Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3139302e31332e3132372e302f32342d3234203d3e203631343733.roa
File:                     3139302e31332e3132372e302f32342d3234203d3e203631343733.roa (raw, json)
Hash identifier:          aIJ/5I7OOW/zIfSfSY7q0S3Dy6vzrnL41//JWbtyVSA=
Subject key identifier:   16:F8:BE:2A:72:BB:B8:E3:11:25:17:4F:6B:3D:20:33:50:1B:36:36
Certificate issuer:       /CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
Certificate serial:       3A6B99A364D6384552F726F0DAFE0BFE5E745917
Authority key identifier: 40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3139302e31332e3132372e302f32342d3234203d3e203631343733.roa
Signing time:             Tue 24 Jun 2025 16:23:32 +0000
ROA not before:           Tue 24 Jun 2025 16:18:32 +0000
ROA not after:            Tue 23 Jun 2026 16:23:32 +0000
asID:                     61473
IP address blocks:        190.13.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6b:99:a3:64:d6:38:45:52:f7:26:f0:da:fe:0b:fe:5e:74:59:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
        Validity
            Not Before: Jun 24 16:18:32 2025 GMT
            Not After : Jun 23 16:23:32 2026 GMT
        Subject: CN=16F8BE2A72BBB8E31125174F6B3D2033501B3636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:fa:7b:7e:f5:b2:a0:d0:15:8b:13:fa:7b:
                    d1:62:47:ae:55:ee:df:bd:f2:04:4c:69:93:86:36:
                    ff:d5:97:d8:74:bb:d5:13:6a:08:c7:12:98:f1:31:
                    95:99:8b:8a:a3:7c:5e:30:d5:ce:fd:75:64:35:66:
                    ac:19:40:52:f8:ee:80:48:65:7f:e8:2c:18:11:f6:
                    06:3b:80:1e:f5:b6:95:8f:fb:e2:f3:a6:88:e4:8c:
                    ba:31:ac:5d:54:c1:23:08:70:76:9f:44:e3:c9:75:
                    b4:04:54:25:00:62:cc:7d:86:53:43:5e:94:f9:7f:
                    44:09:fb:50:2c:98:dd:12:85:70:b4:3e:79:5e:50:
                    17:08:f4:f1:f8:d1:6c:17:65:c5:bb:55:c7:70:3a:
                    a4:5b:04:1c:23:01:7d:84:49:d8:53:2b:c4:60:e6:
                    25:c2:a2:21:fa:e0:3f:39:4e:17:4c:3c:63:99:6e:
                    37:c9:a2:00:28:47:8c:53:52:a3:f9:2b:91:3f:a4:
                    21:57:af:9c:22:03:8b:6b:68:e7:e2:70:55:e9:f8:
                    4d:b3:15:9f:ad:57:4c:9d:9a:f7:99:90:3b:e9:65:
                    11:28:06:cf:11:37:fb:e4:64:92:7d:21:1a:94:76:
                    ac:7b:97:03:00:90:88:1e:26:42:86:bc:ad:26:4b:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:BE:2A:72:BB:B8:E3:11:25:17:4F:6B:3D:20:33:50:1B:36:36
            X509v3 Authority Key Identifier:
                keyid:40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3139302e31332e3132372e302f32342d3234203d3e203631343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:4e:b5:d8:42:85:67:fd:71:d7:a6:14:41:f8:99:76:26:
         1f:4c:ae:e9:f5:72:4c:3e:bc:41:1e:db:ad:21:e7:f1:55:fd:
         d9:27:42:55:1d:7e:3e:39:43:45:3f:56:6f:1b:2f:f0:77:ef:
         b0:bf:bd:5d:af:fd:76:24:37:0e:2d:e3:aa:c3:f0:7c:15:46:
         da:20:88:ae:0d:fa:f0:08:bf:3e:02:ab:14:8f:72:5e:1b:c4:
         80:bc:eb:28:06:4d:07:48:0f:23:0c:b2:b7:b2:c0:5c:d3:6d:
         59:a3:19:5a:40:55:92:a4:bb:e1:69:1c:e7:fd:ee:e6:3c:b4:
         07:fc:2b:07:11:98:57:36:87:64:41:29:f2:3e:4c:92:76:32:
         bc:32:db:ad:aa:00:b2:0e:22:16:97:46:3b:5c:57:21:b1:cd:
         e4:6c:18:ed:36:e1:3e:ce:b0:7d:8b:98:ff:28:4a:89:09:36:
         45:d3:4b:9c:5c:63:d7:cc:c2:f2:e1:93:7c:11:cf:ff:b1:d4:
         b2:ae:ae:a7:7f:14:b4:5e:27:1d:a6:0b:a0:c8:47:05:59:63:
         54:b5:12:41:67:63:20:af:88:4e:c9:c0:ae:8e:4d:f6:57:4c:
         a9:6f:9a:1a:56:66:1d:1f:a4:7a:64:d5:7f:8a:7a:1b:0c:37:
         e3:b3:99:dc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOmuZo2TWOEVS9ybw2v4L/l50WRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA1MkE1QzkyQ0ZBNzA3MjE2Njk1NEI3OEJFQkE2REJE
MTUxN0Q5QjAeFw0yNTA2MjQxNjE4MzJaFw0yNjA2MjMxNjIzMzJaMDMxMTAvBgNV
BAMTKDE2RjhCRTJBNzJCQkI4RTMxMTI1MTc0RjZCM0QyMDMzNTAxQjM2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vfp7fvWyoNAVixP6e9FiR65V
7t+98gRMaZOGNv/Vl9h0u9UTagjHEpjxMZWZi4qjfF4w1c79dWQ1ZqwZQFL47oBI
ZX/oLBgR9gY7gB71tpWP++LzpojkjLoxrF1UwSMIcHafROPJdbQEVCUAYsx9hlND
XpT5f0QJ+1AsmN0ShXC0PnleUBcI9PH40WwXZcW7VcdwOqRbBBwjAX2ESdhTK8Rg
5iXCoiH64D85ThdMPGOZbjfJogAoR4xTUqP5K5E/pCFXr5wiA4traOficFXp+E2z
FZ+tV0ydmveZkDvpZREoBs8RN/vkZJJ9IRqUdqx7lwMAkIgeJkKGvK0mSzMxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFvi+KnK7uOMRJRdPaz0gM1AbNjYwHwYDVR0j
BBgwFoAUQFKlySz6cHIWaVS3i+um29FRfZswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzI1MUREQkYyMDZGMzA3OEUzNjQ1OUU2RTU2QjMwODkz
REY5NEE4RkJGOUMwNUUwRjJEMEU0NzQ1N0ZDRDM4LzAvNDA1MkE1QzkyQ0ZBNzA3
MjE2Njk1NEI3OEJFQkE2REJEMTUxN0Q5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDUyQTVDOTJDRkE3MDcyMTY2
OTU0Qjc4QkVCQTZEQkQxNTE3RDlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyNTFEREJGMjA2RjMwNzhFMzY0NTlFNkU1NkIzMDg5M0RGOTRBOEZC
RjlDMDVFMEYyRDBFNDc0NTdGQ0QzOC8wLzMxMzkzMDJlMzEzMzJlMzEzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4NfzAN
BgkqhkiG9w0BAQsFAAOCAQEAjJhOtdhChWf9cdemFEH4mXYmH0yu6fVyTD68QR7b
rSHn8VX92SdCVR1+PjlDRT9Wbxsv8HfvsL+9Xa/9diQ3Di3jqsPwfBVG2iCIrg36
8Ai/PgKrFI9yXhvEgLzrKAZNB0gPIwyyt7LAXNNtWaMZWkBVkqS74Wkc5/3u5jy0
B/wrBxGYVzaHZEEp8j5MknYyvDLbraoAsg4iFpdGO1xXIbHN5GwY7TbhPs6wfYuY
/yhKiQk2RdNLnFxj18zC8uGTfBHP/7HUsq6up38UtF4nHaYLoMhHBVljVLUSQWdj
IK+ITsnAro5N9ldMqW+aGlZmHR+kemTVf4p6Gww347OZ3A==
-----END CERTIFICATE-----
Generated at Fri Jul 4 16:23:53 2025 by rpki-client