Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3139302e3132322e3139322e302f32302d3234203d3e203238303636.roa
File:                     3139302e3132322e3139322e302f32302d3234203d3e203238303636.roa (raw, json)
Hash identifier:          AOvO0WcCKD/MQeFVKjVCSAFWcBOMSLdDzzGDUs+AhBg=
Subject key identifier:   D6:9D:BD:E6:0A:57:99:8A:5D:CD:D9:2B:FC:86:78:2A:47:04:72:6C
Certificate issuer:       /CN=FB2370BF9B986D58F8105A4410005CD845985926
Certificate serial:       103044EA08B9E3FDD77FF9FCD5F7CBAA9BD426E7
Authority key identifier: FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3139302e3132322e3139322e302f32302d3234203d3e203238303636.roa
Signing time:             Tue 04 Feb 2025 18:10:18 +0000
ROA not before:           Tue 04 Feb 2025 18:05:18 +0000
ROA not after:            Tue 03 Feb 2026 18:10:18 +0000
asID:                     28066
IP address blocks:        190.122.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:30:44:ea:08:b9:e3:fd:d7:7f:f9:fc:d5:f7:cb:aa:9b:d4:26:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2370BF9B986D58F8105A4410005CD845985926
        Validity
            Not Before: Feb  4 18:05:18 2025 GMT
            Not After : Feb  3 18:10:18 2026 GMT
        Subject: CN=D69DBDE60A57998A5DCDD92BFC86782A4704726C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:25:09:84:a3:ca:95:56:e1:b0:a3:09:ef:
                    10:8c:2d:be:90:96:ad:eb:ba:7f:93:90:0c:89:d6:
                    68:d4:70:c9:03:0a:08:81:a5:ef:e9:a0:eb:9b:39:
                    64:54:3a:18:1e:5f:01:22:6d:c3:d3:99:e7:f9:cf:
                    89:d6:4e:87:6b:3e:13:a4:b8:e7:be:18:d4:a0:c0:
                    1b:05:05:3a:68:ae:47:d4:9f:86:0e:dc:19:68:88:
                    37:5e:69:b6:1d:f5:d2:52:f3:18:7a:82:11:f8:93:
                    d8:c5:c3:58:29:62:0b:d9:26:54:70:1d:22:5e:9c:
                    37:a0:da:83:ab:03:41:50:85:a5:e8:08:7c:71:28:
                    08:1a:d3:ca:91:57:c5:6c:c9:01:94:20:5c:e4:cc:
                    1c:99:e5:c6:57:4b:68:7b:b0:f0:3d:88:4f:96:d6:
                    43:1c:4a:58:bd:dd:2b:aa:fe:90:05:47:5b:16:f5:
                    eb:5e:61:28:15:b8:1d:53:1c:36:16:f0:60:ba:d3:
                    8d:bc:4d:a6:74:25:c1:da:c7:a2:cf:74:52:23:a7:
                    0a:65:17:e3:4d:a4:37:bc:ab:0a:56:d5:19:4a:28:
                    ca:56:85:2c:38:3b:06:4d:a7:f8:1c:0a:84:9f:70:
                    40:21:a2:76:56:14:f1:64:22:23:0b:5b:12:06:d6:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9D:BD:E6:0A:57:99:8A:5D:CD:D9:2B:FC:86:78:2A:47:04:72:6C
            X509v3 Authority Key Identifier:
                keyid:FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3139302e3132322e3139322e302f32302d3234203d3e203238303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:2a:c0:45:f9:63:9d:ed:e7:8c:54:62:b9:d7:18:11:9e:
         64:a8:d4:93:3a:b4:81:47:c0:3e:86:8f:e8:7f:97:a2:37:17:
         16:07:d2:3c:4b:c1:48:44:56:aa:44:1e:7e:7e:cf:aa:6d:56:
         2e:eb:12:be:d7:64:d8:b6:b0:5b:56:82:1f:59:5a:37:9c:38:
         0d:31:bb:56:a4:17:9d:83:40:b2:fd:b6:92:70:1b:f3:41:4e:
         98:a5:76:72:52:57:30:6e:71:62:67:b7:26:cb:ef:ae:6f:b2:
         c3:b5:b2:f5:ef:e0:45:3d:a9:f1:2f:80:aa:21:e8:9b:df:89:
         a9:00:f0:f4:f8:fc:19:89:eb:e0:35:df:de:1b:82:04:72:34:
         4e:b1:41:97:c3:1d:6a:85:5e:d3:40:5e:c5:fc:33:22:eb:a3:
         81:80:05:68:7a:26:04:4c:44:96:5a:82:64:63:36:fd:0e:b7:
         18:85:90:db:79:28:2b:f5:af:f5:4d:ff:df:ab:86:26:6c:6c:
         6b:3c:8b:72:6b:1c:2c:ed:07:2f:42:17:dc:0d:33:f5:c8:23:
         ab:a2:05:38:ba:e0:2c:54:a4:14:b6:d4:bd:65:a7:36:c3:17:
         93:1e:7b:cb:a2:1a:26:1d:e3:af:c2:5d:dc:f2:c9:f8:ea:77:
         2e:ef:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:50:26 2025 by rpki-client