Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/3139302e38392e3233362e302f32332d3234203d3e20323639393532.roa
File:                     3139302e38392e3233362e302f32332d3234203d3e20323639393532.roa (raw, json)
Hash identifier:          G6/pOc5brzZAW/0s4/jdthaUGADi/J/GKM5eVlrwj1U=
Subject key identifier:   D4:52:3C:9C:DF:1F:E6:7E:A3:4E:EE:78:2B:D9:CD:C7:41:01:78:87
Certificate issuer:       /CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9
Certificate serial:       5941E2EFA38AC8D01C20F635C2140D13C873756E
Authority key identifier: 6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/3139302e38392e3233362e302f32332d3234203d3e20323639393532.roa
Signing time:             Tue 04 Feb 2025 18:23:00 +0000
ROA not before:           Tue 04 Feb 2025 18:18:00 +0000
ROA not after:            Tue 03 Feb 2026 18:23:00 +0000
asID:                     269952
IP address blocks:        190.89.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:41:e2:ef:a3:8a:c8:d0:1c:20:f6:35:c2:14:0d:13:c8:73:75:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9
        Validity
            Not Before: Feb  4 18:18:00 2025 GMT
            Not After : Feb  3 18:23:00 2026 GMT
        Subject: CN=D4523C9CDF1FE67EA34EEE782BD9CDC741017887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:64:68:a4:0e:b1:91:90:7f:bd:62:a7:4b:
                    47:29:51:e3:b5:00:bb:42:7a:75:ba:b6:a9:ca:e8:
                    12:a9:47:7b:d3:4c:14:3d:10:62:24:1f:38:fe:78:
                    7c:16:9b:e8:59:de:03:85:69:80:7c:6b:af:cf:a4:
                    36:8e:3b:85:92:e5:0f:fc:7e:58:61:e0:28:e1:37:
                    9f:5a:1b:f8:e1:43:85:67:84:23:5d:74:14:88:5c:
                    44:0a:1a:7e:68:1a:62:15:15:cc:2b:9f:e2:a9:b4:
                    b1:17:fc:8f:64:9f:cd:09:f1:ed:73:99:94:b4:4b:
                    5d:8c:c9:22:4e:5b:34:af:73:b0:19:e1:03:6a:da:
                    9c:b3:96:04:e7:6f:e0:e1:28:19:11:dc:1d:4b:5c:
                    8f:34:4c:0e:d3:18:27:41:fe:71:88:a3:f0:46:84:
                    78:5e:cc:ed:d4:77:fe:41:eb:98:0d:92:90:55:0b:
                    00:92:6d:bd:d9:cf:35:c8:e2:65:4f:05:58:1d:15:
                    0f:cb:ab:25:de:57:f1:22:90:6e:81:73:f8:89:10:
                    98:8d:31:87:67:f7:4c:2b:d2:6a:10:62:19:e1:13:
                    a9:d9:fe:3b:71:cf:fd:08:57:b9:49:14:b0:31:41:
                    1e:f0:63:ae:40:02:bb:e4:2f:84:71:5e:b6:87:1f:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:52:3C:9C:DF:1F:E6:7E:A3:4E:EE:78:2B:D9:CD:C7:41:01:78:87
            X509v3 Authority Key Identifier:
                keyid:6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/3139302e38392e3233362e302f32332d3234203d3e20323639393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:b1:f5:70:0d:e2:25:63:46:32:1e:47:c6:96:68:5c:4e:
