Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e362e302e302f31382d3234203d3e203131353632.roa
File:                     3139302e362e302e302f31382d3234203d3e203131353632.roa (raw, json)
Hash identifier:          xYQ+u+7NThLZ4VYgkPrBU/Z8e6VXPCzPb3Sb8EuMj+I=
Subject key identifier:   9C:95:56:20:5A:C6:2F:8C:63:35:D7:ED:05:FA:11:7A:8C:98:E5:DC
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       65FBC9580ABC8ED74BA92A809F4B4431BDF09AF9
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e362e302e302f31382d3234203d3e203131353632.roa
Signing time:             Tue 04 Feb 2025 18:00:52 +0000
ROA not before:           Tue 04 Feb 2025 17:55:52 +0000
ROA not after:            Tue 03 Feb 2026 18:00:52 +0000
asID:                     11562
IP address blocks:        190.6.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fb:c9:58:0a:bc:8e:d7:4b:a9:2a:80:9f:4b:44:31:bd:f0:9a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Feb  4 17:55:52 2025 GMT
            Not After : Feb  3 18:00:52 2026 GMT
        Subject: CN=9C9556205AC62F8C6335D7ED05FA117A8C98E5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:7c:d9:be:38:b5:05:ee:34:9d:f0:b3:c9:
                    d7:cf:07:f6:ab:d3:10:5c:c7:f3:99:8d:89:41:03:
                    ad:2a:1c:ff:81:10:42:9e:27:37:94:08:50:c5:cf:
                    98:72:2e:ff:63:15:b9:50:da:54:c3:75:fc:26:cc:
                    0c:6b:3e:b3:c9:13:b4:26:6c:62:8b:5a:a1:ae:14:
                    7d:fa:1c:b4:c4:ca:1b:30:fb:03:e1:f7:67:8c:76:
                    6f:40:77:88:62:ee:ab:2a:ad:62:06:72:eb:45:d2:
                    f1:1c:61:f3:6e:86:3e:93:d9:9e:1c:e3:d5:12:9e:
                    55:75:0d:21:f8:d6:44:4f:9d:f5:6c:b9:28:42:97:
                    a7:76:e6:f1:08:8a:12:10:47:a9:fa:95:ea:4b:9f:
                    2e:e6:54:ee:66:cd:1e:1c:fa:c9:36:3a:e4:10:3b:
                    57:ce:81:7b:7a:1c:ea:a6:03:42:43:54:73:a6:13:
                    b7:c8:80:da:dc:2b:9e:8e:bc:05:97:4c:47:b3:f1:
                    78:56:45:53:8c:c0:be:e4:55:c2:d9:ea:bd:34:41:
                    62:d6:ae:bc:44:50:5b:7a:8e:0a:a2:8f:29:2b:24:
                    2e:42:72:25:aa:5b:cd:17:79:0b:0c:f0:55:41:0d:
                    0d:95:ba:1e:3a:eb:a7:04:d3:24:74:1e:e1:5d:26:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:95:56:20:5A:C6:2F:8C:63:35:D7:ED:05:FA:11:7A:8C:98:E5:DC
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e362e302e302f31382d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:3a:2d:60:ae:f8:71:94:6e:9b:51:b2:66:ff:f7:e4:bd:
         10:a9:8c:4f:db:97:d6:ce:f4:a9:cf:62:06:c2:de:d5:13:95:
         c6:9b:ca:02:fd:94:bf:22:8b:93:24:36:1d:e2:5f:09:be:a6:
         8a:26:6e:6b:de:b9:de:83:c4:e7:1c:5c:51:47:61:09:14:27:
         4f:0e:d2:7d:f8:2c:af:0e:8e:62:70:0d:4f:cc:d6:84:e5:a1:
         92:c1:ea:ca:22:06:83:5b:1d:c8:22:f0:b9:99:b0:6c:71:b0:
         24:73:63:28:4a:c7:ed:52:a4:e1:37:39:a7:d9:71:fc:7d:8b:
         1b:63:2c:d3:1a:25:7c:ce:60:21:33:2d:63:33:f5:73:ab:17:
         8d:7d:a8:f9:9d:7f:c0:10:95:71:a3:da:ce:d2:2c:c2:ae:1f:
         f3:79:f2:84:a4:2e:0e:93:1c:40:05:42:4a:41:0a:23:e4:70:
         06:de:99:cc:18:48:f4:ee:ca:90:82:8c:50:55:9f:6d:df:e8:
         ce:22:5d:4a:36:bd:ce:7f:50:e5:04:94:15:fe:08:f5:43:54:
         01:be:82:89:b0:d0:31:e1:ce:db:24:5e:7b:0c:f5:9e:b4:93:
         39:2f:55:3b:98:fc:23:eb:22:9a:7b:22:61:41:b7:3d:24:c2:
         09:fa:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:54 2025 by rpki-client