Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3234203d3e203532343339.roa
File:                     3136302e31392e3230302e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          QqG+CZ9eTuPSBxyxcQnb6EP/xm0vlAmHSG8XO29kPaw=
Subject key identifier:   51:43:A5:AB:74:1E:85:05:10:69:8C:8F:F6:17:6E:2A:44:31:F7:71
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       79FC382B6C5260757456A1CB65583606DC0A1629
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3234203d3e203532343339.roa
Signing time:             Thu 08 May 2025 01:18:00 +0000
ROA not before:           Thu 08 May 2025 01:13:00 +0000
ROA not after:            Thu 07 May 2026 01:18:00 +0000
asID:                     52439
IP address blocks:        160.19.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fc:38:2b:6c:52:60:75:74:56:a1:cb:65:58:36:06:dc:0a:16:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: May  8 01:13:00 2025 GMT
            Not After : May  7 01:18:00 2026 GMT
        Subject: CN=5143A5AB741E850510698C8FF6176E2A4431F771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:bf:2d:d4:e8:fd:49:b2:1a:7d:20:d6:15:
                    d4:97:c0:6a:b1:65:8c:d8:80:2f:05:04:dd:73:94:
                    40:ca:53:50:96:6a:77:ae:51:9d:6d:8a:10:46:07:
                    cf:36:c2:b0:4e:08:a0:f0:86:c7:f9:36:5d:6f:17:
                    d2:a1:c5:e1:c3:56:75:f2:88:e0:a9:f8:3d:02:7a:
                    cf:6b:5c:c8:34:0c:82:8f:41:1e:eb:2e:4b:f1:6b:
                    53:ad:0d:d4:35:6a:98:13:cc:f4:a2:73:2c:19:9d:
                    ab:61:54:5d:c1:c9:f7:86:61:97:1d:d2:97:70:0f:
                    a3:bd:13:e3:d6:54:dd:80:99:4e:b5:90:7b:a4:68:
                    75:de:2b:5d:44:8c:ea:d1:2a:42:dc:06:22:c9:0a:
                    e3:1c:f5:04:d5:6a:fa:f5:a9:82:7d:c5:c0:11:b6:
                    2c:a2:7d:fd:31:ed:77:c3:1f:b9:84:d4:9a:27:82:
                    1a:75:d8:2e:4a:75:31:73:02:9c:78:a6:6c:78:a5:
                    bc:8f:ee:af:d4:97:b0:23:a9:c3:64:70:08:57:42:
                    24:f7:30:38:80:af:1c:13:c2:55:1b:43:95:5e:f8:
                    17:c1:50:22:6c:dd:e0:9a:70:40:14:d4:38:89:bf:
                    13:1c:34:7a:be:5c:fe:51:44:af:c8:5e:dc:61:81:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:A5:AB:74:1E:85:05:10:69:8C:8F:F6:17:6E:2A:44:31:F7:71
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:f4:40:97:ef:6d:4d:d5:a8:15:f6:9b:d0:dd:1f:ed:b0:
         08:36:aa:8f:dd:2f:63:5e:96:38:1f:a2:f6:f2:d3:5e:70:10:
         93:e4:33:a8:8f:9f:bb:ca:b7:dd:55:b8:95:fb:7f:a3:14:ba:
         72:a1:b8:5b:88:ff:bd:de:8d:da:25:15:7b:0d:29:e5:97:70:
         f6:58:11:c0:18:61:42:56:e6:45:17:7f:1b:c6:04:41:6b:00:
         38:db:44:64:22:f9:6c:0d:4d:cc:c0:26:38:cf:fd:5c:71:14:
         a9:9c:4d:37:77:15:55:b5:1f:16:2e:d4:25:26:d7:54:8b:49:
         9e:66:b0:07:92:32:74:5d:72:6b:09:b6:76:2d:22:96:c5:5e:
         21:ee:3b:d0:13:40:48:0f:39:82:8d:01:f8:a2:d3:fa:d4:64:
         02:03:75:18:a4:d6:49:79:d2:67:e6:b7:19:99:ef:38:13:bf:
         bf:4d:90:51:c1:fe:81:d0:66:78:28:fd:56:3d:11:28:30:b9:
         2e:88:72:4c:db:a4:d5:bc:a6:83:e2:d9:ed:45:19:85:a9:e3:
         98:59:af:a4:f2:d4:9e:d4:aa:0f:93:0f:d5:9d:2f:ba:d5:ad:
         50:76:89:92:8c:07:37:6f:8d:0b:96:40:28:14:f4:56:09:a1:
         27:ec:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 17:36:13 2025 by rpki-client