         85:2a:f1:90:69:14:71:b0:6a:e6:8a:25:a1:da:ef:88:48:e6:
         40:36:b3:79:b4:7e:01:d1:34:66:49:5d:36:fe:ea:bc:51:94:
         94:c2:ed:d3:5a:c7:18:ce:f2:8a:f8:11:19:aa:fa:74:d4:9a:
         1b:5a:52:69:f1:d3:64:af:a8:b5:f1:6f:a5:69:c9:e4:95:6e:
         0a:73:f3:df:b1:57:4a:16:2a:38:cf:9c:f8:18:17:e5:49:5b:
         4e:76:24:a5:0a:43:39:bd:20:b4:c7:11:09:82:39:90:6e:9d:
         65:4d:82:dc:ba:7e:66:63:19:89:b0:e2:6a:63:0a:22:40:75:
         93:94:ac:07:f8:99:d5:32:8a:0e:ec:90:4c:b9:2b:71:6c:09:
         9e:09:22:39:f5:0d:44:c0:d0:69:dd:3f:45:e5:4b:db:64:cc:
         56:46:1e:e4:1f:4e:d6:77:52:d0:0e:cf:ee:20:0c:99:9e:0a:
         45:1d:7e:1f:9e:f6:a9:6d:4c:21:6b:c7:e7:65:65:78:c8:91:
         49:ae:47:ed:ec:35:57:8d:1d:38:3d:ee:0b:ee:d9:da:be:88:
         f3:b2:34:37:95:88:3e:07:eb:4d:23:ca:62:2e:72:97:cb:e8:
         21:9c:31:ad
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWUHi76OKyNAcIPY1whQNE8hzdW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJBQTU0NkREQjZFQ0U1MDFEMzZFQ0QzNTA2REQ4NkVB
NUVBNTZGOTAeFw0yNTAyMDQxODE4MDBaFw0yNjAyMDMxODIzMDBaMDMxMTAvBgNV
BAMTKEQ0NTIzQzlDREYxRkU2N0VBMzRFRUU3ODJCRDlDREM3NDEwMTc4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2mRopA6xkZB/vWKnS0cpUeO1
ALtCenW6tqnK6BKpR3vTTBQ9EGIkHzj+eHwWm+hZ3gOFaYB8a6/PpDaOO4WS5Q/8
flhh4CjhN59aG/jhQ4VnhCNddBSIXEQKGn5oGmIVFcwrn+KptLEX/I9kn80J8e1z
mZS0S12MySJOWzSvc7AZ4QNq2pyzlgTnb+DhKBkR3B1LXI80TA7TGCdB/nGIo/BG
hHhezO3Ud/5B65gNkpBVCwCSbb3ZzzXI4mVPBVgdFQ/LqyXeV/EikG6Bc/iJEJiN
MYdn90wr0moQYhnhE6nZ/jtxz/0IV7lJFLAxQR7wY65AArvkL4RxXraHH+FPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1FI8nN8f5n6jTu54K9nNx0EBeIcwHwYDVR0j
BBgwFoAUa6pUbdtuzlAdNuzTUG3YbqXqVvkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NjAyODM5Qzk5OTE0NjE0MzlFQjU1MTJEQzZDMzkwMEVB
QjlEQkEzRkIwOENFRThEQjExMEU4NkNDMjlENjg2LzAvNkJBQTU0NkREQjZFQ0U1
MDFEMzZFQ0QzNTA2REQ4NkVBNUVBNTZGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QkFBNTQ2RERCNkVDRTUwMUQz
NkVDRDM1MDZERDg2RUE1RUE1NkY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTYwMjgzOUM5OTkxNDYxNDM5RUI1NTEyREM2QzM5MDBFQUI5REJBM0ZC
MDhDRUU4REIxMTBFODZDQzI5RDY4Ni8wLzMxMzkzMDJlMzgzOTJlMzIzMzM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvlns
MA0GCSqGSIb3DQEBCwUAA4IBAQCC4rH1cA3iJWNGMh5HxpZoXE6FKvGQaRRxsGrm
iiWh2u+ISOZANrN5tH4B0TRmSV02/uq8UZSUwu3TWscYzvKK+BEZqvp01JobWlJp
8dNkr6i18W+lacnklW4Kc/PfsVdKFio4z5z4GBflSVtOdiSlCkM5vSC0xxEJgjmQ
bp1lTYLcun5mYxmJsOJqYwoiQHWTlKwH+JnVMooO7JBMuStxbAmeCSI59Q1EwNBp
3T9F5UvbZMxWRh7kH07Wd1LQDs/uIAyZngpFHX4fnvapbUwha8fnZWV4yJFJrkft
7DVXjR04Pe4L7tnavojzsjQ3lYg+B+tNI8piLnKXy+ghnDGt
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:05:47 2025 by rpki-client