9B6659F58B0ED1
Authority key identifier: 4B:84:C2:83:EB:C8:87:31:51:EF:0D:FD:0D:5E:4D:B8:24:C8:12:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3139302e35322e34382e302f32312d3234203d3e20323632313631.roa
Signing time:             Wed 09 Apr 2025 03:40:00 +0000
ROA not before:           Wed 09 Apr 2025 03:35:00 +0000
ROA not after:            Wed 08 Apr 2026 03:40:00 +0000
asID:                     262161
IP address blocks:        190.52.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7c:45:b5:47:57:55:48:a9:04:38:e6:3b:9b:66:59:f5:8b:0e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B84C283EBC8873151EF0DFD0D5E4DB824C81206
        Validity
            Not Before: Apr  9 03:35:00 2025 GMT
            Not After : Apr  8 03:40:00 2026 GMT
        Subject: CN=7943B57215113937D1197F2FBEA05215C5C6C79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:5e:53:d7:8a:df:bb:d0:37:fa:97:83:94:
                    08:b3:75:a1:4f:7c:2f:d7:dd:14:dc:39:63:f2:92:
                    09:8d:90:84:57:2c:4d:69:28:0d:b1:59:75:26:f2:
                    a3:ad:94:1d:01:f4:43:0c:3d:17:a4:cd:e2:a3:56:
                    cb:2e:dd:52:1b:21:86:8a:4a:f9:1b:73:ba:0f:68:
                    da:b6:79:0e:a1:b9:d3:db:4c:02:42:5a:77:3f:7b:
                    8a:a5:d0:69:30:a5:f2:bd:83:38:7e:e8:21:89:4c:
                    73:0b:58:8c:2f:dc:f9:9c:8b:5e:05:78:08:7c:a4:
                    4c:ea:46:09:8c:29:35:45:74:91:68:38:32:b8:1f:
                    58:1f:44:66:07:36:cd:a4:f1:c8:34:95:c0:18:6e:
                    92:25:34:5b:8e:74:43:9e:13:41:8a:11:af:72:91:
                    73:98:2e:16:72:e2:f2:82:51:48:57:e4:d7:8f:85:
                    3f:30:42:12:7b:1b:ad:0d:dd:3d:44:2c:bf:de:08:
                    a4:b5:e2:e4:55:75:85:9e:73:df:5b:6a:4b:ac:95:
                    64:2d:ad:75:25:41:0b:4e:f7:ae:53:6b:c8:dc:ba:
                    56:e2:8a:42:43:10:80:0f:78:6f:6a:8c:15:86:30:
                    37:7a:6b:c5:f3:2c:69:0d:df:2e:e9:ff:60:fb:c8:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:B5:72:15:11:39:37:D1:19:7F:2F:BE:A0:52:15:C5:C6:C7:9F
            X509v3 Authority Key Identifier:
                keyid:4B:84:C2:83:EB:C8:87:31:51:EF:0D:FD:0D:5E:4D:B8:24:C8:12:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3139302e35322e34382e302f32312d3234203d3e20323632313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:da:0a:31:69:99:b4:58:54:0e:53:8c:58:cd:33:f8:67:
         b1:0f:57:d2:22:14:f8:d7:96:58:b5:99:82:70:97:ab:a5:23:
         0b:5a:8c:99:b5:28:75:a4:25:56:21:55:60:81:36:c2:29:52:
         58:08:6c:e8:42:c8:b2:ff:cc:25:b7:a1:95:de:bf:ec:cc:50:
         05:7e:25:8a:8d:4d:7f:ef:e2:dd:06:70:ed:24:15:48:9f:24:
         88:ca:d6:8e:02:31:0a:35:b3:6b:f2:c8:03:69:86:ee:4e:c9:
         a0:95:cf:c8:0d:f9:bc:0f:6a:72:12:cf:3b:bd:f0:df:0b:83:
         ed:95:96:c8:43:d7:ba:72:a4:ea:ce:8f:9b:d1:0d:3f:a6:97:
         54:b0:be:ee:e4:c2:0c:aa:5e:42:46:8f:86:e6:5c:db:9e:d1:
         72:86:b6:c4:1c:50:b0:13:8b:12:1c:58:4c:74:f7:25:59:b7:
         ed:80:26:ef:e5:9f:25:76:b4:ce:81:c7:7a:c5:b6:03:2f:61:
         90:f6:49:6c:26:c2:d7:59:a3:b5:c6:32:eb:41:84:0b:69:16:
         87:34:4f:32:d2:93:bb:5e:cb:96:2e:f2:c5:ae:fb:9c:b1:f0:
         88:41:ad:16:b7:33:7a:9b:ae:1e:10:2e:d9:30:02:68:f8:a5:
         45:04:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:32 2025 by rpki-client on console.sobornost.net