Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e362e302e302f31382d3234203d3e203131353632.roa
File:                     3139302e362e302e302f31382d3234203d3e203131353632.roa (raw, json)
Hash identifier:          k7u9La5QJfIkeVgYmmWQmDlol6UeYvt2K4SZ7u3EwFc=
Subject key identifier:   04:13:C9:E2:6F:83:BB:6B:1A:A9:19:D6:8E:71:5E:2B:F6:DA:B5:66
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       473C80F0A182E4D66ED7FB04CE13257E4143373C
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e362e302e302f31382d3234203d3e203131353632.roa
Signing time:             Tue 05 Mar 2024 17:53:27 +0000
ROA not before:           Tue 05 Mar 2024 17:48:27 +0000
ROA not after:            Tue 04 Mar 2025 17:53:27 +0000
asID:                     11562
IP address blocks:        190.6.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3c:80:f0:a1:82:e4:d6:6e:d7:fb:04:ce:13:25:7e:41:43:37:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Mar  5 17:48:27 2024 GMT
            Not After : Mar  4 17:53:27 2025 GMT
        Subject: CN=0413C9E26F83BB6B1AA919D68E715E2BF6DAB566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2d:e1:a6:32:14:8c:23:08:0b:40:e6:8e:0d:
                    d5:1f:8c:89:6e:e1:34:36:5c:af:35:ff:0c:3b:b9:
                    3b:a7:13:fa:16:f1:8b:a0:8f:21:aa:af:4d:d0:c8:
                    5d:a7:71:18:05:12:fe:e2:77:10:c4:4f:6c:5c:a4:
                    e6:77:44:71:46:c1:63:f5:be:84:d5:f0:95:a2:a3:
                    f6:eb:ae:c4:d1:3a:22:0d:76:a2:95:ea:53:c6:e3:
                    c5:2f:cc:50:02:92:e1:79:7f:4a:8a:a5:3a:68:92:
                    95:e4:8f:f8:52:1f:a9:1b:6b:3a:26:c1:16:27:0e:
                    5a:9f:58:4a:e4:77:ab:c7:d9:0a:6d:b4:5b:c7:70:
                    0b:a0:2e:91:2d:61:65:cd:eb:8d:ef:be:b7:11:4e:
                    c5:0f:66:68:c4:45:ef:bb:bd:fc:3e:59:9e:99:8c:
                    9e:48:32:3e:b8:02:bb:70:c2:ae:c9:03:7e:37:dd:
                    6a:91:a4:40:2c:c2:d3:b4:4a:13:35:6e:6d:5d:3a:
                    d7:5d:41:f4:4a:d9:c5:1f:6b:e1:84:bf:62:ba:b9:
                    97:23:c3:a3:01:86:b4:cd:e7:e0:af:80:a9:6d:1c:
                    51:3f:c8:1f:8d:29:c6:73:9f:39:5a:6b:48:13:8e:
                    4d:48:60:a9:1a:31:0d:eb:1b:77:d1:fc:8c:fc:ed:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:C9:E2:6F:83:BB:6B:1A:A9:19:D6:8E:71:5E:2B:F6:DA:B5:66
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e362e302e302f31382d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:62:50:0d:36:53:33:6b:7b:45:8a:29:21:b6:06:c0:b8:
         f1:ec:5f:f9:bd:10:1c:9e:f8:15:6b:8c:e3:ab:09:0f:83:67:
         91:be:a4:91:ad:a4:fa:5d:62:58:74:30:47:da:21:f1:70:14:
         bd:91:c6:2d:85:54:49:b3:c8:3d:52:19:d3:c4:ac:ea:45:18:
         d7:46:08:90:5a:8a:50:f4:8f:e4:48:fe:f2:42:af:61:71:46:
         cb:94:ba:30:77:4e:7b:48:c2:d6:08:21:a8:ad:b7:dd:c8:3c:
         5b:c8:a9:5a:f5:9e:fd:45:cb:6a:af:b8:8e:96:a6:5c:8e:38:
         6d:fc:15:72:81:a7:a2:a0:a1:2d:db:9e:f7:5a:27:c0:ae:3b:
         48:29:d4:b8:ed:93:88:95:a7:ee:ba:48:61:a3:2e:50:a2:ea:
         cf:84:e7:34:9f:3b:4b:ff:d2:af:2c:8d:b5:e6:80:27:ae:c5:
         80:3d:9d:29:fc:f1:cf:4c:2d:f9:35:83:06:d4:26:52:66:06:
         66:d5:9b:b9:b2:bf:07:6d:c8:26:f3:67:88:9a:cb:57:d8:9a:
         09:03:51:f6:07:1d:4b:aa:76:13:63:62:80:b7:05:4c:0b:01:
         08:92:a4:d1:10:a3:47:32:dd:b1:75:ab:8b:b0:7f:8a:d3:99:
         47:6f:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org